HN Showcase
Back to browse
GitHub Repository

Rapidly Search and Hunt through Linux Forensics Artifacts

213 starsGo

ChopChopGo – Sigma-based threat hunting for Linux forensic artifacts

by M00NL1G7·Mar 9, 2026·1 point·1 comment
Visit ProjectView on HN

AI Analysis

●●SolidNiche GemBig Brain

Sigma rules for Linux forensics when Chainsaw only does Windows.

Strengths
  • •Sigma rule compatibility means existing detection libraries work immediately
  • •Go implementation delivers fast scanning without Python overhead
  • •Lightweight output formats fit terminal-based investigation workflows
Weaknesses
  • •Linux forensics already has osquery, Velociraptor with broader capabilities
  • •Narrow audience limits adoption to DFIR professionals only
Category
Security
Target Audience

DFIR professionals, security researchers, incident responders

Similar To

Chainsaw · osquery · Velociraptor

Similar Projects

Security●●Solid

GPU-accelerated search for Bitcoin keys generated with weak entropy

This reads like a GPU engineer's field notes — one ~3,400-line CUDA file implements a full per-thread crypto pipeline (key gen → EC multiply → SHA-256 → RIPEMD-160) and a two-stage bloom+binary-search matcher to check ~3,100 targets at ~100M keys per batch. The article digs into concrete low-level choices (LUT layout, memory hierarchy, __ldg reads, atomicCAS reporting, and per-mode keygen strategies), which is rare in public writeups; downside is it's closed-source and the dual-use/ethical implications should be called out more explicitly.

WizardryNiche Gem
orkblutt
213mo ago
Security●●Solid

Zen-Hunt – Forensic Scanner in Rust (SIMD, 7GB/S on NVMe)

7GB/s forensic scanning with SIMD and async prefetch beats grep by 10x.

WizardryNiche Gem
ejgi
102mo ago