dfwinreg
Digital Forensics Windows Registry library for Python 3
uncategorizedRed Team
TooluncategorizedredLinuxKali LinuxPlatforms: Linux · Last verified September 6, 2026
dfWinReg, or Digital Forensics Windows Registry, provides read-only access to Windows Registry objects. The goal of dfWinReg is to provide a generic interface for accessing Windows Registry objects that resembles the Registry key hierarchy as seen on a live Windows system.
Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.
Getting started
Install on Kali Linux with `sudo apt install python3-dfwinreg`. See the official Kali tool page and upstream homepage linked above for full usage and configuration details.
