Rootkit | 0xMatheuZ

Bypassing LD_PRELOAD Rootkits Is Easy

A simple way to detect and remove LKM rootkit KoviD (Outdated)

Detecting rootkits based on ftrace hooking.

ElfDoor-gcc

How detect a LD_PRELOAD rootkit and hide from ldd & /proc