rita-legacy
by activecm
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
AI summary
Traffic analyzer
Analyzes network traffic to detect command and control communication behaviors.
- stars
- 2.5K
- forks
- 362
- watching
- 112
Similar projects
Found by comparing what the projects do, not just their names.
Network traffic analyzer
A framework for detecting malicious communication patterns in network traffic by analyzing Zeek logs.
Traffic analyzer
Detects and analyzes malicious traffic patterns to identify potential security threats.
Restoration tool
Adds batch restore and archive actions to ActiveAdmin resource index pages
Campaign archive
A collection of APT and cybercriminal campaign data, including malware samples and threat intelligence
zabbix/zabbix4.5K
IT monitoring system
An enterprise-class monitoring solution designed to track performance and availability of IT resources and services in real-time.
opennhp/opennhp13.5K
Network Hider
A Zero Trust protocol that leverages resource-hiding and encryption to safeguard servers and data from attackers
Traffic analyzer
Detects malicious servers in network traffic by analyzing encoded byte patterns
Security Monitor
An integrated security monitoring and threat hunting platform that collects, analyzes, and responds to network traffic data
SRE tool
A software reverse engineering framework with disassembler and analysis tools
Network analyzer
Aggregates Microsoft Sysmon network events with Elasticsearch and Kibana for threat hunting analysis
Traffic analyzer
Analyzes web-based network traffic to detect malicious command and control servers using Squid proxy server and Spamhaus
URL analyzer
Develops real-time URL-based malware detection system using regexes and clustering
AD exploit tool
Automates gaining Domain and/or Enterprise Admin rights in Active Directory environments using offensive TTPs
Security Scanner
An open-source network security scanner with an extensible plugin system to detect high-severity vulnerabilities.
Pentest lab
A pentest active directory LAB project providing a vulnerable environment for practice.
