Resource Center

Magnet Virtual Summit 2023

Just Another (Broken) Registry Parser (JARP)

On a few recent ransomware investigations, there was a need to read partially encrypted reg hives, but no FOSS tools existed to do so! 🙁

That’s why JARP was created 🙂

We’ll talk about JARP and the internals of registry hives, along with the challenges of working with semi-encrypted, essentially corrupted hives usually with no headers and random segments of encrypted data interspersed with normal data.

Holo, transparent letter M

Subscribe today to hear directly from Magnet Forensics on the latest product updates, industry trends, and company news.

Start modernizing your digital investigations today.