软件包: unhide.rb (22-2)
unhide.rb 的相关链接
Trisquel 的资源:
下载源码包 unhide.rb:
维护者:
Original Maintainers:
- Debian Forensics (Mail Archive)
- Julien Valroff
外部的资源:
- 主页 [launchpad.net]
相似软件包:
Forensic tool to find processes hidden by rootkits
Unhide.rb is a forensic tool to find processes hidden by rootkits.
It looks for active processes in many different ways. Processes found by some means but not others are considered to be "hidden", and are reported to the user.
Unhide.rb is a tentative of rewrite in Ruby of the original Unhide, which is written in C. While being much faster, it does not implement all the diagnostics of the original version. It is also less secure as it cannot be statically compiled.
This package can be used by rkhunter in its daily scans.