From 0f96f2a323e03d9bb9fbbb29330b96c5626b7376 Mon Sep 17 00:00:00 2001
From: Joachim Metz <joachim.metz@gmail.com>
Date: Tue, 6 Oct 2020 13:24:48 +0200
Subject: [PATCH] Changes to unique key paths to detect Windows NT SYSTEM file
 (#167)

---
 config/dpkg/changelog | 4 ++--
 dfwinreg/__init__.py  | 2 +-
 dfwinreg/registry.py  | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/config/dpkg/changelog b/config/dpkg/changelog
index 9355a7a..a4437d0 100644
--- a/config/dpkg/changelog
+++ b/config/dpkg/changelog
@@ -1,5 +1,5 @@
-dfwinreg (20201002-1) unstable; urgency=low
+dfwinreg (20201006-1) unstable; urgency=low
 
   * Auto-generated
 
- -- Log2Timeline maintainers <log2timeline-maintainers@googlegroups.com>  Fri, 02 Oct 2020 19:58:52 +0200
\ No newline at end of file
+ -- Log2Timeline maintainers <log2timeline-maintainers@googlegroups.com>  Tue, 06 Oct 2020 12:52:21 +0200
\ No newline at end of file
diff --git a/dfwinreg/__init__.py b/dfwinreg/__init__.py
index 9b7a31c..eea5a40 100644
--- a/dfwinreg/__init__.py
+++ b/dfwinreg/__init__.py
@@ -5,4 +5,4 @@
 that provides read-only access to Windows Registry objects.
 """
 
-__version__ = '20201002'
+__version__ = '20201006'
diff --git a/dfwinreg/registry.py b/dfwinreg/registry.py
index ae8fe11..e616ab2 100644
--- a/dfwinreg/registry.py
+++ b/dfwinreg/registry.py
@@ -81,7 +81,7 @@ class WinRegistry(object):
       WinRegistryFileMapping(
           'HKEY_LOCAL_MACHINE\\System',
           '%SystemRoot%\\System32\\config\\SYSTEM',
-          ['\\MountedDevices', '\\RNG', '\\Select', '\\Setup']),
+          ['\\MountedDevices', '\\Select', '\\Setup']),
   ]
 
   _ROOT_KEY_ALIASES = {