0

I heard that a rootkit can hide itself and specified files, processes, and network links.

I know it can set a file to be hidden, but how does it hide a process?

Such as, there is a httpd process running so that ps -ef does not show the httpd process.

schroeder
  • 123,438
  • 55
  • 284
  • 319
qg_java_17137
  • 101
  • 1
  • 1
    Um, it's called a "process", not a progress :) Your question is "how do rootkits work", and that's a bit broad. There's different answers to that, because they do different things. You'll have to be more specific. – Marcus Müller Jun 11 '19 at 06:48
  • I think now that you have the correct search terms, this is will be easier to look up. – schroeder Jun 11 '19 at 07:21

0 Answers0