- EXCEL CELL DEBUG TOOL FOR MAC PDF
- EXCEL CELL DEBUG TOOL FOR MAC FULL
- EXCEL CELL DEBUG TOOL FOR MAC CODE
MS Word, Excel, Powerpoint documents), to view and extract individual data streams. olebrowse: A simple GUI to browse OLE files (e.g.Tools to analyze the structure of OLE files rtfobj: to extract embedded objects from RTF files.oleobj: to extract embedded objects from OLE files.Word, Excel) and RTF, which is especially useful for malware analysis. pyxswf: to detect, extract and analyze Flash objects (SWF) that may be embedded in files such as MS Office documents (e.g.msodde: to detect and extract DDE/DDEAUTO links from MS Office documents, RTF and CSV.MacroRaptor: to detect malicious VBA Macros.
olevba: to extract and analyze VBA Macro source code from MS Office documents (OLE and OpenXML). oleid: to analyze OLE files to detect specific characteristics usually found in malicious files. Tools in oletools: Tools to analyze malicious documents See the full changelog for more information.
tests that trigger antivirus alerts have been temporarily disabled (issue #215). test files can now be encrypted, to avoid antivirus alerts (PR #217, issue #215). better handling of unicode for systems with locale that does not support UTF-8, e.g. rtfobj: added URL carver for CVE-2017-0199. improved detection of auto execution triggers. new option -pcode to display P-code disassembly. detection of suspicious keywords and IOCs in P-code. integrated pcodedmp to extract and disassemble P-code. 
added support for SLK files and XLM macro extraction from SLK. ppt_parser: fixed bug on Python 3 (issues #177, #607, PR #450). clsid: added PDF (issue #552), Microsoft Word Picture (issue #571). oleobj: "Ole10Native" is now case insensitive (issue #541). oleform: improved form parsing (PR #532). replaced option -pcode by -show-pcode and -no-pcode, replaced optparse by argparse (PR #479). fixed detect_vba_macros to always return VBA code as unicode on Python 3 (issues #455, #477, #587, #593). enabled relaxed mode by default (issues #477, #593). fixed option -relaxed (issue #596, PR #595). fixed bug with email package due to monkeypatch for MHT parsing (issue #602, PR #604). fixed bug when decompressing raw chunks in VBA (issue #575). added -no-xlm option to disable Excel 4/XLM macros parsing (PR #532). added detection of many suspicious keywords (PR #591 and #569, see ). added detection of template injection (PR #569). added simple analysis of Excel 4/XLM macros in XLSM files (PR #569). updated plugin_biff to v0.0.17 to improve Excel 4/XLM macros parsing. added detection of trigger _OnConnecting. Note: python-oletools is not related to OLETools published by BeCubed Software. 
Quick links: Home page - Download/Install - Documentation - Report Issues/Suggestions/Questions - Contact the Author - Repository - Updates on Twitter Python-oletools is a package of python tools to analyze Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office documents or Outlook messages, mainly for malware analysis, forensics and debugging.
0 kommentar(er)
