{"owner":"cisagov","github":"https://github.com/cisagov","claimed":false,"inventory":[],"indexed":[{"repo":"cisagov/Malcolm","github":"https://github.com/cisagov/Malcolm","description":"Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.","language":"Python","stars":2488,"topics":["network-security","pcap","security","arkime","cybersecurity","infosec","network-traffic-analysis","networksecurity","opensearch","opensearch-dashboards"],"license":null,"category":"security-tools"},{"repo":"cisagov/decider","github":"https://github.com/cisagov/decider","description":"A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK® framework.","language":"HTML","stars":1225,"topics":["cybersecurity","ttp"],"license":null,"category":"security-tools"},{"repo":"cisagov/thorium","github":"https://github.com/cisagov/thorium","description":"A scalable file analysis and data generation platform that allows users to easily orchestrate arbitrary docker/vm/shell tools at scale.","language":"Rust","stars":1019,"topics":["docker","kubernetes","malware-analysis","rust","rust-lang","scalability"],"license":null,"category":"deployment-docker-iac"}],"how_to_buy":"GET /r/cisagov/<repo> (Accept: application/json) for any listed repo here: tree, README, price and the checkout to pay (x402; rehearse first at its test twin, simulated money). Repos under 'indexed' are free: clone them from GitHub."}