Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

EndaceProbes deliver a flawless record of Network History, enabling the resolution of Cybersecurity, Network, and Application challenges. They provide transparency for every incident, alert, or issue through a packet capture platform that seamlessly integrates with various commercial, open-source, or custom tools. Gain a clear view of network activities, allowing for thorough investigations and defenses against even the most formidable Security Threats. Capture essential network evidence effectively to expedite the resolution of Network and Application Performance problems or outages. The open EndaceProbe Platform unifies tools, teams, and workflows into a cohesive Ecosystem, making Network History readily accessible from all your resources. This functionality is embedded within existing workflows, eliminating the need for teams to familiarize themselves with new tools. Additionally, it serves as a robust open platform that allows the deployment of preferred security or monitoring solutions. With the capability to record extensive periods of searchable, precise network history across your entire infrastructure, users can efficiently manage and respond to various network challenges as they arise. This comprehensive approach not only enhances overall security but also streamlines operational efficiency.

Description

Malcolm serves as an open-source platform for security monitoring, aimed at assisting security experts in the collection, processing, and analysis of network data to facilitate threat detection and incident response. By integrating a suite of robust tools, it enables users to capture and visualize network traffic, log information, and security alerts effectively. The platform features a user-friendly interface that simplifies the investigation of potential threats, granting security analysts detailed insights into network activities. Scalability is a key aspect of Malcolm, as it offers versatile deployment options suitable for a range of environments, from small businesses to large corporations. Additionally, its modular architecture allows users to tailor the platform according to their unique security needs, while seamless integration with other observability tools enhances overall monitoring capabilities. Although Malcolm excels in general network traffic analysis, its developers recognize a specific demand within the community for tools that deliver insights into protocols employed in industrial control systems (ICS), thereby addressing a critical niche in security monitoring. This focus on ICS enhances the platform’s relevance in sectors where such systems are vital for operational integrity and safety.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Cisco SecureX Yes 
Cortex XSOAR Yes 
FortiNDR Yes 
Fortinet Yes 
Gigamon Yes 
Google Security Operations (SecOps) Yes 
LogRhythm SIEM Yes 
Microsoft Sentinel Yes 
Network Critical Yes 
Palo Alto Networks AutoFocus Yes 
Palo Alto Networks Next-Generation Firewalls Yes 
Palo Alto Networks Panorama Yes 
Plixer One Yes 
Splunk Enterprise Yes 
Splunk Enterprise Security Yes 
Suricata No 
Tines Yes 
Vectra AI Yes 
Wireshark Yes 
Zeek No 

Integrations

Cisco SecureX No 
Cortex XSOAR No 
FortiNDR No 
Fortinet No 
Gigamon No 
Google Security Operations (SecOps) No 
LogRhythm SIEM No 
Microsoft Sentinel No 
Network Critical No 
Palo Alto Networks AutoFocus No 
Palo Alto Networks Next-Generation Firewalls No 
Palo Alto Networks Panorama No 
Plixer One No 
Splunk Enterprise No 
Splunk Enterprise Security No 
Suricata Yes 
Tines No 
Vectra AI No 
Wireshark No 
Zeek Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

Free
Free Trial No 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux Yes 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Endace

Founded

2001

Country

Global

Website

www.endace.com

Vendor Details

Company Name

Malcolm

Country

United States

Website

malcolm.fyi/

Product Features

Network Traffic Analysis (NTA)

Anomalous Behavior Detection Yes 
High Bandwidth Usage Monitoring Yes 
Historical Behavior Data Yes 
Identify High Network Traffic Sources Yes 
Network Transaction Visibility Yes 
Stream Data to IDR or Data Lake Yes 
Traffic Decryption Yes 

Product Features

Network Traffic Analysis (NTA)

Anomalous Behavior Detection No 
High Bandwidth Usage Monitoring No 
Historical Behavior Data No 
Identify High Network Traffic Sources No 
Network Transaction Visibility No 
Stream Data to IDR or Data Lake No 
Traffic Decryption No 

Alternatives

Alternatives

Core Network Insight Reviews

Core Network Insight

Core Security (Fortra)
Omnipeek Reviews

Omnipeek

LiveAction
GREYCORTEX Mendel Reviews

GREYCORTEX Mendel

GREYCORTEX
Capsa Reviews

Capsa

Colasoft
Sangfor Athena NDR Reviews

Sangfor Athena NDR

Sangfor Technologies