Expand description
Linux hidden process detection via cross-view analysis.
Compares process visibility across multiple kernel data structures:
the task_struct linked list and the PID hash table (pid_hash or
pidhash). Processes missing from one view but present in another
may have been hidden via Direct Kernel Object Manipulation (DKOM).
Functionsยง
- walk_
psxview - Cross-reference process visibility across kernel data structures.