Skip to content
@activecm

Active Countermeasures

Pinned Loading

  1. rita rita Public

    Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

    Go 535 57

  2. BeaKer BeaKer Public

    Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana

    Shell 301 44

  3. passer passer Public

    Passive service locator, a python sniffer that identifies servers, clients, names and much more

    Python 260 54

  4. espy espy Public

    Endpoint detection for remote hosts for consumption by RITA and Elasticsearch

    Go 80 20

Repositories

Showing 10 of 39 repositories
  • rita Public

    Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

    activecm/rita’s past year of commit activity
    Go 535 GPL-3.0 57 16 5 Updated Mar 26, 2026
  • docker-zeek Public

    Run zeek with zeekctl in docker

    activecm/docker-zeek’s past year of commit activity
    Go 63 GPL-3.0 21 7 4 Updated Mar 25, 2026
  • zeek-open-connections Public
    activecm/zeek-open-connections’s past year of commit activity
    Zeek 15 GPL-3.0 4 1 0 Updated Mar 23, 2026
  • espy Public

    Endpoint detection for remote hosts for consumption by RITA and Elasticsearch

    activecm/espy’s past year of commit activity
    Go 80 GPL-3.0 20 7 0 Updated Mar 19, 2026
  • BeaKer Public

    Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana

    activecm/BeaKer’s past year of commit activity
    Shell 301 GPL-3.0 44 3 2 Updated Mar 19, 2026
  • zeek-log-transport Public

    This script ships logs from Zeek to AC-Hunter

    activecm/zeek-log-transport’s past year of commit activity
    Shell 6 3 3 3 Updated Mar 19, 2026
  • ACH-Zeek Public

    Zeek installer packaged with AC-Hunter

    activecm/ACH-Zeek’s past year of commit activity
    Shell 0 0 0 0 Updated Mar 19, 2026
  • passer Public

    Passive service locator, a python sniffer that identifies servers, clients, names and much more

    activecm/passer’s past year of commit activity
    Python 260 GPL-3.0 54 0 2 Updated Feb 9, 2026
  • tcp-sig-json Public

    Json file that holds TCP signatures for passive OS fingerprinting

    activecm/tcp-sig-json’s past year of commit activity
    Python 1 GPL-3.0 1 0 0 Updated Feb 9, 2026
  • shell-lib Public archive

    Shell Scripts Used Across ActiveCM Projects

    activecm/shell-lib’s past year of commit activity
    Shell 4 BSD-3-Clause 3 3 (1 issue needs help) 1 Updated Feb 5, 2026
View all repositories

People

This organization has no public members. You must be a member to see who’s a part of this organization.