Microsoft ya ƙaddamar da sabis na gano rootkit don Linux

Microsoft gabatar sabon sabis na kan layi kyauta Freta, da nufin don tabbatar da cewa an duba hotunan mahalli na Linux don rootkits, ɓoyayyun matakai, malware, da ayyuka masu ban tsoro kamar satar kiran tsarin da amfani da LD_PRELOAD don lalata ayyukan laburare. Sabis ɗin yana buƙatar loda hoton tsarin zuwa uwar garken Microsoft na waje kuma yana da nufin bincika abubuwan da ke cikin mahallin kama-da-wane.

An kafa fitarwa rahoto, yana nuna yanayin tsarin tebur, kernel modules, haɗin yanar gizo, ayyukan lalata da matakai, waɗanda za a iya amfani da su a lokacin bincike na bincike game da sakamakon hacking. Yana goyan bayan bincike na fiye da 4000 bambance-bambancen kwaya na Linux. Zai yiwu ɗora hotuna na mahallin kama-da-wane a cikin VMRS (Hyper-V checkpoint) da CORE (VMware hoto), da jujjuyawar ƙwaƙwalwar ajiyar tsarin aiki da aka ƙirƙira ta amfani da kayan aiki. Farashin AVML и LIME. An rubuta lambar sabis a cikin Rust.

source: budenet.ru