A powerful, easily deployable network traffic analysis tool suite
Downloads
Malcolm
Docker images
Malcolm operates as a cluster of Docker containers, isolated sandboxes which each serve a dedicated function of the system. Its Docker images can be pulled from Docker Hub or built from source by following the instructions in the Quick Start section of the documentation.
Installer ISO
Malcolm’s Docker-based deployment model makes Malcolm able to run on a variety of platforms. However, in some circumstances (for example, as a long-running appliance as part of a security operations center, or inside of a virtual machine) it may be desirable to install Malcolm as a dedicated standalone installation.
Malcolm can be packaged into an installer ISO based on the current stable release of Debian. This customized Debian installation is preconfigured with the bare minimum software needed to run Malcolm.
While official downloads of the Malcolm installer ISO are not provided, an unofficial build of the ISO installer for the latest stable release is available for download here.
| ISO | SHA256 |
|---|---|
| malcolm-23.03.0.iso (5.3GiB) | 9459fb0ce61fba8c7a9a9457b24d42182519dbb62247111471e38f8c190113eb |
Hedgehog Linux
Installer ISO
Instructions are provided to generate the Hedgehog Linux ISO from source. While official downloads of the Hedgehog Linux ISO are not provided, an unofficial build of the ISO installer for the latest stable release is available for download here.
| ISO | SHA256 |
|---|---|
| hedgehog-23.03.0.iso (2.3GiB) | 3cdba91e417f6ada83130aabc3be38dd0a8b12b6bda227859a546ace198680bc |
Warning
Please check any files you may have downloaded from the links on this page against the SHA256 sums provided to verify the integrity of the downloads.
Read carefully the installation documentation for Malcolm and/or Hedgehog Linux. The ISO media boot on systems that support EFI-mode booting. The installer is designed to require as little user input as possible. For this reason, there are NO user prompts and confirmations about partitioning and reformatting hard disks for use by the operating system. The installer assumes that all non-removable storage media (eg., SSD, HDD, NVMe, etc.) are available for use and ⛔🆘😭💀 will partition and format them without warning 💀😭🆘⛔.
Disclaimer
The terms of Malcolm’s license also apply to these unofficial builds of the Malcolm and Hedgehog Linux installer ISOs: neither the organizations funding Malcolm’s development, its developers nor the maintainer of this site makes any warranty, express or implied, or assumes any legal liability or responsibility for the accuracy, completeness or usefulness of any data, apparatus or process disclosed therein.