file-extraction/scripts/plugins/extract-ms-office.zeek
Patrick Kelley e92000e5b0 Initial
2025-05-07 14:10:34 -04:00

16 lines
489 B
Plaintext

@load ../__load__
module FileExtraction;
const office_types: set[string] = { "application/msword",
"application/vnd.openxmlformats-officedocument.wordprocessingml.document",
"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
"application/vnd.openxmlformats-officedocument.presentationml.presentation",
};
hook FileExtraction::extract(f: fa_file, meta: fa_metadata) &priority=5
{
if ( meta$mime_type in office_types )
break;
}