nowfound

Dev tools · November 25, 2025

Deft-Intruder – Real-time malware detection daemon for Linux

I built an open-source malware detection daemon that monitors all running processes in real-time using ML + heuristics. No kernel modules or eBPF required. Key points: - Polls &#x2F;proc for new processes (works on any Linux kernel 2.6+) - Random Forest model trained on EMBER 2018 dataset (2.3M samples) - Heuristic rules for crypto miners, ransomware, rootkits - ~20MB RAM, <1% CPU, sub-millisecond scan latency - Pure C, zero runtime dependencies - Model embedded directly in binary (50KB) Why I built this: Existing solutions either require modern kernels (eBPF) or are heavy&#x2F;proprietary.…

Deft-Intruder – Real-time malware detection daemon for Linux launched on November 25, 2025 with 6 votes, #2,995 of 9,796 launches that month and more than 75% of that year's launches.

Visit github.com ↗Alternatives

What it does

Real-time Heuristic Malware Detection System for Linux - 539hex/deft-intruder

In the maker’s words, at launch

I built an open-source malware detection daemon that monitors all running processes in real-time using ML + heuristics. No kernel modules or eBPF required. Key points: - Polls &#x2F;proc for new processes (works on any Linux kernel 2.6+) - Random Forest model trained on EMBER 2018 dataset (2.3M samples) - Heuristic…

Does a similar job

all alternatives →
  • TheProtector – Linux Bash script for the paranoid admin on a budget2025 · github.com · ▲167

    Hi HN, I spent the past year building this in my spare time because I got tired of enterprise security tools that cost $50K&#x2F;year and don't understand Linux. TheProtector is a comprehensive security monitoring tool that actually runs on the systems we use (Linux) instead of being a Windows-first afterthought. Built it entirely on a $500 laptop because I believe good security shouldn't require unlimited budgets. Features: - Real-time process, network, and file monitoring - YARA malware detection with custom rules - eBPF kernel monitoring (when available) - Behavioral baseline…

  • Kern – container and resource runtime in a 1.5 MB binary, no daemonAug 2026 · github.com · ▲70

    A fast, rootless sandbox and virtual resource runtime for any workload, including untrusted and AI-generated code. Daemonless: a real, kernel-enforced container in ~3.5 ms from an OCI image, out of one static binary - getkern/kern

  • Picosnitch – a reliable and lightweight security/privacy tool for Linux2022 · elesiuta.github.io · ▲92

    Per-executable network bandwidth monitoring for Linux

  • I missed the moving blocks, so I built a real Linux disk defragmenterAug 2026 · github.com · ▲97

    Linux filesystem defragger written in Rust and Qt Quick/Kirigami - gbin/defragger

  • Obserware2021 · gitlab.com · ▲71

    Interactive system monitoring for GNU/Linux distributions

  • Local-first firmware analyzer using WebAssemblyMar 2026 · xray.boldwark.com · ▲8

    Hi HN, I just wanted to share what I have been working on for the past few months: A firmware analyzer for embedded Linux systems that helps uncovering security issues running entirely in the browser. This is a very early Alpha. It is going to be rough around the edges. But I think it provides quite a lot of value already. So please go ahead and drop a firmware (only .tar rootfs archives for now) and try to break it :)

More dev tools this month

the category →
  • /dev/null▲486

    a social network for devs

    Dev tools · 3d ago · dev-null.sh

  • Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

    open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

    Dev tools · 28d ago · github.com

  • Reladraw – A diagram language where you decide where to place things▲411

    Contribute to reladraw/reladraw development by creating an account on GitHub.

    Dev tools · 26d ago · github.com

  • OpenBot▲362

    Grok Bot alternative: free, local, open-source, multiplayer

    Dev tools · 23d ago · openbot.run

  • Talanoa▲346

    Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

    Dev tools · 21d ago · talanoa.email

  • CoreSpeed▲332

    One MCP for everything your agents need: apps, memory, tools

    Dev tools · 28d ago · corespeed.io

Source: Show HN post ↗ · launch text quoted in part

Launched alongside, November 2025

the whole month →
  • Guideflow▲1,338

    Create interactive product demos and step-by-step guides in seconds with Guideflow, the leading AI-powered demo automation tool.

    AI · Nov 2025 · guideflow.com

  • I built a synth for my daughter▲1,278

    Hardware and software projects by Ali Roberts

    Life & fun · Nov 2025 · bitsnpieces.dev

  • Welltory▲1,028

    Measure your wellness. Use data to feel great every day.

    Work · Nov 2025 · welltory.com

  • Gemini 3▲1,016

    Bring any idea to life with multimodal capabilities

    AI · Nov 2025 · blog.google

  • TrustMRR▲833

    LLM Gateway is a b2b artificial intelligence based in United States, founded in 2025. $259,539/month in verified Stripe revenue. $78,764 MRR. Ahrefs Domain Rating 52/100. growing 55% month-over-month. Track LLM Gateway's verified metrics on TrustMRR.

    Growth · Nov 2025 · trustmrr.com

  • Boing▲782

    Life & fun · Nov 2025 · boing.greg.technology