https://github.com/cisagov/Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
https://github.com/cisagov/Malcolm

arkime cybersecurity infosec network-security network-traffic-analysis networksecurity networktrafficanalysis opensearch opensearch-dashboards pcap security suricata zeek

Last synced: 12 days ago
JSON representation

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

• Host: GitHub
• URL: https://github.com/cisagov/Malcolm
• Owner: cisagov
• License: other
• Created: 2019-05-13T18:35:51.000Z (over 5 years ago)
• Default Branch: main
• Last Pushed: 2024-10-26T00:18:47.000Z (19 days ago)
• Last Synced: 2024-10-26T11:58:55.840Z (18 days ago)
• Topics: arkime, cybersecurity, infosec, network-security, network-traffic-analysis, networksecurity, networktrafficanalysis, opensearch, opensearch-dashboards, pcap, security, suricata, zeek
• Language: Python
• Homepage: https://cisagov.github.io/Malcolm/
• Size: 213 MB
• Stars: 1,942
• Watchers: 55
• Forks: 326
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • Contributing: docs/contributing-dashboards.md
  • License: LICENSE.txt

Awesome Lists containing this project

• awesome-suricata - Malcolm - A powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts. (Analysis Tools)