From 33eb3c6fb43795ea9fcba89e67ae6564031c67a9 Mon Sep 17 00:00:00 2001 From: Sebastian Lenzlinger <74497638+sebaschi@users.noreply.github.com> Date: Tue, 13 Jun 2023 13:05:00 +0200 Subject: [PATCH] Update README.md --- README.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/README.md b/README.md index 8eb46ae..9781f9c 100644 --- a/README.md +++ b/README.md @@ -5,6 +5,8 @@ It can detect processes reading from ```/dev/input/event*``` devices and kernel # Dependencies * [Python](https://www.python.org/downloads/) * [SystemTap](https://sourceware.org/systemtap/wiki) +* [```fuser```](https://www.man7.org/linux/man-pages/man1/fuser.1.html) +* Utilities that come with [Fedora](https://fedoraproject.org/) like ```which```. # Setup Download or clone this repository: @@ -45,6 +47,12 @@ To run just kernel module detection ``` # ./kernel_detector.py ``` + +# Warning +Running any part if this program in a lightheaded manner may break your system. +Killing processes and unloading modules should be done with caution. We suggest testing it an a VM. +If one runs the KLDetect with the kernel module keylogger detection option set. Make sure to update the [whitelist.txt](https://github.com/sebaschi/keylogger-detector/blob/main/src/whitelist.txt) +with kernel modules that you know you have on your system. Altough KLDetect should not unload any kernel modules currently used, better safe than sorry. # Developers Copyright 2023 [Michel Romancuk](https://github.com/SoulKindred), [Sebastian Lenzlinger](https://github.com/sebaschi)