BDB-Guardian
Defensive PowerShell monitor that detects BigDiskBuster-style DoS attacks against Windows Defender updates — correlates MRT lock + volume handle + buster-file
Details
- External ID
- 1377872152
- Source
- GITHUB
- Company
- —
- Product
- BDB-Guardian
- Website domain
- github.io
- Launched
- Sept. 20, 2026
- Cohort
- —
- Upvotes
- 11
- Upvotes percentile
- 0.33858570330514987
- Tags
- blueteam, mitre-attack, powershell, windows-defender
- Fetched at
- Sept. 24, 2026, 5:02 p.m.
- Updated at
- Sept. 24, 2026, 5:02 p.m.
Enrichment
- Theme
- security exploits and system hacking tools
- Vertical
- Security
- Function
- Observability & eval
- Audience
- Developer
- AI stance
- Not AI
- Project type
- Hobby / open-source project
- Normalized one-liner
- powershell monitor for detecting dos attacks on windows defender
- Manually corrected
- False
Could you build this?
Partial The PowerShell monitor script itself is straightforward, but developing the detection heuristics requires specialized Windows kernel and security research on lock contention and handles.
What it would actually take: The script uses PowerShell and C# interop via P/Invoke (e.g., NtQuerySystemInformation, CreateFile) to monitor open volume handles, FileSystem locks, and MRT.exe (Malicious Software Removal Tool) activity. The challenging part is identifying the exact undocumented Windows Defender locking behavior and race conditions exploited by the BigDiskBuster DoS attack. Building it reliably requires low-level Windows internals knowledge and offensive/defensive security research.
Competitors
Other products that read as similar to this one — 428 launches clear the similarity bar, closest 8 shown.
Attention rank: #261 of 429 (itself plus its competitors, highest first — normalized so YC and Product Hunt are compared fairly).
Launched 315 days after the earliest competitor.
- BigDiskBuster · github · 2026-09-19 · 183 upvotes · similarity 0.73
- GhostShell · github · 2026-09-19 · 12 upvotes · similarity 0.55
- windows-wesp-research · github · 2026-09-11 · 17 upvotes · similarity 0.52
- Pqurp · hn · 2026-05-13 · 5 upvotes · similarity 0.52
- komari-probe · github · 2026-09-17 · 30 upvotes · similarity 0.50
- DDoS detection in 0.9s, tested against a 48 Gbps attack live · hn · 2026-04-26 · 15 upvotes · similarity 0.50
- Brute · github · 2026-09-18 · 8 upvotes · similarity 0.49
- Bb · hn · 2026-04-05 · 5 upvotes · similarity 0.49
Other launches for this product
- No other launches for this product.
Same idea, different domain
Nobody's really built a observability & eval tool for Media & entertainment yet.