MCP server for Malcolm (Zeek/Suricata/Arkime/OpenSearch/NetBox): full read surface plus opt-in, audited write tools
-
Updated
Jul 25, 2026 - Python
MCP server for Malcolm (Zeek/Suricata/Arkime/OpenSearch/NetBox): full read surface plus opt-in, audited write tools
C implementation of a simple ARP spoofer.
Self-directed ICS network forensics project using CISA's Malcolm on the 4SICS dataset
Add a description, image, and links to the malcolm topic page so that developers can more easily learn about it.
To associate your repository with the malcolm topic, visit your repo's landing page and select "manage topics."