Kernel-level Rootkits

[fred <fred () thinkingsecure com>]

Hi Edward,

Using rootkits is sometimes very usefull to hide stuff but you have to pray 
that the attacker doesn't find the rootkit as lots of the attackers use 
rootkit checkers before they start doing stuff on the machine itself.

So up to you to decide if you want to use rootkits on your honeypot.

cheers

fred