decalage2 / olefile
olefile is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office 97-2003 documents, vbaProject.bin in MS Office 2007+ files, Image Composer and FlashPix files, Outlook messages, StickyNotes, several Microscopy file fo…
☆240Updated 5 months ago
Alternatives and similar repositories for olefile:
Users that are interested in olefile are comparing it to the libraries listed below
- ETW Python Library☆279Updated last year
- Yet another library library (and tools)☆206Updated 3 months ago
- python eml parser module☆221Updated 4 months ago
- Extract embedded files and macros from office documents.☆179Updated last year
- Pure Python parser for Windows Registry hives.☆428Updated 2 months ago
- A VBA p-code disassembler☆467Updated 3 years ago
- Python script to parse the NTFS USN Journal☆108Updated 2 years ago
- Regipy is an os independent python library for parsing offline registry hives☆254Updated 3 months ago
- a vba pcode decompiler based on pcodedmp☆109Updated 3 years ago
- Library and tools to access the Windows XML Event Log (EVTX) format☆197Updated 6 months ago
- Python module to read, parse and converting Microsoft Outlook MSG E-Mail files.☆54Updated 3 months ago
- VBA Dynamic Hook dynamically analyzes VBA macros inside Office documents by hooking function calls☆147Updated 9 years ago
- Library and tools to access the Windows Prefetch File (SCCA) format.☆73Updated 3 months ago
- Windows registry file format specification☆335Updated 6 years ago
- RE-lab is a joint effort of gimp.ru team and developers of various open source projects to do clean-room reverse engineering of various p…☆78Updated 3 years ago
- Static analysis tools for Microsoft Office Open XML files and documents☆68Updated 7 years ago
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆289Updated 10 months ago
- Pure Python parser for Application Compatibility Shim Databases (.sdb files)☆109Updated 4 years ago
- Windows Registry Knowledge Base☆173Updated 5 months ago
- WinAppDbg Debugger☆455Updated last year
- Parser for $LogFile on NTFS☆193Updated last year
- Vba2Graph - Generate call graphs from VBA code, for easier analysis of malicious documents.☆279Updated 3 years ago
- Library and tools to access the OLE 2 Compound File (OLECF) format☆69Updated 7 months ago
- Python wrapper for ssdeep fuzzy hashing library☆150Updated 3 years ago
- Library and tools to access the Personal Folder File (PFF) and the Offline Folder File (OFF) format☆307Updated 7 months ago
- Tool suite for inspecting NTFS artifacts.☆219Updated last year
- Windows Shortcut file (LNK) parser☆85Updated last week
- Parsing of YARA rules into AST and building new rulesets in C++.☆122Updated last week
- Library and tools to access the Volume Shadow Snapshot (VSS) format☆111Updated 7 months ago
- Create an entire YARA rule via Python? Whhhhhhaatttt?☆73Updated 6 years ago