Sign in
← Back to search
github Not archived

idaholab/Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

1 awesome list

Quick read

Stars
490
Forks
78
Open issues
2
Commits
7,003

Activity and growth

Latest capture 2026-10-18 09:40

Stars · last 7 days
0 0.0%
Commits · last 7 days
0 0.0%
Stars since tracking
0
Stored snapshots
1

Classification

Topics

#arkime #cybersecurity #infosec #network-security #network-traffic-analysis #networksecurity #networktrafficanalysis #opensearch #opensearch-dashboards #pcap #security #suricata #zeek

Technology stack

Flask

Metadata

Language
Python
License
NOASSERTION
Default branch
main
Created
2020-09-09
First commit
2019-05-13
Last pushed
2026-10-12
GitHub updated
2026-10-17
Last synced
2026-10-18 09:40
Stack scanned
2026-10-18 09:40
Archived
No

Archive status reflects the last catalog sync, not a maintenance assessment. Check recent releases, issue responses, and fit for your project with the repository shortlisting checklist.

Sign in to like idaholab/Malcolm
README Open website View on GitHub

AI development signals

0 paths

Agent instructions and tool configuration found in this repository.

No config files detected.

Growth history

Tracked growth

1 observed capture since 2026-10-18. Observed captures are shown by default.

Stars from first capture 0

Chart data

Observed captures only

Time horizon

All tracked data

Custom date range

Stars history

Observed snapshots

Commits history

Observed snapshots

Similar repositories

Nearest indexed repositories by embedding similarity.

alexandreborges/malwoverview

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

4,132 stars
Python 1 awesome list

malloydata/malloy

Malloy is a modern open source language for describing data relationships and transformations.

2,593 stars
TypeScript 0 awesome lists

guardicore/monkey

Infection Monkey - An open-source adversary emulation platform

7,096 stars
Python 2 awesome lists

bx33661/Wireshark-MCP

Wireshark-MCP，Give your AI assistant a packet analyzer. Drop a .pcap file, ask questions in plain English — get answers backed by real tshark data.

236 stars
Python 1 awesome list

kubeshark/kubeshark

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.

12,082 stars
Go 2 awesome lists