Active Countermeasures

Pinned

1. rita Public

   Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

   Go 1.8k 287

2. passer Public

   Passive service locator, a python sniffer that identifies servers, clients, names and much more

   Python 181 35

3. BeaKer Public

   Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana

   Shell 235 32

4. docker-zeek Public

   Run zeek with zeekctl in docker

   Shell 23 9

5. zeek-log-transport Public

   This script ships logs from Zeek to AC-Hunter

   Shell 3

6. threat-tools Public

   Tools for simulating threats

   Shell 37 9