A simple way to detect and remove LKM rootkit KoviD (Outdated)

4 min · 0xMatheuZ

Detecting rootkits based on ftrace hooking.

2 min · 0xMatheuZ

How detect a LD_PRELOAD rootkit and hide from ldd & /proc

6 min · 0xMatheuZ

Linux Threat Hunting Persistence

14 min · 0xMatheuZ