1.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+115 stars
from 2,462 · score 4.75
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
4 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
2.eventum-generator / eventum
Realistic synthetic events for testing, demos, and pipelines — streamed live or generated in bulk
+25 stars
from 46 · score 3.26
3.idaholab / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+20 stars
from 474 · score 3.04
4.corelight / zeek2es
A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for further processing!
+1 stars
from 40 · score 0.69