[KSTAT] Kernel Security Therapy Anti-Trolls
Bruce F Lucca
lucca at Buffalo.com
Wed Apr 18 06:54:31 EDT 2001
KSTAT - Kernel Security Therapy Anti-Trolls
by S0ftproject2000 Team
Relevant URL: <http://www.securityfocus.com/tools/1995>
Tool useful to find an attacker in your system by a direct analysis of the
kernel through [/dev/kmem] and bypassing the hiding techniques of the
intruder (kernel static recompilation/use of LKMs).
[Kstat] can find the syscalls which were modified by a LKM, list the linked
LKMs, query one or all the network interfaces of the system, list all the
processes and much more.
More information about the nflug