{"repo":"rfxn/linux-malware-detect","free":true,"listed":false,"github":"https://github.com/rfxn/linux-malware-detect","clone":"git clone https://github.com/rfxn/linux-malware-detect.git","description":"Multi-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring, quarantine, and multi-channel alerting","language":"Shell","stars":1487,"topics":["bash","clamav","inotify","intrusion-detection","linux-security","malware-detection","security-scanner","yara"],"license":"GPL-2.0","category":"cli-tools","readme_excerpt":"Linux Malware Detect (LMD) Malware scanner for Linux — multi-stage threat detection (MD5, SHA-256, HEX, YARA, statistical analysis), ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting (email, Slack, Telegram, Discord). (C) 2002-2026, R-fx Networks <proj@rfxn.com> (C) 2026, Ryan MacDonald <ryan@rfxn.com> Licensed under GNU GPL v2 --- What's New in 2.0.1 43x faster native scan engine — the native scanning pipeline has been completely rewritten with batch parallel processing. Real-world benchmark on 10,000 files: Version Runtime Files Hits --------- --------- ------- ------ v1.6.6 1,217s 9,931 35 v2.0.1 28s 9,931 35 MD5 and HEX signature matching now use batch grep with Aho-Corasick parallel workers, eliminating per-file pattern compilation overhead and 500,000 subprocess forks per scan. Configure parallel worker count with scan workers (default: auto). Other highlights: scan lifecycle management ( --kill , --pause , --stop / --continue , -L ), SHA-256 hash scanning with CPU hardware auto-detection ( scan hashtype ), native YARA scanning ( scan yara=1 ), Discord webhook alerting, Slack/Telegram alerting fixes, ClamAV hex wildcard support in the native engine, and 200+ bug fixes across the codebase. See CHANGELOG for full details. --- Contents - 1. Introduction - 2. Installation - 3. Configuration - 3.1 General Options - 3.2 Alerting - 3.3 Scanning Options - 3.4 YARA Scanning - 3.5 Quarantine Options - 3.6","default_branch":null,"files":null,"tree":[],"storefront":"/r/rfxn","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/rfxn/linux-malware-detect/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}