Malcolm Definitions Overview

Additional Resources for Malcolm Support: • Malcolm Documentation: https://cisagov.github.io/Malcolm The Malcolm website is the central location for information about Malcolm, including detailed quick start instructions and user guides. • Malcolm Discussion Forum: https://github.com/cisagov/Malcolm/discussions Engage with the Malcolm discussion community. Ask questions, review past Q&A, and stay informed of Malcolm announcements. • Malcolm Video Feedback: https://www.surveymonkey.com/r/769NBYZ Was this video helpful? How could it be improved? Your feedback will help us improve future Malcolm videos. • Malcolm Learning Tree: https://github.com/cisagov/Malcolm/wiki/Learning • Next Video in This Sequence: Malcolm Software Overview https://youtu.be/bbCYeBcK0ag?si=p_qOafG8VOcgc0dO 00:00:00 Overview 00:00:18 Packet Capture 00:02:09 Port Mirroring/Network Tap 00:02:52 Tcpdump, netsniff-ng, windump, WireShark 00:03:25 IDS/IPS 00:03:54 Network Security Monitoring 00:04:25 Security Information and Event Management (SIEM) 00:04:43 Application Containerization 00:05:07 Network Infrastructure Modeling 00:05:29 IT/OT/ICS 00:06:18 Conclusion