cisagov/Malcolm v5.2.10

Malcolm v5.2.10

on GitHub

Malcolm v5.2.10 is a minor release updating some of Malcolm's core components.

v5.2.9...v5.2.10

• Version bumps

  • Arkime to v3.4.2
  • OpenSearch to v1.3.0
  • OpenSearch dashboards to v1.3.0

• Bug fixes

  • #205
  • ensure timestamp fields are explicitly defined as date type in index template

• Improvements

  • restore zeek.cip_io.io_data field so that it may be reviewed in Dashboards Discover view and Arkime
  • added malcolmmonitor convenience bash function into Malcolm ISO-installed environment
  • pointed several zeek plugins' installation source back upstream now that my PRs have been accepted

• Cleanup

  • removed references related to internally-developed INL tool MALASS which is no longer under development and was never released publicly

Malcolm and Hedgehog Linux may be obtained by pulling or building the Docker images and/or building the ISO installer images as described in the documentation. Unofficial ISO installer images for Malcolm and Hedgehog Linux are not hosted on GitHub, but may be downloaded from https://malcolm.fyi/download/.