Logo

A powerful, easily deployable network traffic analysis tool suite

Quick Start

Documentation

Components

Supported Protocols

Configuring

Arkime

Dashboards

Hedgehog Linux

Contribution Guide

CyberChef

Malcolm provides an instance of CyberChef, the “Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis.” CyberChef is available at at https://localhost/cyberchef.html if you are connecting locally.

Arkime’s Sessions view has built-in CyberChef integration for Arkime sessions with full PCAP payloads available: expanding a session and opening the Packet Options drop-down menu in its payload section will provide options for Open src packets with CyberChef and Open dst packets with CyberChef.