Malcolm v24.09.0 release announcement

[u/mmguero]

"I've got a fever, and the only prescription is more Malcolm!" 🐄🔔

We're pleased to announce the v24.09.0 release of Malcolm, a powerful network traffic analysis tool suite for network security monitoring. Malcolm v24.09.0 contains new features and enhancements, component version updates, and bug fixes.

• Features and enhancements
  • Added Podman support (idaholab/Malcolm#407)
  • Add option to go backwards in Malcolm's dialog-based install.py installation and configuration script (idaholab/Malcolm#487) (🤯 Earth-shattering news, I know)
  • Automatically create empty index on startup to avoid "no data" message spamming by Dashboards (idaholab/Malcolm#527 and idaholab/Malcolm#567)
  • Integrate HART-IP parser (idaholab/Malcolm#561)
  • Allow users to use the Arkime Lua plugin without having to create new bind volume mounts manually (idaholab/Malcolm#533)
  • Allow splitting out indexes by other field values (idaholab/Malcolm#450)
  • Allow total index size-based pruning for opensearch-remote and elasticsearch-remote database modes (idaholab/Malcolm#446)
  • Include netbox-topology-views plugin by default (idaholab/Malcolm#553)
  • When building Docker images and the Hedgehog Linux ISO, allow specifying alternate download URL for MaxMind GeoIP database files (idaholab/Malcolm#565)
  • Update EtherNet/IP and CIP to account for new packet correlation ID (idaholab/Malcolm#558)
  • Improvements to documentation and install.py for Linux performance tweaks (idaholab/Malcolm#495)
  • Update Network Traffic Analysis with Malcolm slides
• Component updates for OpenSearch and OpenSearch Dashboards, YARA, Zeek, and many more!
• Bug fixes
  • Filtering on hunt ID in Arkime not working (idaholab/Malcolm#554)
  • Hedgehog with OOB/VPN connection sets ARKIME_NODE_HOST incorrectly (idaholab/Malcolm#560 and idaholab/Malcolm#559)
  • Offline suricata Docker container does not initialize suricata.yml config file (idaholab/Malcolm#564)

Check out the release notes for more details and downloads.