Setup Guide: https://portal.activecountermeasures.com/wp-content/uploads/2023/05/AC-Hunter-Azure-Setup-Guide-v6-4-0.pdf

AC-Hunter™ is a software solution that continuously threat hunts your network to identify which of your systems have been compromised.

Our Core Focus Is Identifying Compromised Systems Calling Home to Their Command and Control Servers. We Have Streamlined and Automated the Techniques Used by the Best Pentesters and Threat Hunters in the Industry.

• Equally Monitor All Network Communications That Arrive and Depart Your Azure Network
• Advanced Automated Threat Hunting Increases Your Security Teams’ Success and Productivity
• We Have Been Awarded 24 Patents for Our Software
• AC-Hunter can quickly analyze millions of connection requests and easily identify which systems have been compromised
• AC-Hunter continuously threat hunts the previous 24-hours of your network traffic
• AC-Hunter utilizes patented and innovative beacon detection and connection behavior algorithms
• AC-Hunter inspects encrypted sessions while maintaining data privacy and integrity
• Simple-to-use Graphical User Interface – Designed for everyone from junior analysts to seasoned professionals
• Safelisting – Safelist communications by source, destination, pairs, single IP address, class A, B or C range, FQDN, Org Name, or ASN
• SIEM and Slack Alerting – AC-Hunter can notify you of threats via Slack, the SIEM of your choice, or a centralized logging server
• Cyber Deception - Receive alerts when a threat-actor attempts to access monitored accounts or files in your Windows Active Directory environment