AC-Hunter by Active Countermeasures is a network threat detection and hunting software designed to identify compromised systems communicating with Command and Control servers. It provides a graphical front-end for network analysis, simplifying and expediting the identification of compromised systems on networks. AC-Hunter collects packet information from networks and analyzes the results, monitoring all network communications to and from the internet at the firewall's internal interface. This gives AC-Hunter visibility of connections regardless of operating system, hardware, or device type. The software uses advanced automated threat hunting techniques to boost security team success and productivity. It focuses on behavioral patterns rather than relying on signatures for known threats, using multiple detection techniques including analysis of connection intervals, data sizes, and dispersion to identify suspicious activities such as beaconing and command and control communications.
