RT @DissectMalware
#pyOneNote v0.0.1 is now on #PyPI
pip install pyonenote

It prints:
1⃣ header fields
2⃣ all metadata (i.e. all PropertySets such as jcidEmbeddedFileNode, jcidImageNode)
3⃣ embedded files

and also dumps all embedded files

https://github.com/DissectMalware/pyOneNote

related https://twitter.com/DissectMalware/status/1622426990400913408

GitHub - DissectMalware/pyOneNote

Contribute to DissectMalware/pyOneNote development by creating an account on GitHub.

GitHub