1.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+14 stars
from 2,563 · score 2.71
Ranked by Attention Score: stars gained over the last 7 complete days
5 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Local-LLM alert triage for self-hosted SOCs.
Scirius is a web application for Suricata ruleset management and threat hunting.
Advanced Phishing Protection: Suricata rulesets open and free