Chkrootkit

From LinuxReviews
Jump to navigationJump to search

chkrootkit is a pretty advanced tool that checks for common signs of a rootkit being installed on Unix-variants.

It can detect hard-to-spot things like binary modification, changes to utmp/wtmp/lastlog and strange non-normal kernel modules.