Malcolm
malcolm.fyiCorrelate PCAP, Zeek logs and Suricata alerts
Correlate PCAP, Zeek logs and Suricata alerts
Analyze investigation observables through a shared engine
Linux firewall zones with separate runtime and permanent rules
A portable operating environment with Tor-oriented defaults
Apple-device access to passwords, passkeys and verification codes
Manage several encrypted-folder backends from a desktop interface
Allow or deny Android apps on Wi-Fi and mobile data
Rule and list-based content blocking for supported browsers
Apply saved preferences to supported consent dialogs
Block selected Mac apps without connection popups
Hosted DNS filtering with per-device request visibility
Generate verification codes using a YubiKey-backed workflow
An Android token vault with backup and export controls
Delete closed-tab cookies while retaining chosen exceptions
A managed service for recurring data-broker removal requests
Windows volume encryption with managed startup and recovery choices
Android Firefox derivative removing tracking and proprietary libraries
Browser with malicious-site, download and payment-session controls