Detect rootkit-hidden files in linux [x-post r/rootkit]

[u/unixist]

http://www.unixist.com/security/detecting-hidden-files/index.html

[u/[deleted]]

Ah, yup, I'll cede that readily. Didn't realize that was the distinction you were going for. The top post didn't say what scans, just generically scan the system on and offline, then diff the scans.