Skip to content
@activecm

Active Countermeasures

Pinned Loading

  1. rita rita Public

    Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

    Go 639 68

  2. BeaKer BeaKer Public

    Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana

    Shell 303 43

  3. passer passer Public

    Passive service locator, a python sniffer that identifies servers, clients, names and much more

    Python 265 53

  4. docker-zeek docker-zeek Public

    Run zeek with zeekctl in docker

    Go 67 23

Repositories

Showing 10 of 37 repositories
  • docker-zeek Public

    Run zeek with zeekctl in docker

    activecm/docker-zeek's past year of commit activity
    Go 67 GPL-3.0 23 7 4 Updated Aug 21, 2026
  • espy Public

    Endpoint detection for remote hosts for consumption by RITA and Elasticsearch

    activecm/espy's past year of commit activity
    Go 81 GPL-3.0 20 7 0 Updated Jun 25, 2026
  • rita Public

    Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

    activecm/rita's past year of commit activity
    Go 639 GPL-3.0 68 16 10 Updated Jun 17, 2026
  • zeek-open-connections Public
    activecm/zeek-open-connections's past year of commit activity
    Zeek 17 GPL-3.0 4 1 0 Updated Mar 24, 2026
  • BeaKer Public

    Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana

    activecm/BeaKer's past year of commit activity
    Shell 303 GPL-3.0 43 3 2 Updated Mar 19, 2026
  • zeek-log-transport Public

    This script ships logs from Zeek to AC-Hunter

    activecm/zeek-log-transport's past year of commit activity
    Shell 7 3 3 3 Updated Mar 19, 2026
  • passer Public

    Passive service locator, a python sniffer that identifies servers, clients, names and much more

    activecm/passer's past year of commit activity
    Python 265 GPL-3.0 53 0 2 Updated Feb 9, 2026
  • tcp-sig-json Public

    Json file that holds TCP signatures for passive OS fingerprinting

    activecm/tcp-sig-json's past year of commit activity
    Python 1 GPL-3.0 1 0 0 Updated Feb 9, 2026
  • shell-lib Public archive

    Shell Scripts Used Across ActiveCM Projects

    activecm/shell-lib's past year of commit activity
    Shell 4 BSD-3-Clause 3 3 (1 issue needs help) 1 Updated Feb 5, 2026
  • rita-legacy Public

    Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

    activecm/rita-legacy's past year of commit activity
    Go 2,511 GPL-3.0 351 81 (7 issues need help) 6 Updated Jan 12, 2026
View all repositories

People

This organization has no public members. You must be a member to see who’s a part of this organization.