Module elf_analysis 

ELF dynamic symbol analysis for LD_PRELOAD rootkit detection.

Structs

ElfCapabilityReport

Capability report for a single ELF binary.

ElfStringArtifact

String artifact matched from ELF section data.

HookMatch

A single hook symbol match.

Functions

analyse_elf_capabilities

Analyse ELF bytes and return a capability report.

scan_elf_string_artifacts

Extract printable-string artifact matches from ELF .rodata and related sections.