More and more sys admins are realizing the danger of rootkits. However, I've known only a few, who spent enough time to estimate how big the threat really is. Since the main purpose of rootkits is to hide themselves from users and sysops, you usually don't know of them. I guess there are not many Windows administrators out there, who never had problems with computer viruses. But how many ever realized that they have rootkits in their network?
- If an EC2 Reserved Instance is not applied or used - Thu, Jan 20 2022
- Midnight Commander remote connect via Shell link (copy files over SSH) and SFTP link using FISH and public key authentication - Mon, Jan 17 2022
- Root login via SSH and SFTP on EC2 instances running Linux - Wed, Jan 12 2022
I must admit, I am one of those who neglected this topic for quite a while. At least, I googled about it now. Originally, I wanted to make a list of anti-root tools. But then I found Antirootkit.com. They have a comprehensive collection of anti-rootkit tools plus some useful information like a list of articles and of known rootkits.
Subscribe to 4sysops newsletter!
I have read some reviews about Sysinternals RootkitRevealer a while ago. I suppose, it is the most prominent among the anti-rootkit tools for Windows and it is free. So I would start with this tool first.