Re: The much popular t0rnkit.

[Jonathan James <Jonathan () SECURITO SE>]

> ... it seems to me, that rootkits provide fodder for CERT.  having them,
> and analysis of their operation seems , informative , for lack of a
> better word.  being able to say, "this" happened, and this is "how" might
> prove useful ...

Perhaps an analysis of each popular rootkit would be appropriate, but I do
agree on that it would not be very appropriate for CERT  to provide people
with rootkits in their whole.

Jonathan