pyOneNote is a lightweight python library to read OneNote files. The main goal of this parser is to allow cybersecurity analyst to extract useful information from OneNote files.

Installing the latest development

pip install -U https://github.com/DissectMalware/pyOneNote/archive/master.zip --force

To dump all embedded file in current directory

pyonenote -f example.one 

To dump all embedded file in example.one into output_dir

pyonenote -f example.one -o output_dir 

To dump all embedded file in example.one into output_dir and add .bin to the end of each filename

pyonenote -f example.one -o output_dir -e bin

usage: pyonenote [-h] -f FILE [-o OUTPUT_DIR] [-e EXTENSION]

Note: pyOneNote is under active development

If you found a bug or would like to suggest an improvement, please create a new issue on the issues page.

Feel free to contribute to the project forking the project and submitting a pull request.

You can reach me (@DissectMlaware) on Twitter via a direct message.