unhide.rb
Forensics tool to find processes hidden by rootkits
Command lineSystem
Not tested on a device yet. What that means
Commands in the package
unhide.rb
About unhide.rb
From Debian's package description
Unhide.rb is a forensics tool to find processes hidden by rootkits.
It looks for active processes in many different ways. Processes found by some means but not others are considered to be "hidden", and are reported to the user.
Unhide.rb is a tentative of rewrite in Ruby of the original Unhide, which is written in C. While being much faster, it does not implement all the diagnostics of the original version. It is also less secure as it cannot be statically compiled.
This package can be used by rkhunter in its daily scans.
From Debian's description of the unhide.rb package, under that package's license.
Dependencies
Depends on
Related apps
- startparrun processes in parallel and multiplex their outputCommand line
- rkhunterrootkit, backdoor, sniffer and exploit scannerCommand line
- unhideforensic tool to find hidden processes and portsCommand line
- sleuthkittools for forensics analysis on volume and filesystem dataCommand line
Task Manager (lxtask)Manage running processes- foremostforensic program to recover lost filesCommand line
Sources and licenses
- Name: the Debian package name.
- Summary: Debian's short description of the unhide.rb package, under that package's license.
- Description: Debian's description of the unhide.rb package, under that package's license.
- Versions and sizes: Debian's archive for ARM64, as on packages.debian.org.
- Popularity: Debian Popularity Contest counts.
More in About the catalog.