Logo

A powerful, easily deployable network traffic analysis tool suite

Quick Start

Documentation

Components

Supported Protocols

Configuring

Arkime

Dashboards

Hedgehog Linux

Contribution Guide

Downloads

Malcolm

Docker images

Malcolm operates as a cluster of Docker containers, isolated sandboxes which each serve a dedicated function of the system. Its Docker images can be pulled from Docker Hub or built from source by following the instructions in the Quick Start section of the documentation.

Installer ISO

Malcolm’s Docker-based deployment model makes Malcolm able to run on a variety of platforms. However, in some circumstances (for example, as a long-running appliance as part of a security operations center, or inside of a virtual machine) it may be desirable to install Malcolm as a dedicated standalone installation.

Malcolm can be packaged into an installer ISO based on the current stable release of Debian. This customized Debian installation is preconfigured with the bare minimum software needed to run Malcolm.

While official downloads of the Malcolm installer ISO are not provided, an unofficial build of the ISO installer for the latest stable release is available for download here.

ISO SHA256
malcolm-6.4.2.iso (5.1GiB) cccca22d330439472ff4334ff9530083dd74d6e4989b972306174d3934e3c27f

Hedgehog Linux

Installer ISO

Instructions are provided to generate the Hedgehog Linux ISO from source. While official downloads of the Hedgehog Linux ISO are not provided, an unofficial build of the ISO installer for the latest stable release is available for download here.

ISO SHA256
hedgehog-6.4.2.iso (2.3GiB) ffe350d7dd872f19e6ab194af1775be96827788eb3fc798af2e2a513d775e950

Warning

Please check any files you may have downloaded from the links on this page against the SHA256 sums provided to verify the integrity of the downloads.

Read carefully the installation documentation for Malcolm and/or Hedgehog Linux. The ISO media boot on systems that support EFI-mode booting. The installer is designed to require as little user input as possible. For this reason, there are NO user prompts and confirmations about partitioning and reformatting hard disks for use by the operating system. The installer assumes that all non-removable storage media (eg., SSD, HDD, NVMe, etc.) are available for use and ⛔🆘😭💀 will partition and format them without warning 💀😭🆘⛔.

Disclaimer

The terms of Malcolm’s license also apply to these unofficial builds of the Malcolm and Hedgehog Linux installer ISOs: neither the organizations funding Malcolm’s development, its developers nor the maintainer of this site makes any warranty, express or implied, or assumes any legal liability or responsibility for the accuracy, completeness or usefulness of any data, apparatus or process disclosed therein.