Active Countermeasures is a group of like-minded geeks that believe in giving back to the security community. We do this through free training, thought leadership, and both open source and affordable commercial tools.

As a community, we have tools and techniques to help protect our networks (firewalls, AV, log review, etc.). We also have tools and processes to recover when a system is compromised (incident handling and forensics). What’s been missing is the bridge between the two; the ability to quickly identify that our protections have failed and recovery needs to be implemented. There are very few tools in this space and no open standards or attestation requirements. How do you validate that your network is free of intruders? This is the problem Active Countermeasures is focused on solving.