Esempio n. 1
0
        public void BlakeWordWheel()
        {
            var r = new WordWheelQuery();

            var reg = new RegistryHive(@"D:\SynologyDrive\Registry\NTUSER_dblake.DAT");

            reg.ParseHive();

            var key = reg.GetKey(@"Software\Microsoft\Windows\CurrentVersion\Explorer\WordWheelQuery");

            Check.That(r.Values.Count).IsEqualTo(0);

            r.ProcessValues(key);

            Check.That(r.Values.Count).IsEqualTo(6);
            Check.That(r.Errors.Count).IsEqualTo(0);

            var ff = (RegistryPlugin.WordWheelQuery.ValuesOut)r.Values[0];

            Check.That(ff.MruPosition).IsEqualTo(0);
            Check.That(ff.SearchTerm).Contains("defrag");

            ff = (RegistryPlugin.WordWheelQuery.ValuesOut)r.Values[1];

            Check.That(ff.MruPosition).IsEqualTo(0);
            Check.That(ff.SearchTerm).Contains("cc");

            ff = (RegistryPlugin.WordWheelQuery.ValuesOut)r.Values[2];

            Check.That(ff.MruPosition).IsEqualTo(1);
            Check.That(ff.SearchTerm).Contains("jboone");
        }
Esempio n. 2
0
        /// <summary>
        ///
        /// </summary>
        protected override void ProcessRecord()
        {
            switch (ParameterSetName)
            {
            case "ByVolume":
                WriteObject(WordWheelQuery.GetInstances(volume), true);
                break;

            case "ByPath":
                WriteObject(WordWheelQuery.Get(hivePath), true);
                break;
            }
        }