• eldain@feddit.nl
    link
    fedilink
    arrow-up
    2
    ·
    3 hours ago

    I always wondered, did anyone ever find something with it? Wouldn’t a rootkit that is known enough to be in the detection file be outdated? But yes, you read the docs, points to you!

    • redsand@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      1
      ·
      3 hours ago

      Yeah rkhunter looks for all the common kits BUT ALSO checks for suspicious changes if enabled as a service.