cisagov/Malcolm

Malcolm

✅ Recently maintained

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

2,577Stars
455Forks
+117-day stars

Python · License unverified · Last push 2026-10-29

Official repository & installation ↗
network-securitypcapsecurityarkimecybersecurityinfosecnetwork-traffic-analysisnetworksecurityopensearchopensearch-dashboards

GitValue · Value evidence

Unscored · Evidence coverage 0%

Provisional rubric; documentation and runtime testing are separate. Missing evidence does not imply low value.

Star history

2025-09-292026-11-03
View historical data
DateStars
2026-10-052,538
2026-10-062,538
2026-10-072,540
2026-10-082,542
2026-10-092,544
2026-10-102,544
2026-10-112,544
2026-10-122,545
2026-10-132,545
2026-10-142,546
2026-10-152,546
2026-10-162,547
2026-10-172,550
2026-10-182,551
2026-10-192,552
2026-10-202,555
2026-10-212,556
2026-10-222,562
2026-10-232,564
2026-10-242,564
2026-10-252,564
2026-10-262,565
2026-10-272,567
2026-10-282,570
2026-10-292,572
2026-10-302,573
2026-10-312,576
2026-11-012,577
2026-11-022,577
2026-11-032,577

Get the project

git clone https://github.com/cisagov/Malcolm.git

Cloning downloads the source. For dependencies and installation, follow the project README.

Related projects & alternative candidates

Related domains do not imply feature parity. Review official documentation and licenses.