oletools_rs 0.1.0

Rust port of oletools — analysis tools for Microsoft Office files (VBA macros, DDE, OLE objects, RTF exploits)
Documentation 
1
2
3
4
5
6
7
8
9
10

//! MacroRaptor — heuristic detection of malicious VBA macros.
//!
//! Detects suspicious macros by checking for three categories:
//! - **AutoExec** (A): automatic execution triggers
//! - **Write** (W): file system / registry write operations
//! - **Execute** (X): process execution, shell commands
//!
//! A macro is flagged as suspicious when `A AND (W OR X)`.

pub mod analyzer;