cisagov/Malcolm
View on GitHubMalcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- Stars
- 2.5k
- Forks
- 445
- Open beginner issues
- 0
- Indexed issues
- 146
- Avg merge
- 15d 21h
- Merged PRs (30d)
- 22
- Dominant language
- Python
- License
- No license data
- Last GitHub push
- Aug 25, 2026
- Latest indexed
- Sep 14, 2026
- Contributing guide
- No contributing guide
- Code of conduct
- No code of conduct
- Beginner labels
- No beginner labels indexed
-
enhancement upgrade
cisagov/Malcolm#352 · 1 comment · 0 reactions · 0 assignees ·
-
training
cisagov/Malcolm#353 · 2 comments · 0 reactions · 0 assignees ·
-
docker enhancement UI
cisagov/Malcolm#355 · 0 comments · 0 reactions · 0 assignees ·
-
enhancement policy
cisagov/Malcolm#360 · 0 comments · 0 reactions · 0 assignees ·
-
enhancement logstash plugins
cisagov/Malcolm#363 · 1 comment · 0 reactions · 0 assignees ·
-
dashboards enhancement logstash opensearch plugins zeek
cisagov/Malcolm#364 · 0 comments · 0 reactions · 0 assignees ·
-
enhancement plugins zeek
cisagov/Malcolm#365 · 0 comments · 0 reactions · 0 assignees ·
-
arkime enhancement pipeline plugins suricata zeek
cisagov/Malcolm#366 · 0 comments · 0 reactions · 0 assignees ·
-
cloud docker enhancement plugins
cisagov/Malcolm#367 · 0 comments · 0 reactions · 0 assignees ·
-
dashboards enhancement plugins
cisagov/Malcolm#368 · 0 comments · 0 reactions · 0 assignees ·
-
enhancement plugins
cisagov/Malcolm#369 · 0 comments · 0 reactions · 0 assignees ·
-
enhancement policy UI
cisagov/Malcolm#370 · 0 comments · 0 reactions · 0 assignees ·
-
policy manager: APIs Openapi enhancement policy
cisagov/Malcolm#371 · 0 comments · 0 reactions · 0 assignees ·
-
cloud enhancement security
cisagov/Malcolm#373 · 0 comments · 0 reactions · 0 assignees ·
-
enhancement policy
cisagov/Malcolm#374 · 0 comments · 0 reactions · 0 assignees ·
-
enhancement policy
cisagov/Malcolm#375 · 0 comments · 0 reactions · 0 assignees ·
-
"hedgehog run profile" doesn't allow for reaching back for PCAP payload or carved file artifacts Openarkime bug docker
cisagov/Malcolm#378 · 0 comments · 0 reactions · 0 assignees ·
-
enhancement ics zeek
cisagov/Malcolm#379 · 1 comment · 0 reactions · 0 assignees ·
-
review Trivy report Opendocker iso security
cisagov/Malcolm#380 · 1 comment · 0 reactions · 0 assignees ·
-
control.py enhancement
cisagov/Malcolm#381 · 1 comment · 0 reactions · 1 assignee ·
-
enhancement external
cisagov/Malcolm#382 · 0 comments · 0 reactions · 0 assignees ·
-
arkime elastic enhancement external opensearch
cisagov/Malcolm#384 · 0 comments · 0 reactions · 0 assignees ·
-
netbox opensearch performance research
cisagov/Malcolm#386 · 0 comments · 0 reactions · 0 assignees ·
-
enhancement zeek
cisagov/Malcolm#387 · 0 comments · 0 reactions · 0 assignees ·
-
arkime code dashboards logstash zeek
cisagov/Malcolm#388 · 2 comments · 0 reactions · 0 assignees ·
-
arkime enhancement netbox
cisagov/Malcolm#389 · 0 comments · 0 reactions · 0 assignees ·
-
enhancement logstash netbox
cisagov/Malcolm#390 · 0 comments · 0 reactions · 0 assignees ·
-
enhancement performance
cisagov/Malcolm#391 · 0 comments · 0 reactions · 0 assignees ·
-
arkime bug logstash
cisagov/Malcolm#394 · 0 comments · 0 reactions · 0 assignees ·
-
arkime enhancement policy sensor suricata UI zeek
cisagov/Malcolm#396 · 1 comment · 0 reactions · 0 assignees ·
-
enhancement ics suricata
cisagov/Malcolm#397 · 0 comments · 0 reactions · 0 assignees ·
-
sensor train-configuration training
cisagov/Malcolm#398 · 1 comment · 0 reactions · 0 assignees ·
-
sensor train-configuration training
cisagov/Malcolm#399 · 0 comments · 0 reactions · 0 assignees ·
-
enhancement external zeek
cisagov/Malcolm#400 · 0 comments · 0 reactions · 0 assignees ·
-
enhancement suricata UI
cisagov/Malcolm#402 · 2 comments · 0 reactions · 0 assignees ·
-
netbox train-operation training
cisagov/Malcolm#403 · 0 comments · 0 reactions · 0 assignees ·
-
bug netbox performance
cisagov/Malcolm#406 · 1 comment · 0 reactions · 0 assignees ·
-
support PCAPNG Openenhancement external upload
cisagov/Malcolm#407 · 0 comments · 0 reactions · 0 assignees ·
-
development docker enhancement nginx plugins UI
cisagov/Malcolm#409 · 0 comments · 0 reactions · 0 assignees ·
-
api train-operation training
cisagov/Malcolm#412 · 0 comments · 0 reactions · 0 assignees ·
-
external iso sensor train-operation training
cisagov/Malcolm#413 · 0 comments · 0 reactions · 0 assignees ·
-
enhancement external netbox
cisagov/Malcolm#414 · 0 comments · 0 reactions · 0 assignees ·
-
train-operation training
cisagov/Malcolm#415 · 0 comments · 0 reactions · 0 assignees ·
-
elastic opensearch train-configuration training
cisagov/Malcolm#416 · 0 comments · 0 reactions · 0 assignees ·
-
sensor train-configuration training
cisagov/Malcolm#417 · 0 comments · 0 reactions · 0 assignees ·
-
external iso sensor train-operation training
cisagov/Malcolm#418 · 1 comment · 0 reactions · 0 assignees ·
-
cloud train-configuration training
cisagov/Malcolm#419 · 0 comments · 0 reactions · 0 assignees ·
-
netbox train-configuration training
cisagov/Malcolm#420 · 0 comments · 0 reactions · 0 assignees ·
-
Log Enrichment Openlogstash train-operation training
cisagov/Malcolm#421 · 0 comments · 0 reactions · 0 assignees ·
-
netbox train-configuration training
cisagov/Malcolm#422 · 0 comments · 0 reactions · 0 assignees ·