path: root/system/unhide/README
diff options
Diffstat (limited to 'system/unhide/README')
1 files changed, 12 insertions, 0 deletions
diff --git a/system/unhide/README b/system/unhide/README
new file mode 100644
index 0000000000..a5c77eb447
--- /dev/null
+++ b/system/unhide/README
@@ -0,0 +1,12 @@
+Unhide is a forensic tool to find processes and TCP/UCP ports hidden by
+rootkits, Linux kernel modules or by other techniques. It includes unhide
+and unhide-tcp.
+NOTES: The SlackBuild script builds only unhide-tcp and unhide-linux26.
+The original unhide for 2.4 kernels is not built for obvious reasons.
+unhide-linux26 has been linked to "unhide", as many apps (rkhunter, for
+example) expect to find it here. This is also the solution chosen by many
+Remember to run unhide as root only. Failing to do so could result in
+a massive arrival of false positives.