Skip to content
This repository has been archived by the owner on Nov 14, 2021. It is now read-only.

[Feature Request] Kernel Module Insertion Alert #4

Open
nbulischeck opened this issue Oct 3, 2018 · 0 comments
Open

[Feature Request] Kernel Module Insertion Alert #4

nbulischeck opened this issue Oct 3, 2018 · 0 comments
Assignees
Labels
enhancement New feature or request

Comments

@nbulischeck
Copy link
Owner

There is currently no alert system, but generating an alert every time a new module is inserted into the kernel would be helpful.

This can be done by:

  1. Grabbing a list of currently installed kernel modules on init.
  2. Storing that list of kernel modules in an internal linked list (preferably using the kernel's linked list implementation).
  3. Comparing each run to see whether or not a module has been loaded/unloaded.

You could probably also use a refactored form of the analyze_modules function here to search for hidden modules as well.

@nbulischeck nbulischeck added the enhancement New feature or request label Oct 3, 2018
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants