Leron Gray daddycocoaman
daddycocoaman
/ stickynoteparser.py
Created
September 14, 2019 02:34
Parses sticky note files in .snt/.sqlite formats. Sqlite files may require the WAL and SHM files of the same name as well. Once run, WAL/SHM files will be merged into .sqlite file.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import json | |
| import sqlite3 | |
| import olefile | |
| import argparse | |
| def parse_snt_file(file): | |
| # https://www.tutorialspoint.com/python_digital_forensics/python_digital_forensics_important_artifacts_in_windows | |
| if not olefile.isOleFile(file): | |
| return "Invalid OLE file" | |
NewerOlder