1.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+43 stars
from 2,534 · score 3.78
Ranked by Attention Score: stars gained over the last 30 complete days
5 repositories by Attention Score · Oct 4, 2026 – Nov 2, 2026 (UTC)
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Advanced Phishing Protection: Suricata rulesets open and free
Local-LLM alert triage for self-hosted SOCs.
Scirius is a web application for Suricata ruleset management and threat hunting.