# Attachment Extraction

**URL:** https://community.zeek.org/t/attachment-extraction/1383
**Category:** Zeek
**Created:** [September 15, 2008, 4:05pm UTC](https://community.zeek.org/t/attachment-extraction/1383 "2008-09-15T16:05:58Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![noah\_zak](https://avatars.discourse-cdn.com/v4/letter/n/9de0a6/32.png) [@noah\_zak](https://community.zeek.org/u/noah_zak)
#### Post date: [September 15, 2008, 4:05pm UTC](https://community.zeek.org/t/attachment-extraction/1383/1 "2008-09-15T16:05:58Z")

</div>

All,

Does anyone have a script that will extract attachments from incoming email. I need to extract the attachments for further analysis.

Thanks

---

<div class="post-metadata">

### Author: ![Vern](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/vern/32/630_2.png) [@Vern](https://community.zeek.org/u/Vern)
#### Post date: [September 15, 2008, 8:28pm UTC](https://community.zeek.org/t/attachment-extraction/1383/2 "2008-09-15T20:28:00Z")

</div>

> Does anyone have a script that will extract attachments from incoming email.

See policy/mime.bro. It logs only the beginning of attachments, but it  
has the hooks necessary to fully extract them if that's what you need.

&nbsp;&nbsp;&nbsp;&nbsp;Vern

---

<div class="post-metadata">

### Author: ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)
#### Post date: [May 6, 2022, 3:38pm UTC](https://community.zeek.org/t/attachment-extraction/1383/3 "2022-05-06T15:38:39Z")

</div>