Python
cisagov/Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
★ 2.6k
Stars
455 forks · 162 open issues
+2.0/day
Growth · measured
Stars counted between two of our own snapshots roughly a week apart. The repository page gives the exact span.
38.4
Momentum / 100
see the breakdown below
7y ago
Created
last push 4d ago
Star history
How this score was built
| Component | Weight | Earned | Why |
|---|---|---|---|
| Velocity | 55 | 9.1 | +2.0/day, log-scaled against a 750/day ceiling |
| Acceleration | 15 | 4.5 | last week ran 1.30× the monthly pace |
| Freshness | 15 | 14.9 | last push 4d ago; decays to zero at 180 days |
| Scale | 15 | 9.9 | 2.6k stars, log-scaled against 150k — stops a 3-star repo topping the board |
| Momentum | 100 | 38.4 | sum of the above |
Detail
| Topics | arkimecybersecurityinfosecnetwork-securitynetwork-traffic-analysisnetworksecuritynetworktrafficanalysisopensearchopensearch-dashboardspcapsecuritysuricatazeek |
| Matched on | Security (cybersecurity) |
| Short window | +14 stars over 7 days = 2.0/day |
| Long window | +40 stars over 26 days = 1.5/day |
| Lifetime average | 0.95 stars/day over 2,733 days |
| First seen here | 2026-10-11 |
| Last read | 2d ago |