Apra

CobaltStrikeScan. Scan files or process memory for CobaltStrike beacons and parse their configuration

GetInjectedThreads. C# Implementation of Jared Atkinson's Get-InjectedThread.ps1

HarvestBrowserPasswords. Tool for extracting credentials locally stored by web browsers

CLRInjection. Testing remote process injection techniques with C#

apr4h.github.io. My blog - CTF Writeups and other security projects

CobaltStrikeConfigParser. C# Library for Parsing CobaltStrike beacon configurations from process memory or files

MFT. MFT parser