Active Countermeasures

Pinned

1. rita Public

   Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

   Go 2.1k 327

2. passer Public

   Passive service locator, a python sniffer that identifies servers, clients, names and much more

   Python 205 43

3. BeaKer Public

   Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana

   Shell 253 40

4. docker-zeek Public

   Run zeek with zeekctl in docker

   Shell 33 14

5. zeek-log-transport Public

   This script ships logs from Zeek to AC-Hunter

   Shell 5 2

6. threat-tools Public

   Tools for simulating threats

   Shell 101 19