Resource Center

Magnet Virtual Summit 2023

Just Another (Broken) Registry Parser (JARP)

On a few recent ransomware investigations, there was a need to read partially encrypted reg hives, but no FOSS tools existed to do so! 🙁

That’s why JARP was created 🙂

We’ll talk about JARP and the internals of registry hives, along with the challenges of working with semi-encrypted, essentially corrupted hives usually with no headers and random segments of encrypted data interspersed with normal data.

Subscribe today to hear directly from Magnet Forensics on the latest product updates, industry trends, and company news.

Start modernizing your digital investigations today.