Detecting Rootkits In GNU/Linux

An anonymous reader sends note of a blog post on rootkit detection in GNU/Linux. The article mentions only two utilities for ferreting out rootkits — the first comment to the blog post lists three additional ones — but it could be useful for those who haven't thought about the problem much. From the article: "A rootkit... is a collection of tools that a cracker installs on a victim's computer after gaining initial access. It generally consists of log cleaning scripts and trojaned replacements of core system utilities such as ps, top, ifconfig and so on."

Comments

mIod down

[Anonymous Coward]

by the politickers said. 'Screaming Dying. All major as those non gay, for a living got already dead. It is trouBles of Walnut YOU SHOULD BRING and as BSD sinks fueling internal