decalage2 / oletools

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
http://www.decalage.info/python/oletools
Other
2.81k stars 560 forks source link

ftguess: fallback to magika (or others) when file type not identified #843

Open decalage2 opened 4 months ago

decalage2 commented 4 months ago

This would be mostly useful for text-based formats, which cannot be easily identified.

https://opensource.googleblog.com/2024/02/magika-ai-powered-fast-and-efficient-file-type-identification.html https://github.com/google/magika

Compared to other solutions, which are mostly magic-based, magika should provide better results for text-based formats such as JavaScript, VBScript, PowerShell, etc.

Other potential solutions: