When the ese files are too large to parse with eseutil. Python handles parsing better.
#!/usr/bin/python3
from dissect.esedb import EseDB
import argparse
parser = argparse.ArgumentParser()
parser.add_argument("-db", "--databasefile", help="Database file to be parsed")
args = parser.parse_args()
edb = args.databasefile
with open(edb, "rb") as fh:
db = EseDB(fh)
for table in db.tables():
for record in table.records():
print(record)
ESC1Pentester's Promiscuous Notebook
