https://github.com/cisagov/Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
https://github.com/cisagov/Malcolm

arkime cybersecurity infosec network-security network-traffic-analysis networksecurity networktrafficanalysis opensearch opensearch-dashboards pcap security suricata zeek

Last synced: about 2 months ago
JSON representation

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

• Host: GitHub
• URL: https://github.com/cisagov/Malcolm
• Owner: cisagov
• License: other
• Created: 2019-05-13T18:35:51.000Z (over 5 years ago)
• Default Branch: main
• Last Pushed: 2024-07-30T22:56:22.000Z (about 2 months ago)
• Last Synced: 2024-07-31T23:56:12.056Z (about 2 months ago)
• Topics: arkime, cybersecurity, infosec, network-security, network-traffic-analysis, networksecurity, networktrafficanalysis, opensearch, opensearch-dashboards, pcap, security, suricata, zeek
• Language: Python
• Homepage: https://cisagov.github.io/Malcolm/
• Size: 210 MB
• Stars: 1,844
• Watchers: 55
• Forks: 307
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Contributing: docs/contributing-dashboards.md
  • License: LICENSE.txt

Awesome Lists containing this project

• awesome-suricata - Malcolm - A powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts. (Analysis Tools)