Skip to main content

Module psxview

Module psxview 

Source
Expand description

Linux hidden process detection via cross-view analysis.

Compares process visibility across multiple kernel data structures: the task_struct linked list and the PID hash table (pid_hash or pidhash). Processes missing from one view but present in another may have been hidden via Direct Kernel Object Manipulation (DKOM).

Functionsยง

walk_psxview
Cross-reference process visibility across kernel data structures.