Alternatives and similar repositories for msoffcrypto-tool

Users that are interested in msoffcrypto-tool are comparing it to the libraries listed below

• decalage2 / olefile
  olefile is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or…
  ☆256Updated last year
• herumi / msoffice
  ☆253Updated 2 years ago
• bontchev / pcodedmp
  A VBA p-code disassembler
  ☆479Updated 4 years ago
• williballenthin / python-evtx
  Pure Python parser for Windows Event Log files (.evtx)
  ☆760Updated 5 months ago
• williballenthin / python-registry
  Pure Python parser for Windows Registry hives.
  ☆439Updated 10 months ago
• rowingdude / analyzeMFT
  analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…
  ☆511Updated 3 months ago
• GOVCERT-LU / eml_parser
  python eml parser module
  ☆236Updated 4 months ago
• decalage2 / ViperMonkey
  A VBA parser and emulation engine to analyze malicious macros.
  ☆1,117Updated last year
• mkorman90 / regipy
  Regipy is an os independent python library for parsing offline registry hives
  ☆265Updated last week
• libyal / libevtx
  Library and tools to access the Windows XML Event Log (EVTX) format
  ☆218Updated 2 weeks ago
• MalwareCantFly / Vba2Graph
  Vba2Graph - Generate call graphs from VBA code, for easier analysis of malicious documents.
  ☆279Updated 3 years ago
• volatilityfoundation / community
  Volatility plugins developed and maintained by the community
  ☆372Updated 4 years ago
• jschicht / Mft2Csv
  Extract $MFT record info and log it to a csv file.
  ☆281Updated last year
• zbetcheckin / PDF_analysis
  Several PDF analysis reassembled with additional tips and tools
  ☆343Updated 2 years ago
• R3MRUM / PSDecode
  PowerShell script for deobfuscating encoded PowerShell scripts
  ☆428Updated 4 years ago
• libyal / libesedb
  Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.
  ☆369Updated last year
• erocarrera / pefile
  pefile is a Python module to read and work with PE (Portable Executable) files
  ☆1,993Updated last year
• jschicht / RawCopy
  Commandline low level file extractor for NTFS
  ☆305Updated 6 years ago
• libyal / libewf
  Libewf is a library to access the Expert Witness Compression Format (EWF)
  ☆293Updated 3 weeks ago
• JPCERTCC / MalConfScan
  Volatility plugin for extracts configuration data of known malware
  ☆496Updated last year
• decalage2 / oletools
  oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware a…
  ☆3,235Updated 6 months ago
• TeamMsgExtractor / msg-extractor
  Extracts emails and attachments saved in Microsoft Outlook's .msg files
  ☆812Updated 3 months ago
• msuhanov / regf
  Windows registry file format specification
  ☆351Updated 7 years ago
• fireeye / pywintrace
  ETW Python Library
  ☆293Updated 2 years ago
• williballenthin / INDXParse
  Tool suite for inspecting NTFS artifacts.
  ☆226Updated 2 years ago
• VirusTotal / yara-python
  The Python interface for YARA
  ☆721Updated 6 months ago
• DissectMalware / XLMMacroDeobfuscator
  Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
  ☆584Updated last year
• unixfreak0037 / officeparser
  Extract embedded files and macros from office documents.
  ☆186Updated 2 years ago
• superponible / volatility-plugins
  Plugins I've written for Volatility
  ☆213Updated 2 years ago
• ctxis / CAPE
  Malware Configuration And Payload Extraction
  ☆760Updated last year