oletools
oletools copied to clipboard
rtfobj - check obfuscation techniques
see https://gist.github.com/mint177/8338f33783e77702eec497d94c021e6d or https://gist.github.com/decalage2/e9569a25934ebcd509a1f0265487cb0b
See also https://www.mandiant.com/resources/how-rtf-malware-evad