de4dot is a .NET deobfuscator, unpacker, and assembly analysis tool. It is designed to remove obfuscation layers, restore metadata, and simplify bytecode control flow to transform protected binaries back into human-readable code. The project features specialized systems for decrypting strings and constants using both static and dynamic analysis. It identifies specific protection tools through pattern-based detection and strips anti-analysis protections, such as tamper detection and anti-debugging code. The tool provides a suite of reverse engineering capabilities, including binary wrapper un
Behavior based monitoring and hunting tool built in C# leveraging ETW tracing. Blue teamers can use this tool to detect and respond to potential Cobalt Strike beacons. Red teamers can use this tool to research ETW bypasses and discover new processes that behave like beacons.
creddefense/creddefense 的主要功能包括：Blue Team Tools, Security Tooling。
creddefense/creddefense 的开源替代品包括： 0xd4d/de4dot — de4dot is a .NET deobfuscator, unpacker, and assembly analysis tool. It is designed to remove obfuscation layers,… 3lp4tr0n/beaconhunter — Behavior based monitoring and hunting tool built in C# leveraging ETW tracing. Blue teamers can use this tool to… akamai/badsuccessor. azure/stormspotter — Stormspotter creates an “attack graph” of the resources in an Azure subscription. It enables red teams and pentesters… ben0xa/powershelldefense. 0kee-team/watchad.