Rootkit detector based on analyzing inconsistencies between the system handles table and Toolhelp32 process snapshots. Implements Floating Thread Detection in private memory and RWX region scanning, integrating a SIEM telemetry pipeline for remote incident monitoring.
Awesome Rootkit Malware Resources
🛡️ All-in-one input security monitor. Detects keyloggers, rootkits, hooks, and exfiltration. Cross-platform (Win/Linux/macOS) with Web GUI & MITRE ATT&CK mapping.
Add a description, image, and links to the rootkit-detector topic page so that developers can more easily learn about it.
To associate your repository with the rootkit-detector topic, visit your repo's landing page and select "manage topics."