Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 22 Sep 2014 17:29:39 -0700
From:      Brandon Vincent <Brandon.Vincent@asu.edu>
To:        List Monkey <listmonkey1@gmail.com>
Cc:        freebsd-security@freebsd.org
Subject:   Re: ossec hit: Hidden process (rootkit)
Message-ID:  <CAJm4238JxvYicm6qy8kHVAA57Su-rGokt2Ua7RTC-yxUDYqpXQ@mail.gmail.com>
In-Reply-To: <541FE781.2080505@gmail.com>
References:  <541FE781.2080505@gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Sep 22, 2014 at 2:10 AM, List Monkey <listmonkey1@gmail.com> wrote:
> Any other thoughts?

If you run ossec-rootcheck manually do you still get an alert?

Brandon Vincent



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAJm4238JxvYicm6qy8kHVAA57Su-rGokt2Ua7RTC-yxUDYqpXQ>