Running Reg Ripper ...
 
Notifications
Clear all

Running Reg Ripper on Unix/Linux through WINE

3 Posts
2 Users
0 Reactions
502 Views
benfindlay
(@benfindlay)
Estimable Member
Joined: 16 years ago
Posts: 142
Topic starter  

Hi all. Just wanted to see if anyone has tried running Reg Ripper through WINE on something like Mac OS X or Linux? I'm looking to do this out of convenience, as I would like to be able to run Reg Ripper alongside Autopsy/Sleuthkit without the need to continually restart the computer back into Windows, or move the files to another machine each time.

I have got it to run ok, but there are some notifications in Terminal upon launch and I am unable to subsequently select a plugin from the drop down menu; I just get a blank list that I can't click on. The 2 browse buttons (for locating the Hive files and report files) appear to work ok.

Anyone have any thoughts?

Thanks in advance

Ben


   
Quote
keydet89
(@keydet89)
Famed Member
Joined: 21 years ago
Posts: 3568
 

Just an FYI, but I think Rob Lee got this going in SIFT…


   
ReplyQuote
benfindlay
(@benfindlay)
Estimable Member
Joined: 16 years ago
Posts: 142
Topic starter  

Thanks for the tip Harlan, I looked at SIFT, and did some further work on this and got it working properly.

Just in case anyone else is trying to get this working I thought I'd share my results

Launching regripper direct from the Mac OS Terminal in 1 command (i.e. wine path/to/files/rr.exe) did not work for me as I could not select a plugin to run (the box was just blank).

Instead, if you change into the directory first, then type wine rr.exe it seems to run fine.

Strange results, but I'm not complaining as it works now!


   
ReplyQuote
Share: