Malcolm is a powerful network traffic analysis tool suite with the following goals:

• Easy to use
• Powerful traffic analysis
• Streamlined deployment
• Secure communications
• Permissive license
• Expanding control systems visibility

While the open source tools which make up Malcolm are already in general use, Malcolm provides a framework of interconnectivity making it greater than the sum of its parts. Its easy deployment and robust combination of tools fill a void in the network security space and make network traffic analysis accessible to many in both the public and private sectors as well as individual enthusiasts.

In short, Malcolm provides an easily deployable network analysis tool suite for full packet capture artifacts (PCAP files) and Zeek logs.

Please take a few minutes to complete this survey (https://forms.gle/JYt9QwA5C4SYX8My6) so we can understand the Malcolm community's use cases for this tool.

https://idaholab.github.io/Malcolm