Rootcheck entry for the “Solaris Worm”

If you are running Solaris 10 and are worried about the possible Solaris Worm, you can add the following 4 lines to the /var/ossec/etc/shared/rootkit_files.txt file at your ossec server. It will automatically update the rootcheck config for all your agents.

Or you can install the latest beta

Leave a Reply

Your email address will not be published. Required fields are marked *