• eldain@feddit.nl
      link
      fedilink
      arrow-up
      2
      ·
      21 hours ago

      I always wondered, did anyone ever find something with it? Wouldn’t a rootkit that is known enough to be in the detection file be outdated? But yes, you read the docs, points to you!

      • redsand@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        2
        ·
        21 hours ago

        Yeah rkhunter looks for all the common kits BUT ALSO checks for suspicious changes if enabled as a service.