Once the package is installed, OneNote documents can be directly opened in Cerbero Suite and all embedded files are automatically extracted and ready to be analyzed.
The OneNote Format package is exposed to the SDK:
from Pro.Core import *
from Pkg.OneNote.Core import OneNoteObject
def parseOneNoteDocument(fname):
c = createContainerFromFile(fname)
if c.isNull():
return
obj = OneNoteObject()
if not obj.Load(c):
return
files = obj.GetEmbeddedFiles()
for file in files:
print("offset:", hex(file[0]), "size:", hex(file[1]))
