Package: unhide.rb (13-1.1)

[ Source: unhide.rb  ]

Forensic tool to find processes hidden by rootkits

Unhide.rb is a reimplementation of unhide in Ruby.

It currently does the does the same checks as "unhide proc" and "unhide sys", while being about 10x faster than the original C code.

It also has better diagnostics when hidden processes are found.

This package can be used by rkhunter in its daily scans.

Tags: System Administration: Forensics and Recovery, Implemented in: Ruby, User Interface: interface::commandline, role::program, Scope: Utility, Security: Forensics, security::ids, use::scanning

Other Packages Related to unhide.rb

• dep: ruby1.8

  Interpreter of object-oriented scripting language Ruby 1.8

• sug: rkhunter

  rootkit, backdoor, sniffer and exploit scanner

Download unhide.rb

Download for all available architectures

Architecture	Package Size	Installed Size	Files
all	6.4 kB	56.0 kB	[list of files]