RITA

Real Intelligence Threat Analytics (RITA) from Active Countermeasures ingests Zeek network logs and analyses them for signs of command-and-control communication such as beaconing, long connections and suspicious DNS. It surfaces ranked results to support threat hunting.