Thank you for contributing to AsyncRecovery.
- Use Windows with Visual Studio 2022 and the .NET desktop development workload.
- Install the .NET Framework 4.8.1 Developer Pack.
- Restore NuGet packages.
- Build both Debug and Release configurations.
- Keep analysis read-only and static.
- Do not add code that executes, injects, deploys, persists, or communicates with analyzed clients.
- Preserve authenticated decryption checks; do not accept unauthenticated plaintext as recovered configuration.
- Add evidence-based detection rather than relying only on unobfuscated names.
- Handle malformed assemblies and values without crashing where practical.
- Update documentation when behavior or output changes.
Never commit:
- malware samples or payloads
- compiled executables or libraries
- recovered master keys or credentials
- real certificates, signatures, hosts, ports, or exported reports
- private customer or incident data
Use synthetic fixtures or sanitized hashes when tests need representative inputs.
Use focused commits with descriptive messages, for example:
Fix AsyncRAT version field inferenceAdd certificate parsing error handlingDocument authenticated config validation