Update README.md
This commit is contained in:
parent
b59c659553
commit
33eb3c6fb4
@ -5,6 +5,8 @@ It can detect processes reading from ```/dev/input/event*``` devices and kernel
|
||||
# Dependencies
|
||||
* [Python](https://www.python.org/downloads/)
|
||||
* [SystemTap](https://sourceware.org/systemtap/wiki)
|
||||
* [```fuser```](https://www.man7.org/linux/man-pages/man1/fuser.1.html)
|
||||
* Utilities that come with [Fedora](https://fedoraproject.org/) like ```which```.
|
||||
|
||||
# Setup
|
||||
Download or clone this repository:
|
||||
@ -45,6 +47,12 @@ To run just kernel module detection
|
||||
```
|
||||
# ./kernel_detector.py
|
||||
```
|
||||
|
||||
# Warning
|
||||
Running any part if this program in a lightheaded manner may break your system.
|
||||
Killing processes and unloading modules should be done with caution. We suggest testing it an a VM.
|
||||
If one runs the KLDetect with the kernel module keylogger detection option set. Make sure to update the [whitelist.txt](https://github.com/sebaschi/keylogger-detector/blob/main/src/whitelist.txt)
|
||||
with kernel modules that you know you have on your system. Altough KLDetect should not unload any kernel modules currently used, better safe than sorry.
|
||||
# Developers
|
||||
Copyright 2023 [Michel Romancuk](https://github.com/SoulKindred), [Sebastian Lenzlinger](https://github.com/sebaschi)
|
||||
|
||||
|
||||
Reference in New Issue
Block a user