Paket: unhide.rb (22-6)

[ Källkod: unhide.rb  ]

Forensics tool to find processes hidden by rootkits

Unhide.rb is a forensics tool to find processes hidden by rootkits.

It looks for active processes in many different ways. Processes found by some means but not others are considered to be "hidden", and are reported to the user.

Unhide.rb is a tentative of rewrite in Ruby of the original Unhide, which is written in C. While being much faster, it does not implement all the diagnostics of the original version. It is also less secure as it cannot be statically compiled.

This package can be used by rkhunter in its daily scans.

Märken: Systemadministration: Undersökningar och återhämtning, Implemented in: Ruby, User Interface: interface::commandline, role::program, Scope: Utility, Security: Forensics, security::ids, use::scanning

Andra paket besläktade med unhide.rb

• dep: procps

  Verktyg för filsystemet /proc

• dep: ruby

  Interpreter of object-oriented scripting language Ruby (default version)

• sug: rkhunter

  rootkit, backdoor, sniffer and exploit scanner

Hämta unhide.rb

Hämtningar för alla tillgängliga arkitekturer

Arkitektur	Paketstorlek	Installerad storlek	Filer
all	8,6 kbyte	32,0 kbyte	[filförteckning]