1.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+115 stars
from 2,462 · score 4.75
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
6 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
2.julioliraup / Antiphishing
Advanced Phishing Protection: Suricata rulesets open and free
+30 stars
from 13 · score 3.43
3.idaholab / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+20 stars
from 474 · score 3.04
4.StamusNetworks / scirius
Scirius is a web application for Suricata ruleset management and threat hunting.
+6 stars
from 680 · score 1.95
5.aaronphifer / triagewall
Local-LLM alert triage for self-hosted SOCs.
+3 stars
from 11 · score 1.39
6.jasonish / py-idstoolsArchived
idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
+1 stars
from 285 · score 0.69