Active Countermeasures

Pinned

1. rita Public

   Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

   Go 1.9k 307

2. passer Public

   Passive service locator, a python sniffer that identifies servers, clients, names and much more

   Python 188 37

3. BeaKer Public

   Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana

   Shell 241 34

4. docker-zeek Public

   Run zeek with zeekctl in docker

   Shell 28 11

5. zeek-log-transport Public

   This script ships logs from Zeek to AC-Hunter

   Shell 4 1

6. threat-tools Public

   Tools for simulating threats

   Shell 70 12