Yaru v.1.22


A feature incorporated with the Windows version of yaru, is the ability to take a snapshot of the currently running hives and examine them. Since the Windows operating system locks down the active hives from other processes reading them, yaru can resort to raw NTFS disk reads to read any of the desired hives.Useful features of yaru include: (a) Show allocated, but unused, key/value data space [referred to here as cell slack space], (b) Show unallocated hive space [referred to here as hive slack space], (c) Traverse the hive slack space and enumerate deleted keys, (d) Report generation capability. For common registry forensics artifacts, a number of options are available to generate reports from live hives, copies of hives or hives from unmounted partitions, (e) Logging capability that records the user selections along with data values to a separate XML file for later review, (f) Ability to export any key in the hive under evaluation to a registration (.reg) file to be used for analysis, (g) Ability to process any hive using user defined templates, (h) Simple search capability: key names, value names, date ranges, or byte patterns and (i) Capability to view registry hives from a VMWare monolithic disk (VMDK) file.

A feature incorporated with the Windows ... yaru started as a simple version of a registry viewer and has grown in capability as it matured.

records, logging, values, review, partitions

  • Yaru
  • 1.22
  • TZWorks LLC
  • Win All
  • Shareware
  • 747 Kb
  • 452

Review Yaru

  • captcha
New System Tools software
  • DoYourData Start Menu for Mac  v.3.8DoYourData Start Menu for Mac is a smart and comprehensive start menu/taskbar for OS X and macOS. It is a Mac start menu similar to the start menu on Windows, however, it is much more powerful that Windows start menu.
  • VeloFull  v. is the complete caching solution. It combines all variations to cache HDD and SSD in one user interface. Making it possible to use SSD caching, RAM caching and RAM SSD caching simultaneously on one machine.
  • RAM Saver Pro  v.20.0Easy-to-use RAM optimizer tool that will keep your computer running faster. It increases the operation system performance by making more memory available for your applications.