1.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+191 stars
from 2,386 · score 5.26
Ranked by Attention Score: stars gained over the last 180 complete days
3 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Scirius is a web application for Suricata ruleset management and threat hunting.