1.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+43 stars
from 2,534 · score 3.78
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
4 repositories by Attention Score · Oct 4, 2026 – Nov 2, 2026 (UTC)
2.ivre / ivre
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
+37 stars
from 4,156 · score 3.64
3.idaholab / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+9 stars
from 485 · score 2.30
4.tenzir / threatbusArchived
🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
+1 stars
from 270 · score 0.69