NewsPublished 1 Nov 2026

OneNote File Extraction, (Sun, Nov 1st)

Source SANS ISC Handlers Diary

Description

This report discusses a tool enhancement for extracting embedded files from Microsoft OneNote (.one) files. The author added a JSON output feature to the onedump.py tool to facilitate batch extraction of embedded files, enabling easier analysis and file retrieval. There is no indication of a vulnerability or active exploitation associated with this activity.

Impact

No security impact or vulnerability is described. The content relates to file extraction capabilities for analysis purposes and does not indicate any security flaw or exploit.

Defensive guidance

No mitigation is required as this is not a security threat or vulnerability.

Summary

The author describes the addition of a JSON output feature to the onedump.py tool, which extracts embedded files from OneNote files. This enhancement allows processing multiple .one files simultaneously and outputs the embedded file contents in JSON format. The extracted files can then be saved to disk using an additional filtering tool. The content is a technical note about tool functionality rather than a security threat or vulnerability.

References

isc.sans.edu/diary/rss/33478 (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 1 Nov 2026, 09:20 UTC

References

Community reviews