
zeek-quasarrat-detector
Zeek detector for QuasarRat
anomaly-detectionintrusion-detectionmalware-analysis+2
3

Zeek detector for QuasarRat

A Zeek based AsyncRAT malware detector.

Detects phi-structured C2 beacons that evade RITA and standard regularity-based detectors

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

Berry Sentinel v5.0 — Advanced behavioral C2 and reverse shell detector for Linux/Windows/Unix systems. Features real-time connection analysis,…

Detection for SUNBURST C2 Stage-1 using Shannon Entropy

Autonomous Rust endpoint security agent combining Ring-0 Windows driver and Linux eBPF pre-execution blocking, YARA detection, MITRE ATT&CK mapping,…

A Zeek based Mitre Caldera detector.