decalage2 / olefile
olefile is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office 97-2003 documents, vbaProject.bin in MS Office 2007+ files, Image Composer and FlashPix files, Outlook messages, StickyNotes, several Microscopy file fo…
☆235Updated 2 months ago
Alternatives and similar repositories for olefile:
Users that are interested in olefile are comparing it to the libraries listed below
- ETW Python Library☆272Updated last year
- Regipy is an os independent python library for parsing offline registry hives☆249Updated last month
- Extract embedded files and macros from office documents.☆178Updated last year
- Python script to parse the NTFS USN Journal☆109Updated 2 years ago
- A VBA p-code disassembler☆459Updated 3 years ago
- Tool suite for inspecting NTFS artifacts.☆216Updated last year
- Windows registry file format specification☆335Updated 6 years ago
- python eml parser module☆219Updated 2 months ago
- Library and tools to access the OLE 2 Compound File (OLECF) format☆69Updated 5 months ago
- Windows Shortcut file (LNK) parser☆79Updated 8 months ago
- Pure Python parser for Windows Registry hives.☆426Updated last year
- Windows Registry Knowledge Base☆169Updated 3 months ago
- Parser for $LogFile on NTFS☆192Updated last year
- Pure Python parser for Application Compatibility Shim Databases (.sdb files)☆107Updated 3 years ago
- Python bindings for https://github.com/omerbenamram/evtx/☆50Updated last month
- Library and tools to access the Windows Prefetch File (SCCA) format.☆72Updated 3 weeks ago
- Commandline low level file extractor for NTFS☆277Updated 5 years ago
- a vba pcode decompiler based on pcodedmp☆107Updated 3 years ago
- VBA Dynamic Hook dynamically analyzes VBA macros inside Office documents by hooking function calls☆147Updated 8 years ago
- Windows Shortcut file (LNK) parser☆134Updated 2 years ago
- Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.☆108Updated last week
- A tool for detecting VBA stomping.☆97Updated 2 years ago
- Parser for $UsnJrnl on NTFS☆108Updated 2 years ago
- Open source Python library for NTFS analysis☆81Updated 7 years ago
- Yet another library library (and tools)☆202Updated 3 weeks ago
- Library and tools to access the Volume Shadow Snapshot (VSS) format☆111Updated 5 months ago
- Library and tools to access the Windows Shortcut File (LNK) format☆202Updated 3 months ago
- EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.☆193Updated 4 years ago
- Static analysis tools for Microsoft Office Open XML files and documents☆68Updated 7 years ago
- Automatic YARA rule generation for Malpedia☆156Updated 2 years ago