Tools
rita-legacy
activecm/rita-legacy
A network traffic analysis framework that ingests Zeek logs to detect command-and-control beaconing, DNS tunneling and blacklisted hosts for threat hunting. This is the archived legacy version.
Topics
Related projects
RustScan20.7kA modern, fast port scanner that can scan all 65,535 ports in seconds and pipe results into Nmap or custom scripts.
fscan14.8kFscan is an intranet comprehensive scanning tool that combines host discovery, port scanning, service fingerprinting, weak-password brute force, vulnerability detection and exploitation. It runs from the command line and can also be embedded as a Go SDK.
chainsaw3.7kChainsaw is a fast Rust command-line tool for threat hunting through Windows forensic artefacts, applying Sigma rules to event logs and analysing MFT and SRUM data.
chainsaw3.7kChainsaw is a fast, standalone CLI for Windows forensic triage. It searches event logs and MFT artefacts, applies Sigma and custom detection rules, and builds timelines for threat hunting and incident response.
hayabusa3.5kA fast, Sigma-based threat hunting and forensics timeline generator for Windows event logs, consolidating events into CSV or JSON for incident response and enterprise-wide analysis.
LogonTracer3.3kLogonTracer is a self-hosted web application for investigating Windows Active Directory logon events, graphing accounts and hosts and optionally using OpenAI models for AI-assisted threat analysis.