Add memory obfuscation and ps-hidden process detection
This commit is contained in:
parent
cb334c0c94
commit
893409b549
17 changed files with 353 additions and 26 deletions
|
|
@ -197,8 +197,8 @@ def _cmd_rootcheck(cfg: Config) -> int:
|
|||
from . import rootcheck
|
||||
alerts = list(rootcheck.run(cfg))
|
||||
if not alerts:
|
||||
print("Rootcheck: no hidden processes/modules/ports, sniffers, "
|
||||
"known rootkit modules, or kernel taint found.")
|
||||
print("Rootcheck: no hidden processes/modules/sockets, process-tool "
|
||||
"hiding, sniffers, known rootkit modules, or kernel taint found.")
|
||||
return 0
|
||||
for a in sorted(alerts, key=lambda x: -x.severity):
|
||||
print(f"[{a.severity}] {a.signature:<22} {a.detail}")
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue