Rootkit spotter - experimental Linux rootkit finder LKM

Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.

hook detector using emulation and comparing static with dynamic outputs

Linux #rootkit and #malware revealer

Rootkit breaker - experimental Linux anti-rootkit tool based on kprobes

A Linux kernel module and userland utility pair to detect processes hidden by Linux kernel module (LKM) rootkits.

Install and configure Rootkit Hunter

Check for potential rootkits on Nix systems (Linux and MacOS X

Installer for Rkhunter - A rootkit scanner for Linux

helpful stuff to share

Architecture internals learning path from Open Security Training, provides a set of resources to complete the learning path, includes code-base, videos, techniques, useful articles and concepts to understand the courses.