Malcolm v3.3.1
v3.3.1 is a minor Malcolm release with the following updates:
- Incorporate Corelight's "OMIGOD" (CVE-2021-38647) plugin
- Bump capa to v3.0.2 which now includes ELF scanning capabilities
- Bump zeek to v4.0.4
- minor fix on race condition creating default anomaly detectors
- minor tweak to
build.sh
script for building docker images
Malcolm and Hedgehog Linux may be obtained by pulling or building the Docker images and/or building the ISO installer images as described in the documentation. Unofficial ISO installer images for Malcolm and Hedgehog Linux are not hosted on GitHub, but may be downloaded from https://malcolm.fyi/download/.