# RegRippy

RegRippy is a Digital Forensics product. It runs on-premises. Pricing is free.

RegRippy is a modern Python 3 alternative to RegRipper for extracting data from Windows registry hives.

Checked October 2026.

## What is RegRippy?

RegRippy is a framework for reading and extracting useful forensics data from Windows registry hives, developed in modern Python 3 as an alternative to RegRipper. It utilizes William Ballenthin's python-registry to access the raw registry hives, aiming to provide a framework for developing plugins in an incident response scenario.

Tags: Registry, Windows

## Where it fits in your security program (NIST CSF 2.0)

- [Respond](https://cybersectools.com/guides/building-respond-program-small-team): helps you contain and handle incidents.

## Quick facts

- Category: [Security Operations](https://cybersectools.com/categories/security-operations) · [Digital Forensics](https://cybersectools.com/categories/digital-forensics)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 207
- Website: github.com

## Where it ranks

No shortlist covers this product's category yet. The closest is [Best MDR Solutions for Business](https://cybersectools.com/shortlists/best-mdr-solutions).

## RegRippy FAQ

### What is RegRippy?

RegRippy is a product in the Digital Forensics category. It covers Registry and Windows.

### What is the pricing for RegRippy?

RegRippy is free. Download and setup instructions are at https://github.com/airbus-cert/regrippy/.

### What are alternatives to RegRippy?

Alternatives to RegRippy listed on CybersecTools:

1. [ElcomSoft Advanced Office Password Recovery](https://cybersectools.com/tools/elcomsoft-advanced-office-password-recovery) - Password recovery tool for MS Office, WordPerfect, Lotus & other office docs. (Commercial)
2. [MailXaminer](https://cybersectools.com/tools/mailxaminer) - Windows-based email forensics tool for evidence recovery and analysis. (Commercial)
3. [Cyber Triage Automated Investigation Platform](https://cybersectools.com/tools/cyber-triage-automated-investigation-platform) - Automated DFIR platform for rapid incident investigation and endpoint triage (Commercial)
4. [WindowsSCOPE Cyber Forensics](https://cybersectools.com/tools/windowsscope-cyber-forensics) - GUI-based memory forensic capture tool for cyber forensics and cyber crime investigation. (Commercial)
5. [AhnLab A-FIRST 디지털 포렌식 서비스](https://cybersectools.com/tools/ahnlab-a-first-digital-forensics-service) - Digital forensics service for incident analysis and APT response (Commercial)

Compare all RegRippy alternatives at [https://cybersectools.com/alternatives/regrippy](https://cybersectools.com/alternatives/regrippy)

### What deployment and organization size does RegRippy fit?

RegRippy is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare RegRippy with similar solutions

- [RegRippy vs ElcomSoft Advanced Office Password Recovery](https://cybersectools.com/compare/elcomsoft-advanced-office-password-recovery-vs-regrippy)
- [RegRippy vs MailXaminer](https://cybersectools.com/compare/mailxaminer-vs-regrippy)
- [RegRippy vs Cyber Triage Automated Investigation Platform](https://cybersectools.com/compare/cyber-triage-automated-investigation-platform-vs-regrippy)

All alternatives to RegRippy: [/alternatives/regrippy](https://cybersectools.com/alternatives/regrippy)

---

Source: https://cybersectools.com/tools/regrippy

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on RegRippy: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md
