Esempio n. 1
0
        public void ShouldFindHitsValueNamesWithRegEx()
        {
            var usrClass1 = new RegistryHive(@"..\..\..\Hives\UsrClass 1.dat");

            usrClass1.RecoverDeleted             = true;
            usrClass1.FlushRecordListsAfterParse = false;
            usrClass1.ParseHive();

            var hits = usrClass1.FindInValueName("(App|Display)Name", true).ToList();

            Check.That(hits.Count).IsEqualTo(326);

            hits = usrClass1.FindInValueName("Capability(Co|Si)", true).ToList();

            Check.That(hits.Count).IsEqualTo(66);
        }
Esempio n. 2
0
        public void ShouldFind100HitsForUrlInKeyAndValueName()
        {
            var usrClass1 = new RegistryHive(@"..\..\..\Hives\UsrClass 1.dat");

            usrClass1.RecoverDeleted             = true;
            usrClass1.FlushRecordListsAfterParse = false;
            usrClass1.ParseHive();
            var keyHits = usrClass1.FindInKeyName("URL").ToList();

            Check.That(keyHits.Count).IsEqualTo(21);

            var valHits = usrClass1.FindInValueName("URL").ToList();

            Check.That(valHits.Count).IsEqualTo(79);
        }