From ca9d63cb6a5085a014392084a8235c142f1b2092 Mon Sep 17 00:00:00 2001 From: rshipp Date: Sat, 9 May 2015 11:35:33 -0600 Subject: [PATCH] Add Linux rootkit detectors --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 959f2f6..9b11577 100644 --- a/README.md +++ b/README.md @@ -74,6 +74,7 @@ A curated list of awesome malware analysis tools and resources. Inspired by * [AnalyzePE](https://github.com/hiddenillusion/AnalyzePE) - Wrapper for a variety of tools for reporting on Windows PE files. +* [chkrootkit](http://www.chkrootkit.org/) - Local Linux rootkit detection. * [ClamAV](http://www.clamav.net/index.html) - Open source antivirus engine. * [ExifTool](http://www.sno.phy.queensu.ca/~phil/exiftool/) - Read, write and edit file metadata. @@ -83,6 +84,7 @@ A curated list of awesome malware analysis tools and resources. Inspired by up hashes in NIST's National Software Reference Library database. * [packerid](http://handlers.sans.org/jclausing/packerid.py) - A cross-platform Python alternative to PEiD. +* [Rootkit Hunter](http://rkhunter.sourceforge.net/) - Detect Linux rootkits. * [ssdeep](http://ssdeep.sourceforge.net/) - Compute fuzzy hashes. * [totalhash.py](https://gist.github.com/malc0de/10270150) - Python script for easy searching of the [TotalHash.com](http://totalhash.com/) database.