Alternatives and similar repositories for msoffcrypto-tool

Users that are interested in msoffcrypto-tool are comparing it to the libraries listed below

• decalage2 / olefile
  olefile is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or…
  ☆250Updated 11 months ago
• williballenthin / python-registry
  Pure Python parser for Windows Registry hives.
  ☆434Updated 8 months ago
• herumi / msoffice
  ☆253Updated 2 years ago
• rowingdude / analyzeMFT
  analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…
  ☆498Updated last month
• williballenthin / python-evtx
  Pure Python parser for Windows Event Log files (.evtx)
  ☆754Updated 3 months ago
• zbetcheckin / PDF_analysis
  Several PDF analysis reassembled with additional tips and tools
  ☆335Updated 2 years ago
• libyal / libevtx
  Library and tools to access the Windows XML Event Log (EVTX) format
  ☆213Updated last year
• jschicht / RawCopy
  Commandline low level file extractor for NTFS
  ☆302Updated 6 years ago
• bontchev / pcodedmp
  A VBA p-code disassembler
  ☆478Updated 4 years ago
• libyal / libewf
  Libewf is a library to access the Expert Witness Compression Format (EWF)
  ☆288Updated last year
• jschicht / Mft2Csv
  Extract $MFT record info and log it to a csv file.
  ☆278Updated last year
• mkorman90 / regipy
  Regipy is an os independent python library for parsing offline registry hives
  ☆261Updated 3 weeks ago
• decalage2 / ViperMonkey
  A VBA parser and emulation engine to analyze malicious macros.
  ☆1,108Updated last year
• jschicht / LogFileParser
  Parser for $LogFile on NTFS
  ☆204Updated 4 months ago
• GOVCERT-LU / eml_parser
  python eml parser module
  ☆235Updated 2 months ago
• VirusTotal / yara-python
  The Python interface for YARA
  ☆710Updated 4 months ago
• R3MRUM / PSDecode
  PowerShell script for deobfuscating encoded PowerShell scripts
  ☆426Updated 4 years ago
• williballenthin / INDXParse
  Tool suite for inspecting NTFS artifacts.
  ☆224Updated last year
• erocarrera / pefile
  pefile is a Python module to read and work with PE (Portable Executable) files
  ☆1,980Updated last year
• MalwareCantFly / Vba2Graph
  Vba2Graph - Generate call graphs from VBA code, for easier analysis of malicious documents.
  ☆278Updated 3 years ago
• volatilityfoundation / community
  Volatility plugins developed and maintained by the community
  ☆365Updated 4 years ago
• libyal / libesedb
  Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.
  ☆363Updated last year
• jschicht / UsnJrnl2Csv
  Parser for $UsnJrnl on NTFS
  ☆117Updated 2 years ago
• fireeye / pywintrace
  ETW Python Library
  ☆290Updated 2 years ago
• ssdeep-project / ssdeep
  Fuzzy hashing API and fuzzy hashing tool
  ☆749Updated 3 weeks ago
• superponible / volatility-plugins
  Plugins I've written for Volatility
  ☆209Updated last year
• JPCERTCC / MalConfScan
  Volatility plugin for extracts configuration data of known malware
  ☆490Updated last year
• msuhanov / dfir_ntfs
  An NTFS/FAT parser for digital forensics & incident response
  ☆211Updated 11 months ago
• msuhanov / regf
  Windows registry file format specification
  ☆345Updated 6 years ago
• DidierStevens / Beta
  Beta versions of my software
  ☆263Updated 3 months ago