Skip to content

>awesome-alternatives

Search the catalog

Browse About Add a tool

Language

English Français Español Deutsch Português (Brasil)日本語 Bahasa Indonesia

Home
SIEM and security monitoring
Malcolm

Malcolm

Loading the README

v26.09.02026-09-30Malcolm v26.09.0
v26.08.02026-08-25Malcolm v26.08.0
v26.07.12026-07-22Malcolm v26.07.1
v26.06.12026-06-16Malcolm v26.06.1 (SEE NOTE BEFORE UPGRADING TO THIS RELEASE)
v26.06.02026-06-01Malcolm v26.06.0

✓ signed The latest release, v26.09.0, carries a signature GitHub verified.

Loading the security report

About

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

PythonSIEM and security monitoringOther

Owner: Cybersecurity and Infrastructure Security Agency organisation
Stars: 2.5k
Forks: 453
Latest: v26.09.0
Last push: 2026-10-06
Terms: Open source
Self-hosted: Yes
Created: 2019, 7 years ago
Release cadence: about 35 days between releases
Active contributors: 2 commit authors on the default branch in the last 90 days

Read from GitHub on 2026-10-06.Entry last edited on 2026-10-06.

#arkime#cybersecurity#infosec#network-security#network-traffic-analysis#networksecurity#networktrafficanalysis#opensearch

github.com/cisagov/Malcolm ↗Website ↗Edit this entry Changes to Malcolm (RSS)

Other tools in SIEM and security monitoring

WazuhC++→
Security OnionShell→

Catalog CC BY-SA, code AGPL, data from GitHub, every night

How it works What changed RSS feed Contact Legal notice Privacy GitHub ↗