本文整理汇总了C#中RegistryHive.ParseHive方法的典型用法代码示例。如果您正苦于以下问题:C# RegistryHive.ParseHive方法的具体用法?C# RegistryHive.ParseHive怎么用?C# RegistryHive.ParseHive使用的例子?那么恭喜您, 这里精选的方法代码示例或许可以为您提供帮助。您也可以进一步了解该方法所在类RegistryHive
的用法示例。
在下文中一共展示了RegistryHive.ParseHive方法的9个代码示例,这些例子默认根据受欢迎程度排序。您可以为喜欢或者感觉有用的代码点赞,您的评价将有助于系统推荐出更棒的C#代码示例。
示例1: ShouldIncreaseSoftParsingError
public void ShouldIncreaseSoftParsingError()
{
var usrclass = new RegistryHive(@"..\..\Hives\UsrClass-win7.dat");
usrclass.RecoverDeleted = true;
Check.That(usrclass.SoftParsingErrors).IsEqualTo(0);
usrclass.ParseHive();
Check.That(usrclass.SoftParsingErrors).IsGreaterThan(0);
}
示例2: ExportUsrClassToCommonFormatWithDeleted
public void ExportUsrClassToCommonFormatWithDeleted()
{
var UsrclassDeleted = new RegistryHive(@"..\..\Hives\UsrClassDeletedBags.dat");
UsrclassDeleted.RecoverDeleted = true;
UsrclassDeleted.FlushRecordListsAfterParse = false;
UsrclassDeleted.ParseHive();
UsrclassDeleted.ExportDataToCommonFormat("UsrClassDeletedExport.txt", true);
UsrclassDeleted = new RegistryHive(@"..\..\Hives\UsrClassDeletedBags.dat");
UsrclassDeleted.FlushRecordListsAfterParse = true;
UsrclassDeleted.ParseHive();
UsrclassDeleted.ExportDataToCommonFormat("UsrClassDeletedWithFlushExport.txt", true);
}
示例3: ShouldCatchVKRecordThatsTooSmallFromSlackSpace
public void ShouldCatchVKRecordThatsTooSmallFromSlackSpace()
{
var usrclass = new RegistryHive(@"..\..\Hives\NTUSER slack.DAT");
usrclass.RecoverDeleted = true;
usrclass.ParseHive();
}
示例4: ShouldFindADBRecordWhileParsing
public void ShouldFindADBRecordWhileParsing()
{
var usrclass = new RegistryHive(@"..\..\Hives\SYSTEM");
usrclass.ParseHive();
}
示例5: ShouldCatchSlackRecordTooSmallToGetSignatureFrom
public void ShouldCatchSlackRecordTooSmallToGetSignatureFrom()
{
var usrclass = new RegistryHive(@"..\..\Hives\UsrClassJVM.dat");
usrclass.RecoverDeleted = true;
usrclass.ParseHive();
}
示例6: ShouldCatchNKRecordThatsTooSmallFromSlackSpace
public void ShouldCatchNKRecordThatsTooSmallFromSlackSpace()
{
var usrclass = new RegistryHive(@"..\..\Hives\ERZ_Win81_UsrClass.dat");
usrclass.RecoverDeleted = true;
usrclass.ParseHive();
}
示例7: InitializeObjects
public void InitializeObjects()
{
Debug.WriteLine("Initializing hives...");
SamOnDemand = new RegistryHiveOnDemand(@"..\..\Hives\SAM");
SamHasBigEndianOnDemand = new RegistryHiveOnDemand(@"..\..\Hives\SAM_hasBigEndianDWord");
SamDupeNameOnDemand = new RegistryHiveOnDemand(@"..\..\Hives\SAM_DUPENAME");
NtUser1OnDemand = new RegistryHiveOnDemand(@"..\..\Hives\NTUSER1.DAT");
UsrClassDeletedBagsOnDemand = new RegistryHiveOnDemand(@"..\..\Hives\UsrClassDeletedBags.dat");
SoftwareOnDemand = new RegistryHiveOnDemand(@"..\..\Hives\SOFTWARE");
SystemOnDemand = new RegistryHiveOnDemand(@"..\..\Hives\SYSTEM");
Bcd = new RegistryHive(@"..\..\Hives\BCD");
Bcd.FlushRecordListsAfterParse = false;
Bcd.RecoverDeleted = true;
Bcd.ParseHive();
UsrclassDeleted = new RegistryHive(@"..\..\Hives\UsrClassDeletedBags.dat");
UsrclassDeleted.RecoverDeleted = true;
UsrclassDeleted.FlushRecordListsAfterParse = false;
UsrclassDeleted.ParseHive();
UsrclassAcronis = new RegistryHive(@"..\..\Hives\Acronis_0x52_Usrclass.dat");
UsrclassAcronis.RecoverDeleted = true;
UsrclassAcronis.FlushRecordListsAfterParse = false;
UsrclassAcronis.ParseHive();
UsrClass1 = new RegistryHive(@"..\..\Hives\UsrClass 1.dat");
UsrClass1.RecoverDeleted = true;
UsrClass1.FlushRecordListsAfterParse = false;
UsrClass1.ParseHive();
UsrClass1OnDemand = new RegistryHiveOnDemand(@"..\..\Hives\UsrClass 1.dat");
UsrClassBeef = new RegistryHive(@"..\..\Hives\UsrClass BEEF000E.dat");
UsrClassBeef.RecoverDeleted = true;
UsrClassBeef.FlushRecordListsAfterParse = false;
UsrClassBeef.ParseHive();
NtUserSlack = new RegistryHive(@"..\..\Hives\NTUSER slack.DAT");
NtUserSlack.FlushRecordListsAfterParse = false;
NtUserSlack.ParseHive();
Sam = new RegistryHive(@"..\..\Hives\SAM");
Sam.FlushRecordListsAfterParse = false;
Sam.ParseHive();
SamRootValue = new RegistryHive(@"..\..\Hives\SAM_RootValue");
SamRootValue.FlushRecordListsAfterParse = false;
SamRootValue.ParseHive();
Security = new RegistryHiveOnDemand(@"..\..\Hives\SECURITY");
DriversOnDemand = new RegistryHiveOnDemand(@"..\..\Hives\DRIVERS");
Drivers = new RegistryHive(@"..\..\Hives\DRIVERS");
Drivers.FlushRecordListsAfterParse = false;
Drivers.RecoverDeleted = true;
Drivers.ParseHive();
System = new RegistryHive(@"..\..\Hives\System");
System.FlushRecordListsAfterParse = false;
System.ParseHive();
SanOther = new RegistryHiveOnDemand(@"..\..\Hives\SAN(OTHER)");
UsrClassFtp = new RegistryHiveOnDemand(@"..\..\Hives\UsrClass FTP.dat");
}
示例8: ShouldThrowExceptionWithBadHbinHeader
public void ShouldThrowExceptionWithBadHbinHeader()
{
Check.ThatCode(() =>{var r = new RegistryHive(@"..\..\Hives\SAMBadHBinHeader");r.ParseHive();}).Throws<Exception>();
}
示例9: ShouldThrowExceptionNoRootKey
public void ShouldThrowExceptionNoRootKey()
{
Check.ThatCode(() =>{var r = new RegistryHive(@"..\..\Hives\SECURITYNoRoot");r.ParseHive();}).Throws<KeyNotFoundException>();
}