Active Countermeasures

Pinned

1. rita Public

   Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

   Go 1.9k 308

2. passer Public

   Passive service locator, a python sniffer that identifies servers, clients, names and much more

   Python 188 38

3. BeaKer Public

   Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana

   Shell 243 35

4. docker-zeek Public

   Run zeek with zeekctl in docker

   Shell 29 12

5. zeek-log-transport Public

   This script ships logs from Zeek to AC-Hunter

   Shell 4 1

6. threat-tools Public

   Tools for simulating threats

   Shell 75 13