decalage2 / olefile
olefile is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office 97-2003 documents, vbaProject.bin in MS Office 2007+ files, Image Composer and FlashPix files, Outlook messages, StickyNotes, several Microscopy file fo…
☆230Updated 3 weeks ago
Related projects ⓘ
Alternatives and complementary repositories for olefile
- A VBA p-code disassembler☆458Updated 3 years ago
- Pure Python parser for Windows Registry hives.☆426Updated 11 months ago
- Extract embedded files and macros from office documents.☆178Updated 11 months ago
- ETW Python Library☆268Updated last year
- Library and tools to access the Windows Prefetch File (SCCA) format.☆71Updated this week
- Windows Registry Knowledge Base☆162Updated last month
- Library and tools to access the OLE 2 Compound File (OLECF) format☆69Updated 3 months ago
- Python module to read, parse and converting Microsoft Outlook MSG E-Mail files.☆53Updated last week
- Tool suite for inspecting NTFS artifacts.☆216Updated last year
- Pure Python parser for Application Compatibility Shim Databases (.sdb files)☆106Updated 3 years ago
- Windows Shortcut file (LNK) parser☆71Updated 6 months ago
- Static analysis tools for Microsoft Office Open XML files and documents☆68Updated 7 years ago
- Python bindings for https://github.com/omerbenamram/evtx/☆49Updated 2 weeks ago
- Regipy is an os independent python library for parsing offline registry hives☆244Updated 2 months ago
- python eml parser module☆215Updated 2 weeks ago
- Open source Python library for NTFS analysis☆80Updated 6 years ago
- Python bindings for The Sleuth Kit (libtsk)☆93Updated last month
- Windows registry file format specification☆325Updated 6 years ago
- Python script to parse the NTFS USN Journal☆107Updated 2 years ago
- Python library to parse and read Microsoft minidump file format☆272Updated 3 months ago
- Parse evtx files and detect use of the DanderSpritz eventlogedit module☆147Updated 6 years ago
- Library and tools to access the Volume Shadow Snapshot (VSS) format☆110Updated 3 months ago
- Commandline low level file extractor for NTFS☆274Updated 5 years ago
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆268Updated 6 months ago
- Yet another library library (and tools)☆201Updated last month
- A codebase aimed to make interaction with Windows and native execution easier☆582Updated 2 weeks ago
- Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.☆341Updated 3 months ago
- Windows Shortcut file (LNK) parser☆134Updated 2 years ago
- Python module to manipulate NTFS Alternate Data Stream (ADS) in Python☆56Updated 5 years ago