Alternatives and similar repositories for msoffice

Users that are interested in msoffice are comparing it to the libraries listed below

• libyal / libyal
  Yet another library library (and tools)
  ☆217Updated last month
• eset / vba-dynamic-hook
  VBA Dynamic Hook dynamically analyzes VBA macros inside Office documents by hooking function calls
  ☆151Updated 9 years ago
• MalwareCantFly / Vba2Graph
  Vba2Graph - Generate call graphs from VBA code, for easier analysis of malicious documents.
  ☆280Updated 4 years ago
• MagnetForensics / Hibr2Bin
  Comae Hibernation File Decompressor
  ☆155Updated 2 years ago
• unixfreak0037 / officeparser
  Extract embedded files and macros from office documents.
  ☆186Updated 2 years ago
• JPCERTCC / aa-tools
  Artifact analysis tools by JPCERT/CC Analysis Center
  ☆464Updated 5 months ago
• nmantani / FileInsight-plugins
  FileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis
  ☆163Updated last year
• grierforensics / officedissector
  Static analysis tools for Microsoft Office Open XML files and documents
  ☆73Updated 8 years ago
• CyberDefenseInstitute / CDIR
  CDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library
  ☆165Updated last year
• PoorBillionaire / USN-Journal-Parser
  Python script to parse the NTFS USN Journal
  ☆114Updated 3 years ago
• williballenthin / python-sdb
  Pure Python parser for Application Compatibility Shim Databases (.sdb files)
  ☆109Updated 5 years ago
• JPCERTCC / MalConfScan-with-Cuckoo
  Cuckoo Sandbox plugin for extracts configuration data of known malware
  ☆135Updated 2 years ago
• libyal / libevtx
  Library and tools to access the Windows XML Event Log (EVTX) format
  ☆225Updated last month
• JPCERTCC / STrelok
  Application for STIX v2.0 objects management and analysis
  ☆27Updated 8 years ago
• gleeda / memtriage
  Allows you to quickly query a Windows machine for RAM artifacts
  ☆218Updated 5 years ago
• msuhanov / regf
  Windows registry file format specification
  ☆353Updated 7 years ago
• fireeye / pywintrace
  ETW Python Library
  ☆293Updated 2 years ago
• godaddy / procfilter
  A YARA-integrated process denial framework for Windows
  ☆397Updated 5 years ago
• PoorBillionaire / Windows-Prefetch-Parser
  Parse Windows Prefetch files: Supports XP - Windows 10 Prefetch files
  ☆121Updated last year
• rjhansen / nsrllookup
  Checks with NSRL RDS servers looking for for hash matches
  ☆114Updated 4 years ago
• Neo23x0 / DLLRunner
  Smart DLL execution for malware analysis in sandbox systems
  ☆143Updated 10 years ago
• williballenthin / process-forest
  Reconstruct process trees from event logs
  ☆147Updated 5 years ago
• angelkillah / zer0m0n
  zer0m0n driver for cuckoo sandbox
  ☆87Updated 9 years ago
• codexgigassys / codex-backend
  Codex Gigas malware DNA profiling search engine discovers malware patterns and characteristics assisting individuals who are attracted in…
  ☆156Updated 6 years ago
• joesecurity / pafishmacro
  Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …
  ☆292Updated 8 years ago
• jjo-sec / pynetsim
  ☆18Updated 8 years ago
• d00rt / emotet_research
  ☆136Updated 7 years ago
• Velocidex / c-aff4
  An AFF4 C++ implementation.
  ☆211Updated 2 years ago
• ANSSI-FR / bootcode_parser
  A boot record parser that identifies known good signatures for MBR, VBR and IPL.
  ☆95Updated 11 months ago
• ctxis / RDP-Replay
  Replay RDP traffic from PCAP
  ☆199Updated 6 years ago