luna/enodia-sentinal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add memory obfuscation and ps-hidden process detection

Browse source
This commit is contained in:
Luna 2026-06-13 03:55:09 -07:00
parent cb334c0c94
commit 893409b549
17 changed files with 353 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

6
docs/OPERATIONS.md
View file

@ -66,9 +66,9 @@ Expected healthy output:
acknowledged.
- `pkgdb-check`: package DB consistent with anchor.
- `pkgdb-verify`: sampled files match signed cache packages.
- `rootcheck`: no hidden processes/modules/ports/raw/special-protocol sockets,
sniffers, known rootkit modules, raw ICMP/SCTP-style channels, or unexplained
kernel/module taint.
- `rootcheck`: no hidden processes, processes hidden from `ps`, hidden
modules/ports/raw/special-protocol sockets, sniffers, known rootkit modules,
raw ICMP/SCTP-style channels, or unexplained kernel/module taint.
- `posture check`: no SSH/sudo/PATH/permission/signature hygiene findings, or
only ones you have consciously accepted (e.g. password auth on a host that
needs it).