Tech notes
seek to understand the question
  • Home
  • Posts
  • OSQuery
  • query-index
  • About
  • Privacy
  1. Home
  2. linux

Bmbl Rootkit

OSquery
select * from file where path in ('/etc/.bmbl', '/etc/.bmbl/sk');
View Full Query Details

Bobkit Rootkit

OSquery
select * from file where path in ('/usr/include/.../', '/usr/lib/.../', '/usr/sbin/.../', '/usr/bin/ntpsx', '/tmp/.bkp', '/usr/lib/.bkit-');
View Full Query Details

Cback Worm

OSquery
select * from file where path in ('/tmp/cback', '/tmp/derfiq');
View Full Query Details

Deb Packages

OSquery
select * from deb_packages;
View Full Query Details

Enye Sec Rootkit

OSquery
select * from file where path in ('/etc/.enyelkmHIDE^IT.ko');
View Full Query Details

Esrk Rootkit

OSquery
select * from file where path in ('/usr/lib/tcl5.3');
View Full Query Details

Fu Rootkit

OSquery
select * from file where path in ('/sbin/xc', '/usr/include/ivtype.h', '/bin/.lib');
View Full Query Details

Hidr00tkit

OSquery
select * from file where path in ('/var/lib/games/.k');
View Full Query Details

Illogic Rootkit

OSquery
select * from file where path in ('/lib/security/.config', '/usr/bin/sia', '/etc/ld.so.hash');
View Full Query Details

Iptables

OSquery
select * from iptables;
View Full Query Details
Previous 1 2 3 4… 7 Next

Recent Posts

  • Connect private network to AWS using ZeroTier
  • Using kitchen-salt for testing salt-formulas
  • RPM package creation for BRO IDS Deployments
  • Installing pf_ring on CentOS 7 using yum
  • Using a systemd.service file to control promiscuous mode automatically at boot

Platforms

  • darwin 32
  • linux 65
  • posix 21
  • windows 4

Categories

  • Linux 25
  • Logging 14
  • NSM 1
  • Open Source 3
  • OSquery 269
  • SaltStack 4
  • Security 15
  • Sys Admin 30
  • VMware 2

Archives

  • September 2019 1
  • August 2019 1
  • July 2018 2
  • February 2018 1
  • April 2017 1
  • January 2017 1
  • December 2016 8
  • June 2016 1
  • January 2016 5
  • February 2015 11

Post Series

  • Setting up a multi-tiered log infrastructure
  • Setup internal yum repositories for CentOS and RedHat Servers
© 2025 Tech notes. Generated with Hugo and a heavily modified Roadster theme.