I've written an application that indexes the registry and another application that searches this index.
This results in near instant results while you type, this allows you to quickly search several things.
See this video demonstration, shows how quick results are, three different searches and two registry jumps.
For indexing purposes, I'm using Lucene.net, doesn't that sound familiar?
This allows me to index data straight out of the registry, without using a SQL database to store the data in. Furthermore, Lucene.net has a lot of indexing options and search related features which come in handy!
This index will be stored in
%LOCALAPPDATA%\RegistryIndex, and has a size of around 160 MB.
Application 1: RegistryIndex.exe
This will dump the whole registry to the above mentioned index folder,
please note that
HKEY_CURRENT_USER are shortcut hives and thus not indexed.
Although it does work without you might want to configure it to automatically run as administrator.
Once the application shows that it is done, you can close the window and thus the index has been made.
Application 2: RegistrySearch.exe
This one is simple, type something to search in the text box above and results will flow in.
Typing incorrect syntax will result in a yellow text box and the error in the status bar at the bottom.
Special search features like wildcard and boolean operations are supported, see Query Syntax for more information. Please note that specifying fields will not work in the current setting, the system searches in a concatenation of tokenized path and value. So A\B\C with value D E F becomes A B C D E F.
Example of searching an exact path:
The search is limited to 1000 results.
Double click an entry to jump to it in the registry, this uses regjump.exe from SysInternals.
You need to run the search program as an administrator for the jump to work, accept EULA the first time.
See the current version as a Technical Preview, it does work but could use refactoring and make-up.
- Application icon & version
- Highlighting results
- Installer package
- Monitor service (Tracks registry changes using a hook and update the index)
- 21/03: Now stores in
%LOCALAPPDATA%, asks for
Click here to download, unzip all files to a preferred location, create shortcuts to RegistryIndex/Search.exe.
It's non-obfuscated, so to inspect the IL you can use Reflector if you want to.
I might release source when it is refactored with a bit more features, perhaps I can put it on CodePlex.