Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- network-security
- security
- arkime
- cybersecurity
47,133 repositories indexed
1–6 of 6 · Most stars
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
The Catalogs of Sources of the Mobility Database.
High performance Kafka consumer for InfluxDB. Supports collectd message formats.
Realistic synthetic events for testing, demos, and pipelines — streamed live or generated in bulk
A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for further processing!
Parse cowrie honeypot logs into a neo4j database