[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#617956: ITP: unhide.rb -- Forensic tool to find processes hidden by rootkits



Package: wnpp
Severity: wishlist
Owner: Julien Valroff <julien@debian.org>


* Package name    : unhide.rb
  Upstream Author : Johan Walles <johan.walles@gmail.com> 
* URL             : http://code.launchpad.net/unhide.rb
* License         : GPL
  Programming Lang: Ruby
  Description     : Forensic tool to find processes hidden by rootkits

Unhide.rb is a reimplementation of unhide in Ruby.

It currently does the does the same checks as "unhide proc" and "unhide
sys", while being about 10x faster than the original C code.

It also has better diagnostics when hidden processes are found.

-- 
  .''`.   Julien Valroff ~ <julien@kirya.net> ~ <julien@debian.org>    
 : :'  :  Debian Developer & Free software contributor
 `. `'`   http://www.kirya.net/
   `-     4096R/ E1D8 5796 8214 4687 E416  948C 859F EF67 258E 26B1




Reply to: