Bug#617956: ITP: unhide.rb -- Forensic tool to find processes hidden by rootkits
 

Package: wnpp
Severity: wishlist
Owner: Julien Valroff <julien@debian.org>


* Package name : unhide.rb
Upstream Author : Johan Walles <johan.walles@gmail.com>
* URL : http://code.launchpad.net/unhide.rb
* License : GPL
Programming Lang: Ruby
Description : Forensic tool to find processes hidden by rootkits

Unhide.rb is a reimplementation of unhide in Ruby.

It currently does the does the same checks as "unhide proc" and "unhide
sys", while being about 10x faster than the original C code.

It also has better diagnostics when hidden processes are found.

--
.'`. Julien Valroff ~ <julien@kirya.net> ~ <julien@debian.org>
: :' : Debian Developer & Free software contributor
`. `'` http://www.kirya.net/
`- 4096R/ E1D8 5796 8214 4687 E416 948C 859F EF67 258E 26B1




--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 20110312205756.GA3558@kirya.net">http://lists.debian.org/20110312205756.GA3558@kirya.net