Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
☆497Nov 3, 2026Updated this week
Alternatives and similar repositories for Malcolm
Users that are interested in Malcolm are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆2,589Updated this week
- Helm charts for deploying Malcolm☆17Oct 29, 2026Updated last week
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆35Updated this week
- Industrial Control Systems Network Protocol Parsers☆206Oct 22, 2026Updated 2 weeks ago
- Arkime is an open source, large scale, full packet capturing, indexing, and database system.☆7,562Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Zeek support for Community ID flow hashing.☆37Jul 11, 2023Updated 3 years ago
- Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…☆2,511Jan 12, 2026Updated 9 months ago
- Bro analyzer that detects Google's QUIC protocol☆12Mar 2, 2021Updated 5 years ago
- Synthetic Adversarial Log Objects: A Framework for synthentic log generation☆95Jan 11, 2024Updated 2 years ago
- Zeek-Formatted Threat Intelligence Feeds☆406Updated this week
- A packet capture visualizer for industrial control networks.☆61Dec 4, 2023Updated 2 years ago
- Digging Deeper....☆4,423Updated this week
- Generate network maps from packet captures☆30Sep 15, 2019Updated 7 years ago
- Structured Threat Intelligence Graph☆102Sep 30, 2026Updated last month
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆874Updated this week
- Zeek OPCUA Binary Parser - CISA ICSNPP☆21Oct 17, 2026Updated 2 weeks ago
- Real-time, container-based file scanning at enterprise scale☆1,004Updated this week
- Documentation for Zeek☆51Oct 13, 2025Updated last year
- Rapidly Search and Hunt through Windows Forensic Artefacts☆3,708Updated this week
- Presentation Slides and Resources☆16Jun 12, 2024Updated 2 years ago
- Configuration Hardening Assessment PowerShell Script (CHAPS)☆205Jun 28, 2026Updated 4 months ago
- 🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.☆271Mar 17, 2023Updated 3 years ago
- Zui is a powerful desktop application for exploring and working with data. The official front-end to the Zed lake.☆1,982Aug 22, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Main Sigma Rule Repository☆11,421Updated this week
- Collaborative Incident Response platform☆1,620Oct 22, 2026Updated 2 weeks ago
- Open source endpoint agent providing host information to Zeek. [v2]☆92Sep 23, 2026Updated last month
- Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detection…☆874Jan 20, 2022Updated 4 years ago
- Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.☆2,473Updated this week
- Zeek DNP3 Extension Scripts - CISA ICSNPP☆14Aug 5, 2026Updated 3 months ago
- A collection of Cortex Analyzers and Responders for TheHive/Cortex☆13Jan 29, 2020Updated 6 years ago
- Automated Adversary Emulation Platform☆7,499Oct 12, 2026Updated 3 weeks ago
- A Spicy protocol analyzer for WireGuard☆28Aug 11, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆40Jun 20, 2023Updated 3 years ago
- Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search☆508Updated this week
- Automate the creation of a lab environment complete with security tooling and logging best practices☆5,056Jul 6, 2024Updated 2 years ago
- Provides situational awareness of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) networks in suppo…☆1,061Feb 24, 2020Updated 6 years ago
- The Hunting ELK☆3,936Jun 1, 2024Updated 2 years ago
- The default package source of the Zeek Package Manager. Wrote a package? See the README for how to get it included.☆146Oct 29, 2026Updated last week
- The NAVV (Network Architecture Verification and Validation) tool creates a spreadsheet for network traffic analysis from PCAP data and Ze…☆42Jul 10, 2026Updated 3 months ago