iiinova — where your digital self keeps evolving

Seth Grover @mmguero.infosec.exchange.ap.brid.gy · 25/08/2026

[release notes for Malcolm v26.08.0, a network traffic analysis tool suite for network security monitoring] Malcolm v26.08.0 adds a NetBox `purdue_zone` custom field that propagates ICS/OT network zone classifications to devices, prefixes, and virtual […] [Original post on infosec.exchange]

A screenshot of Malcolm's new "Biomes" dashboard, highlighting connections between network zones.

000 0

Seth Grover @mmguero.infosec.exchange.ap.brid.gy · 22/07/2026

[release notes for Malcolm v26.07.1, a network traffic analysis tool suite for network security monitoring] Malcolm v26.07.1 adds a few minor changes on top of Malcolm v26.07.0, the most notable being a fix for a crash in the `strelka-backend` container on […] [Original post on infosec.exchange]

A screenshot of Malcolm's new IEC 104 protocol dashboard.

000 0

Seth Grover @mmguero.infosec.exchange.ap.brid.gy · 19/05/2026

[release notes for Malcolm v26.05.1, a network traffic analysis tool suite for network security monitoring] Malcolm v26.05.1 is out?!? What, already? Déjà vu? We bumped up to the timetable on this release as a critical vulnerability found in NGINX made it […] [Original post on infosec.exchange]

010 1

Seth Grover @mmguero.infosec.exchange.ap.brid.gy · 05/05/2026

[release notes for Malcolm v26.05.0, a network traffic analysis tool suite for network security monitoring] Malcolm v26.05.0 delivers a mix of feature improvements, performance improvements, bug fixes, dependency updates, and deployment refinements across […] [Original post on infosec.exchange]

A chart listing the components making up the Malcolm tool suite

000 0

Seth Grover @mmguero.infosec.exchange.ap.brid.gy · 15/04/2026

[Release notes for v26.04.1 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring] Malcolm v26.04.1 contains improvements, bug fixes, security updates, and component bumps. If you are upgrading from […] [Original post on infosec.exchange]

A screenshot of Malcolm's IP Connection Trees dashboard

001 1

Seth Grover @mmguero.infosec.exchange.ap.brid.gy · 18/12/2025

[Release notes for v25.12.1 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring] Malcolm v25.12.1 contains a few critical bug fixes and component version updates […] [Original post on infosec.exchange]

A screenshot of Malcolm's new Trees feature, tracing connections between IP addresses in network traffic.

000 0

Seth Grover @mmguero.infosec.exchange.ap.brid.gy · 04/11/2025

[Release notes for v25.11.0 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring] Malcolm v25.11.0 includes an overhaul of the `install.py` installation/configuration script, a few bug fixes, and some […] [Original post on infosec.exchange]

A screenshot of Malcolm's new Connections Tree visualization, depicting a tree of IP addresses with lines representing connections between the endpoints.

001 1

Seth Grover @mmguero.infosec.exchange.ap.brid.gy · 30/07/2025

[Release notes for v25.07.0 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring] Malcolm v25.07.0 includes quite a few new features and enhancements, performance improvements, bug fixes, and […] [Original post on infosec.exchange]

A screenshot of the desktop from the ISO-installed Malcolm configuration, with a list describing the icons on the shortcut bar.

1. Applications menu
2. Terminal
3. Web browser
4. Malcolm landing page
5. Arkime
6. Dashboards
7. Upload artifacts
8. User management
9. Malcolm configuration
10. NetBox
11. CyberChef
12. Start Malcolm
13. Restart Malcolm
14. Stop Malcolm
15. Malcolm debug logs
16. Desktop workspaces
17. NetworkManager
18. Power management
19. System notifications
20. Time and date
21. Logout menu

000 0

Seth Grover @mmguero.infosec.exchange.ap.brid.gy · 23/06/2025

[Release notes for v25.06.0 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring] Malcolm v25.06.0 includes a some new and oft-requested features, bug fixes, and component version bumps. Compare v25 […] [Original post on infosec.exchange]

Screenshot of the Malcolm documentation for role-based access control found at https://malcolm.fyi/docs/authsetup.html#AuthKeycloakRBAC

000 0

Seth Grover @mmguero.infosec.exchange.ap.brid.gy · 06/05/2025

[Release notes for v25.04.1 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring] Malcolm v25.04.1 contains new features and improvements, component version updates, bug fixes, and other great stuff […] [Original post on infosec.exchange]

A screenshot from Malcolm's GitHub releases page.

100 1

Seth Grover @mmguero.infosec.exchange.ap.brid.gy · 28/03/2025

[Release notes for v25.03.1 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring] _This has been a busy month for Malcolm! I pushed hard to getv25.03.0 out earlier this month, as it contained pretty […] [Original post on infosec.exchange]

A simple network diagram showing how Malcolm is used to monitor network traffic.

000 0

Seth Grover @mmguero.infosec.exchange.ap.brid.gy · 19/03/2025

[Release notes for v25.03.0 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring] Malcolm v25.03.0 adds 🔐 authentication via Keycloak and all that entails: single sign-on (SSO), identity providers […] [Original post on infosec.exchange]

The Malcolm landing page showing the new Keycloak Authentication feature.

000 0

Seth Grover @mmguero.infosec.exchange.ap.brid.gy · 21/02/2025

[Discussion of religion and The Book of Mormon] I don't like to compartmentalize my life, so if you're following me you're going to see some of its various facets. This one's about religion: if that's not your thing I respect that, and hope you can scroll […] [Original post on infosec.exchange]

A picture of a man reading the Book of Mormon.

000 0

Seth Grover @mmguero.infosec.exchange.ap.brid.gy · 19/02/2025

I'm doing a #parents night at a local elementary school about helping #kids stay safe online. Here's my handout with my proposed talking points. Any advice/suggestions/something I'm missing? #parenting #onlinesafety #esafety #socialmedia

• Trust and supervision
◦ Work with your kids, not against them, to set and keep your family’s technology rules
◦ Regularly review history, sites, apps, contacts and messages
◦ Let your kids know they can talk to you about anything they see online without fear of reprisal
◦ Communicate openly and often about the benefits and dangers of technology
• Sharing safely
◦ Set social media profiles to private
◦ Only friend people you know in real life
◦ Don’t share personally identifiable information
◦ Turn geotagging off
◦ Understand oversharing: once it’s shared, you can’t take it back
• Appropriate usage
◦ Establish schedules and time limits for screen time
◦ Keep screens in public locations
◦ Turn screens off at the table and well before bed
• Parental controls
◦ Find trusted sources and learn about your options
◦ Familiarize yourself with parental controls for the platforms you use (Windows, Android, macOS, iPhone, etc.)
◦ DNS-based content filtering for your home network
• Recognize the signs of abuse, grooming, cyberbullying and self image issues
• Lead by example
◦ Keep the same rules you expect them to keep when it comes to phone-free times and places
◦ Spend quality time with your kids without devices
◦ Don’t make your kids battle your phone for your attention

011 1

Seth Grover @mmguero.infosec.exchange.ap.brid.gy · 19/12/2024

[Release notes for v24.12.0 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring] Malcolm v24.12.0 contains several improvements to the Malcolm configuration script, the Malcolm user interface, and […] [Original post on infosec.exchange]

Screenshot of Malcolm's "Zeek Intelligence" dashboard. Contains tables, charts, graphs, etc., highlighting data from Zeek's intel.log

000 0