Locked Unhide Forensic Tool, Find hidden processes and ports

[Yard-Tools]

Tools Yard Acaba de publicar lo siguiente:

 

This is the hidden content, please

• Sign In
• or
• Sign Up

;)

 

Unhide is a forensic tool to find processes hidden by rootkits, Linux kernel modules or by other techniques. It detects hidden processes using six techniques:Compare /proc vs /bin/ps outputCompare info gathered from /bin/ps with info gathered by walking thru the procfs. ONLY for Linux 2.6 versionCompare info gathered from /bin/ps with info gathered from syscalls (syscall scanning).Full

This is the hidden content, please

• Sign In
• or
• Sign Up

 

 

15/02/2013 17:39