hivex
« Back to VersTracker
Description:
Library and tools for extracting the contents of Windows Registry hive files
Type: Formula  |  Latest Version: 1.3.24@0  |  Tracked Since: Nov 5, 2025
Links: Homepage  |  formulae.brew.sh
Category: Developer tools
Tags: windows registry forensics hive libguestfs
Install: brew install hivex
About:
Hivex is a lightweight library and set of tools designed specifically for accessing and modifying Windows Registry hive files without requiring a Windows environment. It provides a robust API for parsing binary hive structures, extracting keys, values, and data, making it invaluable for forensic analysis and system recovery tasks.
Key Features:
  • Self-contained library with no Windows dependencies
  • Read and write access to registry hive files
  • Bindings for multiple programming languages (C, Perl, Python)
  • Command-line tools for inspection and extraction
Use Cases:
  • Windows registry forensic analysis on Linux systems
  • Extracting configuration data from offline Windows installations
  • Automated registry modification for system administration
Alternatives:
  • chntpw – chntpw focuses on password editing, while hivex provides comprehensive registry access
  • offreg – offreg is Microsoft's official API, hivex is cross-platform and open-source
Version History
Detected Version Rev Change Commit
Nov 5, 2025 6:44am 1 VERSION_BUMP 64a6a287
Nov 5, 2025 6:44am 1 VERSION_BUMP 7563a5e7
Sep 13, 2025 3:22pm 0 VERSION_BUMP 8d57f370
Sep 13, 2024 9:16pm 0 VERSION_BUMP 3df8dd15