A set of Windows tools designed for SOC labs and controlled test environments providing automated TLS key logging setup for web encrypted traffic analysis and enabling or disabling of 16 Windows Defender components (9 functional protection components and 7 services/drivers) to support malware research, detection engineering, and Blue Team training.
tls https wireshark soc windows-defender windowsdefender security-operations-center soc-lab tlskeylogconfigurator tlskeylog tlskey tls-key tls-key-log soc-lab-tools windows-defender-enabler windows-defender-disabler windowsdefenderenabler windowsdefenderdisabler windows-defender-tools windowsdefendertools
-
Updated
Jan 1, 2026