Re: rootkit detection

[Philip Thiem <ptt@umr.edu>]

He might have meant that he doesn't want to run the risk of getting 
a poor utility thinking that it is a good one(risk of security by ignorance), 
so he's asking for recommendations from people that might know something.  
However, he should understand program/technology limitations (e.g. they might 
not detect the latest root kit) and evaluate the tool on a "test" box before
putting it into production.  This is only a starting point, and from here
should seek to educate himself.


Philip Thiem

On Sun, Mar 10, 2002 at 07:30:56PM -0800, Alvin Oga wrote:
> but what kind of risk are you referring to ??