Does anyone know of anything other then chkrootkit to scan for Trojans on command and I can have output to a file for my script to analyze?

Thanks and God Bless!

unfortunatly it is the only thing that I've come accross that's as developed .... but you shouldn't rely on scripts to check over your machine to see if it has been hacked. Manually checking over things has its advantages.


Good luck !

:D

hehe, true. But the script we are developing, requires an automated system check.

Now, does anyone know if TripWire can export results to a file and if so, what result should we have our script parse so that it can determin a Trojan or an Invalid modification has been made to the system.

Thank You and God Bless!

Yes, it can. Check out the -r option (for report outputting). I believe it outputs to a specific format, so you may have to look deeper into the twr format.

-David