Malcolm's OpenSearch data can be visualized in Grafana as an alternative to OpenSearch Dashboards, integrating OT security alerts into existing plant monitoring dashboards.
Malcolm embeds Suricata as its signature-based detection engine, running it in IDS mode against live traffic or uploaded PCAPs and indexing all alerts into OpenSearch.