drop registry export · detect values with incorrect data types for their expected type · identify type confusion used to hide data or evade tools · surface malformed registry entries indicating tampering · runs locally
registry export
drop .reg or registry csv (multi-file)
or click
parses REG_SZ / REG_DWORD / REG_BINARY from .reg · or KeyPath + ValueType columns from csv exports
drop registry .reg export or csv with value types