RKHunter
Endpoint Security (Antivirus/EPP)
Alternative Vendors
Commercial Alternatives
Key Features
Rootkit Detection
Scans for known rootkits, backdoors, and local exploits using signature-based detection
File Integrity Checking
Compares SHA-1 hashes of system files against known good hashes to detect modifications
System Auditing
Checks for hidden files, wrong permissions, suspicious kernel strings, and system configuration issues
Automated Scheduling
Can be configured to run automatically via cron jobs with email notifications
Pros and Cons
Pros
Free and Lightweight
Completely free GPL-licensed tool with minimal system resource requirements
Comprehensive Scanning
Checks multiple attack vectors including rootkits, backdoors, and system integrity
Easy Automation
Simple to configure for automated daily scans with email reporting
Cons
Detection Only
Cannot remove detected rootkits or malware, only identifies potential threats
False Positives
May generate false alarms due to legitimate system changes or custom configurations
Limited Updates
Project development has slowed with infrequent signature database updates
Feature Comparison
Comments
No Comments Yet
Be the first to share your experience with RKHunter.