Detect kernel-level rootkits in Linux memory dumps using Volatility3 linux plugins (check_syscall, lsmod, hidden_modules), rkhunter system scanning, and /proc vs /sys discrepancy analysis to identify hooked syscalls, hidden kernel modules, and tampered system structures.
no risky patterns detected
Type: Agent skill (SKILL.md) · Category: Memory & Knowledge · Source: https://github.com/bitbytelabio/arsenal/tree/HEAD/plugin/skills/re-analyzing-lin
| Capabilities (fewer powerful permissions = higher) | 50/50 |
| Maintenance | 23/35 |
| Documentation | 15/15 |
Always review files before installing. How scores work. Request a correction