Didier Stevens adds JSON output to onedump.py for extracting OneNote embedded files

Didier Stevens has added a --jsonoutput option to onedump.py, which lists every file embedded in one or more OneNote .one files as JSON. Piping that output into myjson-filter.py with -W hashvir writes each embedded file to disk, named by its SHA256 hash with a .vir extension. The post is a SANS Internet Storm Center diary entry about a tool feature rather than a threat.

For IT people · Written by AI from 1 source · Wrong?