• eldain@feddit.nl
    link
    fedilink
    arrow-up
    2
    ·
    12 hours ago

    I always wondered, did anyone ever find something with it? Wouldn’t a rootkit that is known enough to be in the detection file be outdated? But yes, you read the docs, points to you!

    • redsand@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      2
      ·
      12 hours ago

      Yeah rkhunter looks for all the common kits BUT ALSO checks for suspicious changes if enabled as a service.