rkhunter
It checks for: - SHA256 hash changes; - files commonly created by rootkits; - executables with anomalous file permissions; - suspicious strings in kernel modules; - hidden files in system directories; and can optionally scan within files.
Using rkhunter alone does not guarantee that a system is not compromised. Running additional tests, such as chkrootkit, is recommended.
Latest reviews
4
It provides a great deal of results. Now, the trick will be to look up the WARNINGS on trusted forums and determine whether the red-flags need to be dealt with (or not).
5
wanna freak out about things you don't understand? try this on for size. make sure you run it 5x a day or you might miss that 0day intrusion.
