{"adoption": {"forks": 352, "observed_at": "2026-08-28T04:06:57.332830+00:00", "stars": 2509}, "canonical_url": "https://ross.abutalabs.com/products/rita-legacy", "card": {"archived": false, "artifact_type": "framework", "description": "Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.", "domain": ["security", "networking", "analytics", "developer-tools"], "enriched": true, "function": ["analytics", "monitoring", "security", "search-engine"], "health_score": 74, "homepage": null, "language": "Go", "license": "GPL-3.0", "license_family": "copyleft", "maturity": "abandoned", "member_repos": ["activecm/rita-legacy"], "name": "activecm/rita-legacy", "platform": ["go", "cli"], "pushed_at": "2026-01-12T23:00:09+00:00", "repo": "activecm/rita-legacy", "stars": 2509, "tags": ["network-traffic-analysis", "zeek-logs", "beaconing-detection", "dns-tunneling", "threat-hunting", "blue-team", "mongodb", "legacy-archived", "linux", "docker"], "topics": ["rita", "network-traffic", "threat", "scanning", "offensive-countermeasures", "bro-ids", "blueteam", "security", "logs", "analytics", "analysis", "bhis", "beacon", "beacon-sniffer", "dns", "dns-tunneling", "dga"], "urls": [], "use_cases": ["detect command and control beaconing in network traffic", "find DNS tunneling covert channels", "analyze Zeek logs for suspicious domains", "check hosts against threat blacklists", "hunt for malware beacon behavior on my network", "blue team network threat analytics"], "what_it_is": "RITA (Real Intelligence Threat Analytics) is an open-source framework for detecting command and control communication through network traffic analysis. It ingests Zeek logs in TSV format and provides beaconing detection, DNS tunneling detection, and blacklist checking. This legacy repository is archived and unmaintained; the project has been rewritten at activecm/rita.", "when_to_avoid": ["starting a new deployment - use the rewritten activecm/rita instead", "you need maintained software with ongoing support", "you need features beyond beaconing, DNS tunneling, and blacklist checks"], "when_to_choose": ["you need the original RITA feature set and cannot migrate", "you run an older environment (Ubuntu 20.04, CentOS 7, Security Onion) supported by its install script"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/rita-legacy", "repo": "activecm/rita-legacy", "role": "main", "score": 59}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:06:57.332830+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T02:26:27.227507+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f2deadc539a08d0406d0f815eb3b14077edab48ea1166b0178f8441b10e5f872", "fetched_at": "2026-08-28T04:06:57.332830+00:00", "kind": "readme", "missing": false, "url": "https://github.com/activecm/rita-legacy"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:06:57.332830+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T02:26:27.227507+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f2deadc539a08d0406d0f815eb3b14077edab48ea1166b0178f8441b10e5f872", "fetched_at": "2026-08-28T04:06:57.332830+00:00", "kind": "readme", "missing": false, "url": "https://github.com/activecm/rita-legacy"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T02:26:27.227507+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f2deadc539a08d0406d0f815eb3b14077edab48ea1166b0178f8441b10e5f872", "fetched_at": "2026-08-28T04:06:57.332830+00:00", "kind": "readme", "missing": false, "url": "https://github.com/activecm/rita-legacy"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:06:57.332830+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:06:57.332830+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:06:57.332830+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T02:26:27.227507+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f2deadc539a08d0406d0f815eb3b14077edab48ea1166b0178f8441b10e5f872", "fetched_at": "2026-08-28T04:06:57.332830+00:00", "kind": "readme", "missing": false, "url": "https://github.com/activecm/rita-legacy"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:06:57.332830+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:06:57.332830+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T02:26:27.227507+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f2deadc539a08d0406d0f815eb3b14077edab48ea1166b0178f8441b10e5f872", "fetched_at": "2026-08-28T04:06:57.332830+00:00", "kind": "readme", "missing": false, "url": "https://github.com/activecm/rita-legacy"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:06:57.332830+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:06:57.332830+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:06:57.332830+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T02:26:27.227507+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f2deadc539a08d0406d0f815eb3b14077edab48ea1166b0178f8441b10e5f872", "fetched_at": "2026-08-28T04:06:57.332830+00:00", "kind": "readme", "missing": false, "url": "https://github.com/activecm/rita-legacy"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:06:57.332830+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:06:57.332830+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T02:26:27.227507+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f2deadc539a08d0406d0f815eb3b14077edab48ea1166b0178f8441b10e5f872", "fetched_at": "2026-08-28T04:06:57.332830+00:00", "kind": "readme", "missing": false, "url": "https://github.com/activecm/rita-legacy"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T02:26:27.227507+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f2deadc539a08d0406d0f815eb3b14077edab48ea1166b0178f8441b10e5f872", "fetched_at": "2026-08-28T04:06:57.332830+00:00", "kind": "readme", "missing": false, "url": "https://github.com/activecm/rita-legacy"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T02:26:27.227507+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f2deadc539a08d0406d0f815eb3b14077edab48ea1166b0178f8441b10e5f872", "fetched_at": "2026-08-28T04:06:57.332830+00:00", "kind": "readme", "missing": false, "url": "https://github.com/activecm/rita-legacy"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T02:26:27.227507+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f2deadc539a08d0406d0f815eb3b14077edab48ea1166b0178f8441b10e5f872", "fetched_at": "2026-08-28T04:06:57.332830+00:00", "kind": "readme", "missing": false, "url": "https://github.com/activecm/rita-legacy"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 62, "longevity": 100, "rhythm": 33}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 3630, "days_push": 233, "days_rel": 233, "gap_med": null, "n_releases_24m": 1}, "score": 59, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}