Sunday, March 16, 2008

RootCheck Installation

RootCheck scans the system looking for possible trojans ,scans the ports for malicious activity ,and checks for rootkits,and also the logs,permissions and more.
Installation Instructions
Rootcheck is a very simple software. Just unpack, compile and execute it. It will scan the system and print if it found or not any rootkit.
Login to your server and su to root.
tar -xvzf rootcheck-0.7.tar.gz
cd rootcheck-0.7
make all
./ossec-rootcheck
There is also an example file that explains the different options for root checkMore Information about rootcheck is available at http://www.ossec.net/

No comments: