MISP / MISP/misp-modules

Proposal to add .msg import/parsing capabilities

Open
#97 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
377
Forks
280
Avg merge
2d 2h
Merged PRs (30d)
10

Description

Proposal to add .msg import capabilities into import_email.py (or another appropriate module). At this point, Outlook .msg files (in their binary format) cannot be parsed for relevant attributes - however, .eml files can be parsed effectively.

A solution currently exists for parsing .msg files (https://github.com/mattgwwalker/msg-extractor) but it is not able to parse embedded .msg files. I propose creating a new module for dealing with this issue, and then converging with import_email.py when a reliable solution exists.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with import_email.py and compare its existing .eml parsing with the proposed msg-extractor approach. Investigate how embedded .msg files are represented and whether a reliable solution can parse them. Done means .msg files, including embedded messages, can be parsed for relevant attributes and integrated with import_email.py.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
backend
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.