Debian logoDebian Screenshots >

unhide.rb

Forensic tool to find processes hidden by rootkits

Description

Unhide.rb is a forensic tool to find processes hidden by rootkits.

It looks for active processes in many different ways. Processes found by some means but not others are considered to be "hidden", and are reported to the user.

Unhide.rb is a tentative of rewrite in Ruby of the original Unhide, which is written in C. While being much faster, it does not implement all the diagnostics of the original version. It is also less secure as it cannot be statically compiled.

This package can be used by rkhunter in its daily scans.

Upload more screenshots

Please help extend the collection of screenshots. Just make a screenshot and upload it here. You don't need to register or anything.


Homepage

http://launchpad.net/unhide.rb


Statistics

584 other people were interested in this package here. The newest known version of this software is 22-2 (Information last updated about 14 hours ago.)