chkrootkit -- locally checks for signs of a rootkit

chkrootkit is a tool to locally check for signs of a rootkit. It contains: chkrootkit: shell script that checks system binaries for rootkit modification. ifpromisc.c: checks if the interface is in promiscuous mode. chklastlog.c: checks for lastlog deletions. chkwtmp.c: checks for wtmp deletions. check_wtmpx.c: checks for wtmpx deletions. (Solaris only) chkproc.c: checks for signs of LKM trojans. c

[jpoctet]

完璧では無いけど、unix系のrootkitチェックに。

[kmuraoka]

chkrootkit locally checks for signs of a rootkit. Includes ifpromisc.c to check if the interface is in promiscuous mode, chklastlog.c and chkwtmp.c to check for lastlog and wtmp deletions and chkproc.c for signs of LKM trojans.

[gavmp3dl2]

アンチルートキット

[tanakaBox]

ルートキット検出

[pwd]

[admin] [mac] [security]

[Cortel]

0.46a から Mac OS X をサポート

[send]

すぐ忘れる