Once the package is installed, OneNote documents can be directly opened in Cerbero Suite and all embedded files are automatically extracted and ready to be analyzed.
The OneNote Format package is exposed to the SDK:
from Pro.Core import * from Pkg.OneNote.Core import OneNoteObject def parseOneNoteDocument(fname): c = createContainerFromFile(fname) if c.isNull(): return obj = OneNoteObject() if not obj.Load(c): return files = obj.GetEmbeddedFiles() for file in files: print("offset:", hex(file[0]), "size:", hex(file[1]))