chkrootkit for Mac

chkrootkit is a command-line tool for locally checking whether a system is infected with a rootkit. Rootkits are malicious programs that excel at hiding themselves and the traces of an intrusion, making them very difficult for ordinary users to notice, and chkrootkit helps investigate possible signs of abnormality on a system. It checks whether network interfaces are in promiscuous mode, examines whether login record files have been deleted, and looks for suspicious behavior of kernel module trojans. The tool runs as a command and is suitable for system administrators and operations personnel with some Linux or Unix experience who need to perform security self-checks, used when a machine is suspected of being compromised or during routine security inspections.