idaholab/Malcolm

Issues

• migrate all GitHub issues from idaholab to cisagov repo

  #612 opened 2 months ago by mmguero
  2

• Add ingest-stats API

  #611 opened 2 months ago by mmguero
  1

• integrate Zeek IEC104 parser

  #557 opened 2 months ago by mmguero
  2

• "hedgehog run profile" doesn't allow for reaching back for PCAP payload or carved file artifacts

  #563 opened 2 months ago by mmguero
  1

• expose WISE tagging features to the user

  #566 opened 2 months ago by mmguero
  1

• Allow Hedgehog build for Raspberry Pi 5

  #569 opened 2 months ago by mmguero
  6

• policy manager: Hegehog policy subscription and application

  #573 opened 2 months ago by mmguero
  1

• policy manager: Malcolm policy subscription and application

  #574 opened 2 months ago by mmguero
  1

• investigate container immutability for kubernetes deployment

  #575 opened 2 months ago by mmguero
  1

• policy manager: APIs

  #576 opened 2 months ago by mmguero
  1

• policy manager: graphical user interface

  #577 opened 2 months ago by mmguero
  1

• plugin architecture: define file/directory format

  #578 opened 2 months ago by mmguero
  1

• plugin architecture: dashboards/visualizations

  #579 opened 2 months ago by mmguero
  1

• plugin architecture: new service or container

  #580 opened 2 months ago by mmguero
  1

• plugin architecture: custom rules/policy/scripts/config/etc.

  #581 opened 2 months ago by mmguero
  1

• plugin architecture: Zeek packages

  #582 opened 2 months ago by mmguero
  1

• plugin architecture: how to handle new fields added by plugins

  #583 opened 2 months ago by mmguero
  1

• plugin architecture: custom Logstash filters

  #584 opened 2 months ago by mmguero
  1

• investigate RITA

  #587 opened 2 months ago by mmguero
  1

• implement paging for extracted files download dialog

  #595 opened 2 months ago by mmguero
  3

• policy manager: underlying storage of policy details in Malcolm

  #572 opened 2 months ago by mmguero
  1

• explore customization of the NetBox interface using custom links and widgets

  #599 opened 2 months ago by mmguero
  1

• Zeek intel support for Mandiant Advantage threat intelligence feed

  #601 opened 2 months ago by mmguero
  1

• include support for sending Zeek logs to Kafka

  #602 opened 2 months ago by mmguero
  1

• normalize winlogbeats with fluent bit winlog/winevtlog

  #604 opened 2 months ago by mmguero
  1

• Execute some scripts (restart, stop, config, wipe) from WebUI

  #605 opened 2 months ago by ee-hex-ee
  1

• enhance support for syslog ingestion

  #606 opened 2 months ago by mmguero
  1

• Videos or verbose walkthroughs for Malcolm upgrades

  #608 opened 2 months ago by ee-hex-ee
  3

• Malcolm: upgrade process

  #609 opened 2 months ago by mmguero
  1

• Hedgehog Linux: upgrade process

  #610 opened 2 months ago by mmguero
  1

• add a "readiness" API that can be used to determine if various Malcolm services are ready

  #598 opened 2 months ago by mmguero
  0

• allow tagging per capture interface on Hedgehog Linux sensor

  #570 opened 2 months ago by mmguero
  1

• opensearch anomaly detection default detectors are not being created

  #596 opened 2 months ago by mmguero
  2

• add support for websocket.log

  #593 opened 2 months ago by mmguero
  0

• some cleanup and improvements of the zeek logstash pipeline

  #592 opened 2 months ago by mmguero
  0

• script to gather GitHub API metrics for Malcolm downloads

  #594 opened 2 months ago by mmguero
  1

• update AWS AMI build instructions and some demo setup scripts to use Amazon Linux 2023 instead of Amazon Linux 2

  #591 opened 3 months ago by mmguero
  0

• extracted files not getting saved to correct location for live Zeek capture

  #590 opened 3 months ago by mmguero
  0

• some dashboards broken in v24.09.0

  #588 opened 3 months ago by mmguero
  0

• limit threads for spicy build processes during Zeek package installation

  #571 opened 3 months ago by mmguero
  0

• fall back to alternative Zeek .deb download URL

  #585 opened 3 months ago by mmguero
  1

• 502 Bad Gateway nginx/1.22.1 on extracted-files

  #586 opened 3 months ago by TollerEmil
  1

• Hedgehog with OOB/VPN connection sets ARKIME_NODE_HOST incorrectly

  #560 opened 3 months ago by mmguero
  2

• allow specifying alternate download location for MaxMind GeoIP database files

  #565 opened 3 months ago by mmguero
  0

• integrate HART IP parser

  #561 opened 3 months ago by mmguero
  4

• offline suricata Docker container does not initialize suricata config file

  #564 opened 3 months ago by mmguero
  0

• main-arm64 Format string python3

  #562 opened 4 months ago by jbc22
  1

• update ethernet/IP and CIP to account for new packet correlation ID

  #558 opened 4 months ago by mmguero
  1

• arkime start log

  #555 opened 4 months ago by alleniverson33
  5

• filtering on hunt ID in Arkime not working

  #554 opened 4 months ago by mmguero
  0