Issues

• implement JA4X and JA4N in Zeek JA4 package

  enhancementexternalzeek
  Feature

  cisagov/Malcolm#1261 · Filter by author mmguero opened on Oct 21, 2026 · v26.11.0
  

• Enhancement: Automate SELinux, and keystore volume tweaks for RHEL-family installations

  dockerenhancementinstall.pyLinux
  cisagov/Malcolm#1181 · Filter by author angry-bender opened on Oct 7, 2026 · v26.11.0
  1

• Arkime doesn't show Zeek and Suricata logs with non-default MALCOLM_NETWORK_INDEX_PATTERN and weekly MALCOLM_NETWORK_INDEX_SUFFIX

  arkimebugexternal
  Bug

  cisagov/Malcolm#1120 · Filter by author mmguero opened on Sep 15, 2026 · v26.11.0

• Imported configuration values set via apply_default() are not recognized as modified, causing fallback to defaults during import

  buginstall.py
  cisagov/Malcolm#1110 · Filter by author JedHawkins opened on Sep 2, 2026 · v26.11.0
  1

  

• policy manager: Hedgehog pulling version upgrades from Malcolm server

  enhancementpolicysensorupgrade
  Feature

  cisagov/Malcolm#1034 · Filter by author mmguero opened on Jun 29, 2026 · z.staging

• ML-assisted severity scoring (learned, context-aware risk_score)

  AIenhancement
  Feature

  cisagov/Malcolm#1023 · Filter by author sercanokur opened on Jun 8, 2026 · z.staging
  1

  

• configuration/installer scripts - handle dependencies better so as not to overwrite/lose user settings

  buginstall.py
  Bug

  cisagov/Malcolm#949 · Filter by author mmguero opened on Apr 23, 2026 · v26.11.0
  

• prepare PRs for upstream target/strelka branch

  codeexternal
  Task

  cisagov/Malcolm#923 · Filter by author mmguero opened on Mar 19, 2026 · v26.11.0
  

• add NIC-level statistics to Packet Capture Statistics dashboard

  capturedashboardsenhancement
  Feature

  cisagov/Malcolm#776 · Filter by author mmguero opened on Sep 16, 2025 · z.staging

• network statistics in "Resources - Hosts Overview" do not separate by interface as they should

  bugcapturedashboardsregression
  Bug

  cisagov/Malcolm#775 · Filter by author mmguero opened on Sep 16, 2025 · z.staging

• configuration overhaul - auth_setup

  authcontrol.pyenhancementinstall.pyUI
  Task

  cisagov/Malcolm#768 · Filter by author mmguero opened on Sep 4, 2025 · z.staging

• configuration overhaul - GUI interface

  enhancementinstall.pyUI
  Task

  cisagov/Malcolm#767 · Filter by author mmguero opened on Sep 4, 2025 · v26.11.0

• Malcolm configuration overhaul

  enhancementinstall.pyUI
  Epic

  cisagov/Malcolm#766 · Filter by author mmguero opened on Sep 4, 2025 · z.staging

• review cyclomatic complexity of Python scripts and refactor where needed

  code
  Task

  cisagov/Malcolm#765 · Filter by author mmguero opened on Sep 4, 2025 · v26.11.0
  2

  

• Parsnip/Malcolm Integration

  dockerenhancementzeek
  Epic

  cisagov/Malcolm#763 · Filter by author mckenziewillmore opened on Sep 3, 2025

• Improvements to the upgrade process

  enhancementupgrade
  Epic

  cisagov/Malcolm#683 · Filter by author mmguero opened on May 22, 2025 · z.staging

• FIPS compliance

  enhancementsecurity
  Epic

  cisagov/Malcolm#681 · Filter by author mmguero opened on May 20, 2025

• If arkime-capture fails to connect, eventually fail over to netsniff-ng or tcpdump capture mode

  enhancementsensor
  Feature

  cisagov/Malcolm#665 · Filter by author mmguero opened on May 5, 2025 · v26.11.0

• integrate customizations from Malcolm-Helm as options in vanilla Malcolm (part 2)

  cloudenhancementexternal
  Feature

  cisagov/Malcolm#657 · Filter by author mmguero opened on Apr 25, 2025 · z.staging
  

• support external postgres database in lieu of Malcolm-embedded one

  authenhancementnetbox
  Feature

  cisagov/Malcolm#632 · Filter by author mmguero opened on Mar 26, 2025 · z.staging

• errata for learning tree

  training
  Task

  cisagov/Malcolm#631 · Filter by author mmguero opened on Mar 25, 2025 · z.staging

• figure out how to support Hedgehog authenticating to Keycloak

  authenhancementsensorUI
  Feature

  cisagov/Malcolm#617 · Filter by author mmguero opened on Mar 13, 2025 · z.staging

• create a Malcolm theme and make it the default for the embedded Keycloak instance

  authenhancementUI
  Feature

  cisagov/Malcolm#616 · Filter by author mmguero opened on Mar 13, 2025

• Investigate sandialabs/gait

  enhancementzeek
  Feature

  cisagov/Malcolm#575 · Filter by author mmguero opened on Feb 3, 2025

• Hedgehog NIC identify (ethtool --identify) does not blink interface lights on some hardware

  bugsensor
  Bug

  cisagov/Malcolm#568 · Filter by author ee-hex-ee opened on Jan 29, 2025
  3