#NetworkSecurityMonitoring
LightNews LightNews
taosecurity.bsky.social
TL;DR: the two leading incident response companies, #Mandiant and #Crowdstrike, both now use #Corelight for their #NetworkSecurityMonitoring sensors, rather than building their own. corelight.com/company/news...
September 18, 2023 at 12:15 PM
guero.org
Malcolm v25.01.0 is out! See the release notes for details!

malcolm.fyi

github.com/cisagov/Malc...

#Malcolm #HedgehogLinux #Zeek #Arkime #NetBox #OpenSearch #Elasticsearch #Suricata #PCAP #NetworkTrafficAnalysis #networksecuritymonitoring #OT #ICS #icssecurity #CyberSecurity #Cyber #Infosec
Malcolm
A powerful, easily deployable network traffic analysis tool suite for network security monitoring
malcolm.fyi
January 17, 2025 at 10:13 PM
guero.org
Malcolm (malcolm.fyi) v24.12.0 is out (github.com/cisagov/Malc...), with ✨enhancements, ✅component updates, and 🐛bug fixes. See the release notes for details. #Malcolm #HedgehogLinux #Zeek #Arkime #NetBox #Suricata #PCAP #NetworkTrafficAnalysis #networksecuritymonitoring #OT #ICS #CyberSecurity
A screenshot of the Malcolm landing page, with links for Dashboards, Arkime, Netbox, Cyberchef, etc.
December 19, 2024 at 4:18 PM
guero.org
#Malcolm (malcolm.fyi) v25.09 features 🧠 threat intel improvements, new ⚙️ config options, 🆙 component updates, 🐛 fixes, more! Details @ github.com/idaholab/Malcolm/releases. Malcolm is a powerful tool suite for NSM 🕵🏻‍♂️. #Zeek #Arkime #NetBox #Suricata #NetworkTrafficAnalysis #networksecuritymonitoring
Malcolm
A powerful, easily deployable network traffic analysis tool suite for network security monitoring
malcolm.fyi
September 24, 2025 at 10:53 PM
guero.org
#Malcolm (malcolm.fyi) v25.06.0 features 🔐 #rbac, other ✨ improvements, 🆙 component version updates, 🐛 bug fixes, & more. Details @ github.com/idaholab/Malcolm/releases. Malcolm is a powerful tool suite for NSM 🕵🏻‍♂️. #Zeek #Arkime #NetBox #Suricata #NetworkTrafficAnalysis #networksecuritymonitoring
A screenshot of the Malcolm documentation for the role-based access control feature, found at https://malcolm.fyi/docs/authsetup.html#AuthKeycloakRBAC
June 23, 2025 at 4:42 PM
guero.org
Hey, y'all, if you use #Zeek (zeek.org), would you please take 10 minutes to fill out the Zeek Project Survey 2025 at zeek.org/survey? Let the Zeek team know how you feel about the project and help shape its direction moving forward. #PCAP #NetworkTrafficAnalysis #networksecuritymonitoring
Zeek Project Survey 2025
Thank you for sharing your experience with Zeek! This brief survey will take no more than 10 minutes to complete and will help us improve the tools, support, and community that make Zeek great. In thi...
zeek.org
June 30, 2025 at 2:56 PM
mmguero.infosec.exchange.ap.brid.gy
If you use #zeek at all, please go take the 2026 project survey.

#pcap #networktrafficanalysis #networksecuritymonitoring #cybersecurity #cyber #infosec
Zeek Project Survey 2026
Thanks for taking this survey! We're eager to catch up on your experience with Zeek. We've designed this to take 10-15 minutes and responses are anonymous. We'll use this feedback to understand what the community needs most and decide what to prioritize for the rest of the year.
docs.google.com
August 3, 2026 at 7:28 PM
taosecurity.bsky.social
I wrote a blog post for Corelight explaining how the original 2010 Amin-Cloppert-Hutchins kill chain worked and why it was so important for #NetworkSecurityMonitoring: corelight.com/blog/kill-ch...
September 12, 2023 at 10:06 PM
guero.org
#Malcolm (malcolm.fyi) v26.04.1 is out with improvements to file scanning, bug fixes, and other goodness! Details @ github.com/idaholab/Malcolm/releases. Malcolm is a powerful tool suite for NSM 🕵🏻‍♂️. #Zeek #Arkime #NetBox #Suricata #NetworkTrafficAnalysis #networksecuritymonitoring
Screenshot of Malcolm's IP Connections Trees dashboard.
April 15, 2026 at 3:32 PM
guero.org
#Malcolm (malcolm.fyi) v25.04.1 contains a bevy of ✨ improvements, 🆙 component version updates, 🐛 bug fixes, and other great stuff. 👁 github.com/idaholab/Mal... for details! Malcolm is a powerful tool suite for NSM 🕵🏻‍♂️. #Zeek #Arkime #NetBox #Suricata #NetworkTrafficAnalysis #networksecuritymonitoring
Malcolm
A powerful, easily deployable network traffic analysis tool suite for network security monitoring
malcolm.fyi
May 6, 2025 at 7:53 PM
guero.org
#Malcolm (malcolm.fyi) v25.03.0 brings 🔐 auth via #Keycloak and with it #SSO, identity providers, and more! See the release notes github.com/cisagov/Malc... for more info! Malcolm is a powerful tool suite for NSM. #Zeek #Arkime #NetBox #Suricata #NetworkTrafficAnalysis #networksecuritymonitoring
The Malcolm landing page with Keycloak authentication enabled.
March 19, 2025 at 2:27 PM
guero.org
Malcolm v25.02.0 is out! See the release notes for details!

malcolm.fyi

github.com/cisagov/Malc...

#Malcolm #HedgehogLinux #Zeek #Arkime #NetBox #OpenSearch #Elasticsearch #Suricata #PCAP #NetworkTrafficAnalysis #networksecuritymonitoring #OT #ICS #icssecurity #CyberSecurity #Cyber #Infosec
Malcolm
A powerful, easily deployable network traffic analysis tool suite for network security monitoring
malcolm.fyi
February 27, 2025 at 10:37 PM
techtired.bsky.social
Digital threats are becoming an ever-present reality. Companies must cope with them and take appropriate measures against numerous cyber attacks. #monitoringsystem #MonitoringTools #NetworkSecurityMonitoring #NSM
techtired.com/network-secu...
September 5, 2024 at 3:17 AM
potato.software
Digital threats are becoming an ever-present reality. Companies must cope with them and take appropriate measures against numerous potato attacks. #monitoringsystem #MonitoringTools #NetworkSecurityMonitoring #NSM
techtired.com/network-secu...
September 5, 2024 at 3:56 AM