0

I heard that a rootkit can hide itself and specified files, processes, and network links.

I know it can set a file to be hidden, but how does it hide a process?

Such as, there is a httpd process running so that ps -ef does not show the httpd process.

Improve this question
2
  • 1
    Um, it's called a "process", not a progress :) Your question is "how do rootkits work", and that's a bit broad. There's different answers to that, because they do different things. You'll have to be more specific.
    – Marcus Müller
    Jun 11, 2019 at 6:48
  • I think now that you have the correct search terms, this is will be easier to look up.
    – schroeder ♦
    Jun 11, 2019 at 7:21

0

Reset to default

Browse other questions tagged .