Changes to unique key paths to detect Windows NT SYSTEM file (#167)

log2timeline · Oct 6, 2020 · 0f96f2a · 0f96f2a
1 parent 11372a0
commit 0f96f2a
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/config/dpkg/changelog b/config/dpkg/changelog
@@ -1,5 +1,5 @@
-dfwinreg (20201002-1) unstable; urgency=low
+dfwinreg (20201006-1) unstable; urgency=low
 
   * Auto-generated
 
- -- Log2Timeline maintainers <log2timeline-maintainers@googlegroups.com>  Fri, 02 Oct 2020 19:58:52 +0200
+ -- Log2Timeline maintainers <log2timeline-maintainers@googlegroups.com>  Tue, 06 Oct 2020 12:52:21 +0200
diff --git a/dfwinreg/__init__.py b/dfwinreg/__init__.py
@@ -5,4 +5,4 @@
 that provides read-only access to Windows Registry objects.
 """
 
-__version__ = '20201002'
+__version__ = '20201006'
diff --git a/dfwinreg/registry.py b/dfwinreg/registry.py
@@ -81,7 +81,7 @@ class WinRegistry(object):
       WinRegistryFileMapping(
           'HKEY_LOCAL_MACHINE\\System',
           '%SystemRoot%\\System32\\config\\SYSTEM',
-          ['\\MountedDevices', '\\RNG', '\\Select', '\\Setup']),
+          ['\\MountedDevices', '\\Select', '\\Setup']),
   ]
 
   _ROOT_KEY_ALIASES = {