Unhide is a forensic tool to find processes and TCP/UCP ports hidden by rootkits, Linux kernel modules or by other techniques. It includes unhide and unhide-tcp. Remember to run unhide as root only. Failing to do so could result in a massive arrival of false positives.