decalage2 / olefile
olefile is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office 97-2003 documents, vbaProject.bin in MS Office 2007+ files, Image Composer and FlashPix files, Outlook messages, StickyNotes, several Microscopy file fo…
☆242Updated 5 months ago
Alternatives and similar repositories for olefile:
Users that are interested in olefile are comparing it to the libraries listed below
- Extract embedded files and macros from office documents.☆179Updated last year
- Pure Python parser for Windows Registry hives.☆428Updated 2 months ago
- A VBA p-code disassembler☆468Updated 3 years ago
- Library and tools to access the Windows XML Event Log (EVTX) format☆197Updated 6 months ago
- ETW Python Library☆279Updated last year
- Tool suite for inspecting NTFS artifacts.☆219Updated last year
- Windows Shortcut file (LNK) parser☆134Updated 2 years ago
- Regipy is an os independent python library for parsing offline registry hives☆254Updated 3 months ago
- Static analysis tools for Microsoft Office Open XML files and documents☆68Updated 7 years ago
- a vba pcode decompiler based on pcodedmp☆109Updated 3 years ago
- Windows registry file format specification☆335Updated 6 years ago
- Pure Python parser for Application Compatibility Shim Databases (.sdb files)☆109Updated 4 years ago
- python eml parser module☆223Updated 5 months ago
- A codebase aimed to make interaction with Windows and native execution easier☆620Updated 3 weeks ago
- Library and tools to access the OLE 2 Compound File (OLECF) format☆69Updated 7 months ago
- Parse YARA rules and operate over them more easily.☆184Updated last month
- Windows Registry Knowledge Base☆173Updated 5 months ago
- Python module to read, parse and converting Microsoft Outlook MSG E-Mail files.☆54Updated 3 months ago
- A VBA parser and emulation engine to analyze malicious macros.☆95Updated last month
- Library and tools to access the Windows Prefetch File (SCCA) format.☆73Updated 3 months ago
- Python bindings for https://github.com/omerbenamram/evtx/☆50Updated last month
- Windows DPAPI laboratory☆90Updated 7 years ago
- Python script to parse the NTFS USN Journal☆108Updated 2 years ago
- Yet another library library (and tools)☆206Updated 3 months ago
- Windows Shortcut file (LNK) parser☆85Updated this week
- A VBA parser and emulation engine to analyze malicious macros.☆1,079Updated 8 months ago
- ☆247Updated last year
- Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.☆348Updated 7 months ago
- Create an entire YARA rule via Python? Whhhhhhaatttt?☆73Updated 6 years ago
- A tool for detecting VBA stomping.☆99Updated 2 years ago