misp-modules
misp-modules copied to clipboard
Proposal to add .msg import/parsing capabilities
Proposal to add .msg import capabilities into import_email.py (or another appropriate module). At this point, Outlook .msg files (in their binary format) cannot be parsed for relevant attributes - however, .eml files can be parsed effectively.
A solution currently exists for parsing .msg files (https://github.com/mattgwwalker/msg-extractor) but it is not able to parse embedded .msg files. I propose creating a new module for dealing with this issue, and then converging with import_email.py when a reliable solution exists.
This would be really useful for organizations using MS Outlook!