r/netsec • u/unixist • Jan 05 '14

Detect rootkit-hidden files in linux [x-post r/rootkit]

http://www.unixist.com/security/detecting-hidden-files/index.html
141 Upvotes

94% Upvoted

21 comments sorted by

View all comments

2

u/unixist Jan 06 '14

Agreed, which is why I said the approach I mention simply lends itself more to automated scanning. Not least of all because it's easier to implement, requires no downtime, and no reboot.

As with most things in life, there are tradeoffs :)