A screenshot of Malcolm's new Connections Tree visualization, depicting a tree of IP addresses with lines representing connections between the endpoints.

[Release notes for v25.11.0 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring]

Malcolm v25.11.0 includes an overhaul of the `install.py` installation/configuration script, a few bug fixes, and some […]

[Original post on infosec.exchange]

[Release notes for v25.09.0 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring]

Malcolm v25.09.0 includes new features and available customizations, improvements to Threat Intelligence, component version updates, and several important […]

A screenshot of the desktop from the ISO-installed Malcolm configuration, with a list describing the icons on the shortcut bar. 1. Applications menu 2. Terminal 3. Web browser 4. Malcolm landing page 5. Arkime 6. Dashboards 7. Upload artifacts 8. User management 9. Malcolm configuration 10. NetBox 11. CyberChef 12. Start Malcolm 13. Restart Malcolm 14. Stop Malcolm 15. Malcolm debug logs 16. Desktop workspaces 17. NetworkManager 18. Power management 19. System notifications 20. Time and date 21. Logout menu

[Release notes for v25.07.0 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring]

Malcolm v25.07.0 includes quite a few new features and enhancements, performance improvements, bug fixes, and […]

[Original post on infosec.exchange]

Screenshot of the Malcolm documentation for role-based access control found at https://malcolm.fyi/docs/authsetup.html#AuthKeycloakRBAC

[Release notes for v25.06.0 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring]

Malcolm v25.06.0 includes a some new and oft-requested features, bug fixes, and component version bumps.

Compare v25 […]

[Original post on infosec.exchange]

A screenshot from Malcolm's GitHub releases page.

[Release notes for v25.04.1 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring]

Malcolm v25.04.1 contains new features and improvements, component version updates, bug fixes, and other great stuff […]

[Original post on infosec.exchange]

A simple network diagram showing how Malcolm is used to monitor network traffic.

[Release notes for v25.03.1 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring]

_This has been a busy month for Malcolm! I pushed hard to getv25.03.0 out earlier this month, as it contained pretty […]

[Original post on infosec.exchange]

The Malcolm landing page showing the new Keycloak Authentication feature.

[Release notes for v25.03.0 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring]

Malcolm v25.03.0 adds 🔐 authentication via Keycloak and all that entails: single sign-on (SSO), identity providers […]

[Original post on infosec.exchange]

#DHS #CISA is big on the building community aspect of #Malcolm right now, so as part of that we'll be having our first "Malcolm Office Hours" this Thursday. The plan is to have this monthly, every third Thursday, at 12pm Eastern time for 30 minutes. Details for the office hours can be found […]

Malcolm v25.02.0 is out! See the release notes for details!

malcolm.fyi

github.com/cisagov/Malc...

#Malcolm #HedgehogLinux #Zeek #Arkime #NetBox #OpenSearch #Elasticsearch #Suricata #PCAP #NetworkTrafficAnalysis #networksecuritymonitoring #OT #ICS #icssecurity #CyberSecurity #Cyber #Infosec

[Release notes for v25.02.0 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring]

Malcolm v25.02.0 contains some **major performance improvements** , a few smaller new features and enhancements, several component version updates, bug […]

Malcolm v25.01.0 is out! See the release notes for details!

malcolm.fyi

github.com/cisagov/Malc...

#Malcolm #HedgehogLinux #Zeek #Arkime #NetBox #OpenSearch #Elasticsearch #Suricata #PCAP #NetworkTrafficAnalysis #networksecuritymonitoring #OT #ICS #icssecurity #CyberSecurity #Cyber #Infosec

A screenshot of the Malcolm landing page, with links for Dashboards, Arkime, Netbox, Cyberchef, etc.

Malcolm (malcolm.fyi) v24.12.0 is out (github.com/cisagov/Malc...), with ✨enhancements, ✅component updates, and 🐛bug fixes. See the release notes for details. #Malcolm #HedgehogLinux #Zeek #Arkime #NetBox #Suricata #PCAP #NetworkTrafficAnalysis #networksecuritymonitoring #OT #ICS #CyberSecurity

I just released v24.11.0 of #Malcolm (malcolm.fyi), a powerful, easily deployable network traffic analysis tool suite for #NSM. See github.com/cisagov/Malc... for details.

#opensource #HedgehogLinux #Zeek #Arkime #Suricata #PCAP #CyberSecurity #Cyber #Infosec #INL #DHS #CISA #CISAgov