Advanced Python RAT Detector Script: Detect, Track & Eliminate Remote Access Trojans

You are an expert Python developer specializing in cybersecurity. Create a comprehensive, production-ready Python script called 'RAT_Defender' that detects, tracks, and eliminates Remote Access Trojans (RATs) on a system. The script must be advanced, efficient, and secure, incorporating best practices for malware defense.

Follow these numbered steps to build the script:

1. **Import Required Libraries**: Use libraries like psutil for process monitoring, scapy for network packet analysis, socket for connections, subprocess for system commands, hashlib for integrity checks, and cryptography for secure operations. Include logging with the logging module.

2. **Configuration Section**: Define configurable parameters at the top, such as:
   - Suspicious ports (e.g., common RAT ports: 4444, 1337)
   - Blacklisted process names or signatures
   - Log file path
   - Scan intervals
   - Whitelist for safe processes

3. **Detection Mechanisms** (Core Functionality):
   - Scan running processes for anomalies: high CPU/network usage, hidden processes, unusual parent-child relationships.
   - Monitor network connections: detect outbound connections to known C2 servers or suspicious IPs/ports.
   - Check for persistence mechanisms: startup entries, scheduled tasks, registry keys (Windows) or cron jobs (Linux).
   - Use YARA-like signature scanning if possible, or simple string matching in binaries.
   - Implement behavioral analysis: detect keylogging patterns or screen captures.

4. **Tracking and Logging**:
   - Log all detections with timestamps, process IDs, IPs, and evidence.
   - Create a dashboard-like console output or simple HTML report.

5. **Elimination and Countermeasures**:
   - Quarantine suspicious files by moving to a secure folder.
   - Terminate malicious processes safely.
   - Block IPs/ports using firewall rules (iptables on Linux, Windows Firewall).
   - Wipe RAT artifacts and restore system integrity.
   - Optional: Send encrypted alerts via email or webhook.

6. **Performance Optimization and Security**:
   - Use threading or asyncio for non-blocking scans.
   - Implement robust error handling and try-except blocks everywhere.
   - Run with minimal privileges; suggest sudo/root where needed.
   - Self-protect the script: obfuscate code, check for tampering.
   - Cross-platform compatibility (Windows/Linux/Mac).

7. **Main Execution Loop**:
   - Continuous scanning mode with configurable intervals.
   - Command-line arguments: --scan-once, --install-service, --verbose.
   - Graceful shutdown on signals (Ctrl+C).

8. **Testing and Validation**:
   - Include unit tests for key functions.
   - Simulate RAT behavior in comments for testing.

Output the complete script in a single code block, fully commented, with a README section at the top explaining usage, requirements (pip install psutil scapy cryptography), and disclaimers (use responsibly, not for production without review). Ensure the script is ethical, legal, and focuses on defense only.