EmailAnalyzer is a command-line application for analyzing suspicious email files (.eml). It extracts headers, links, attachments, digests (hashes), and authentication results (SPF/DKIM/DMARC) from email messages. The tool provides investigation features that generate links to threat intelligence services (VirusTotal, AbuseIPDB, URLScan) for indicators of compromise found in emails. Output can be displayed in the terminal or saved as JSON or HTML reports. The architecture is modular with separate functions for each analysis component, all depending only on the Python standard library, making them highly reusable.
Email::Outlook::Message is a Perl library for reading Microsoft Outlook .msg files and converting them to standard email MIME objects. It parses the OLE compound document format, extracts MAPI properties (headers, body in plain text/HTML/RTF, attachments, recipients), and reconstructs an Email::MIME object suitable for further processing or sending. The architecture uses a base class for generic OLE property stream parsing with encoding detection, with specialized subclasses for addresses and attachments. A command-line tool, msgconvert, is included for batch conversion to .eml or mbox format. The library does not require Outlook and works cross-platform. The codebase is well-structured, with good separation of concerns and a test suite covering various message types, though GPG-signed message support is incomplete.