Chkrootkit
--
Rkhunter
RKHunter (Rootkit Hunter) is a host-based security scanner for Linux that checks for common rootkits, backdoors, and local system anomalies. It performs file and permission checks, scans for suspicious strings and known signatures, validates system binaries against expected properties, and reports findings for review. It is commonly used as a periodic integrity and hygiene check on servers where lightweight on-host monitoring is desired.