Alternatives and similar repositories for msoffice

Users that are interested in msoffice are comparing it to the libraries listed below

• nmantani / FileInsight-plugins
  FileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis
  ☆162Updated 10 months ago
• libyal / libyal
  Yet another library library (and tools)
  ☆213Updated 2 weeks ago
• grierforensics / officedissector
  Static analysis tools for Microsoft Office Open XML files and documents
  ☆71Updated 8 years ago
• PoorBillionaire / USN-Journal-Parser
  Python script to parse the NTFS USN Journal
  ☆117Updated 3 years ago
• unixfreak0037 / officeparser
  Extract embedded files and macros from office documents.
  ☆186Updated last year
• JPCERTCC / MalConfScan-with-Cuckoo
  Cuckoo Sandbox plugin for extracts configuration data of known malware
  ☆135Updated last year
• MagnetForensics / Hibr2Bin
  Comae Hibernation File Decompressor
  ☆155Updated 2 years ago
• eset / vba-dynamic-hook
  VBA Dynamic Hook dynamically analyzes VBA macros inside Office documents by hooking function calls
  ☆150Updated 9 years ago
• CyberDefenseInstitute / CDIR
  CDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library
  ☆163Updated last year
• MalwareCantFly / Vba2Graph
  Vba2Graph - Generate call graphs from VBA code, for easier analysis of malicious documents.
  ☆278Updated 3 years ago
• JPCERTCC / STrelok
  Application for STIX v2.0 objects management and analysis
  ☆27Updated 8 years ago
• JPCERTCC / aa-tools
  Artifact analysis tools by JPCERT/CC Analysis Center
  ☆463Updated 3 months ago
• strozfriedberg / ntfs-linker
  An NTFS journal parser
  ☆83Updated 9 years ago
• williballenthin / python-sdb
  Pure Python parser for Application Compatibility Shim Databases (.sdb files)
  ☆109Updated 4 years ago
• godaddy / procfilter
  A YARA-integrated process denial framework for Windows
  ☆396Updated 5 years ago
• williballenthin / process-forest
  Reconstruct process trees from event logs
  ☆147Updated 5 years ago
• hatching / sflock
  Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.
  ☆83Updated last year
• libyal / libscca
  Library and tools to access the Windows Prefetch File (SCCA) format.
  ☆80Updated last month
• rjhansen / nsrllookup
  Checks with NSRL RDS servers looking for for hash matches
  ☆114Updated 4 years ago
• libyal / libevtx
  Library and tools to access the Windows XML Event Log (EVTX) format
  ☆218Updated last year
• NTFSparse / ntfs_parse
  NTFS parser, plus linking capabilites between MFT LogFile and UsnJrnl
  ☆38Updated 9 years ago
• ANSSI-FR / bootcode_parser
  A boot record parser that identifies known good signatures for MBR, VBR and IPL.
  ☆96Updated 9 months ago
• msuhanov / yarp
  Yet another registry parser
  ☆136Updated 3 years ago
• mandiant / Volatility-Plugins
  ☆82Updated 9 years ago
• codexgigassys / codex-backend
  Codex Gigas malware DNA profiling search engine discovers malware patterns and characteristics assisting individuals who are attracted in…
  ☆155Updated 5 years ago
• godaddy / yara-rules
  YARA rules for use with ProcFilter
  ☆88Updated 8 years ago
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆270Updated 4 years ago
• jjo-sec / pynetsim
  ☆18Updated 8 years ago
• d00rt / emotet_research
  ☆135Updated 6 years ago
• angelkillah / zer0m0n
  zer0m0n driver for cuckoo sandbox
  ☆88Updated 9 years ago