Skip to content
@activecm

Active Countermeasures

Pinned Loading

  1. rita rita Public

    Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

    Go 524 55

  2. BeaKer BeaKer Public

    Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana

    Shell 300 43

  3. passer passer Public

    Passive service locator, a python sniffer that identifies servers, clients, names and much more

    Python 260 53

  4. espy espy Public

    Endpoint detection for remote hosts for consumption by RITA and Elasticsearch

    Go 80 19

Repositories

Showing 10 of 39 repositories
  • rita Public

    Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

    activecm/rita’s past year of commit activity
    Go 524 GPL-3.0 55 17 6 Updated Mar 10, 2026
  • ACH-Zeek Public

    Zeek installer packaged with AC-Hunter

    activecm/ACH-Zeek’s past year of commit activity
    Shell 0 0 0 0 Updated Mar 4, 2026
  • zeek-open-connections Public
    activecm/zeek-open-connections’s past year of commit activity
    Zeek 15 GPL-3.0 4 1 0 Updated Feb 9, 2026
  • passer Public

    Passive service locator, a python sniffer that identifies servers, clients, names and much more

    activecm/passer’s past year of commit activity
    Python 260 GPL-3.0 53 0 2 Updated Feb 9, 2026
  • zeek-log-transport Public

    This script ships logs from Zeek to AC-Hunter

    activecm/zeek-log-transport’s past year of commit activity
    Shell 6 3 3 3 Updated Feb 9, 2026
  • BeaKer Public

    Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana

    activecm/BeaKer’s past year of commit activity
    Shell 300 GPL-3.0 43 3 2 Updated Feb 9, 2026
  • espy Public

    Endpoint detection for remote hosts for consumption by RITA and Elasticsearch

    activecm/espy’s past year of commit activity
    Go 80 GPL-3.0 19 7 0 Updated Feb 10, 2026
  • tcp-sig-json Public

    Json file that holds TCP signatures for passive OS fingerprinting

    activecm/tcp-sig-json’s past year of commit activity
    Python 1 GPL-3.0 1 0 0 Updated Feb 10, 2026
  • shell-lib Public archive

    Shell Scripts Used Across ActiveCM Projects

    activecm/shell-lib’s past year of commit activity
    Shell 4 BSD-3-Clause 3 3 (1 issue needs help) 1 Updated Feb 6, 2026
  • rita-legacy Public

    Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

    activecm/rita-legacy’s past year of commit activity
    Go 2,515 GPL-3.0 356 81 (7 issues need help) 4 Updated Jan 12, 2026
View all repositories

People

This organization has no public members. You must be a member to see who’s a part of this organization.