oletools

D-Scan project for office document analysis and generating flow diagram of macro in documents. For demo visit

Parser to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents.

Malice Office/OLE/RTF Plugin

Assemblyline 4 Microsoft OLE/XML file analysis service

Dockerfile for static maldoc analysis purposes

Malware Analyzer

oledrop is a nodejs app that allows users to submit documents to a remote server where they can be analyzed by decalage's olevba before the results are returned and rendered client-side.

Complete notes, challenge walkthroughs, and 20+ alert investigations for the LetsDefend.io SOC Analyst path. This covers SIEM, phishing analysis, web attack detection, malware triage, threat intelligence and Splunk.

Secure USB station for Raspberry Pi with antivirus scanning, file sanitization, and malware detection. Automated security management with ClamAV and oletools integration.

UI for oletools

Read, modify & execute VBA macros from Excel .xlsm/.xlam files. Dual-mode: oletools (cross-platform read) + win32com (full control). Python.

A write-up about the CyberDefenders Lab Phishy

A dependency-free PowerShell reimplementation of oletools' olevba.