Learn how to hunt for Linux stealth rootkits using command line tools with this presentation given at the FIRST Cold Incident Response Conference in Oslo Norway 2025. Presented by Craig Rowland, this presentation goes over a Chinese stealth rootkit leaked by Phrack magazine and how to find it using common command line tools. We also discuss how to approach rootkit hunting on Linux using practical real-world examples along with options for doing it at scale with Sandfly.
Download the full PDF presentation and access more links here:
https://sandflysecurity.com/blog/linu...
Be sure to subscribe and follow us:
https://www.sandflysecurity.com
/ sandflysecurity
/ sandfly