py-idstools VS Malcolm

Compare py-idstools vs Malcolm and see what are their differences.

py-idstools

idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool) (by jasonish)
Ids intrusion-detection snort suricata unified2
Source Code
Suggest alternative
Edit details

Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts. (by idaholab)
network-security Security arkime Cybersecurity Infosec network-traffic-analysis networksecurity networktrafficanalysis opensearch opensearch-dashboards Pcap suricata Zeek
Source Code
idaholab.github.io
Suggest alternative
Edit details
InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured
py-idstools Malcolm
1 5
269 313
- 3.2%
5.6 9.9
6 months ago 8 days ago
Python Python
GNU General Public License v3.0 or later GNU General Public License v3.0 or later
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

py-idstools

Posts with mentions or reviews of py-idstools. We have used some of these posts to build our list of alternatives and similar projects.
  • Regex Challenge - Field Extraction
    1 project | /r/Splunk | 12 Jun 2023
    I like this a lot. We have a in-house Snort 2 forwarder that does a similar thing with https://github.com/jasonish/py-idstools and forwards the result directly using HEC. We could use the same code base for dnstap if we wanted.

Malcolm

Posts with mentions or reviews of Malcolm. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-06-29.

What are some alternatives?

When comparing py-idstools and Malcolm you can also consider the following projects:

snort-rules - An UNOFFICIAL Git Repository of Snort Rules(IDS rules) Releases. [UnavailableForLegalReasons - Repository access blocked]

securityonion - Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, and case management. It also includes other tools such as Playbook, osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

wazuh-ruleset - Wazuh - Ruleset

IVRE - Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, etc.

SNORT-GUI - SNORT GUI: Your very own trusted blueteam forensic companion for SNORT IDS. OPTIMIZED, SECURE AND ABSOLUTELY FREE!

core - OPNsense GUI, API and systems backend

py-idstools vs snort-rules Malcolm vs securityonion py-idstools vs wazuh-ruleset Malcolm vs IVRE Malcolm vs SNORT-GUI Malcolm vs core