mandiant/ShimCacheParser — pull request #1 by williballenthin (2013-06-13 19:29:57+00:00)
Title: Add support for .reg files

Add support for parsing .reg registry exports and extracting AppCompat info from these.

Parsing is a bit brittle, but .reg doesn't change often.

Note, I changed the meaning of the --reg CLI option, and added (-i, --hive) for parsing raw registry hives. (-r, --reg) is now for parsing .reg files.