chkrootkit
Scan system for rootkits. tldr-pages
On several platforms
Several platforms
Enable quiet mode and suppress normal test results
chkrootkit -qIdentifyEnable expert mode and produce additional outputs
chkrootkit -xIdentifyEnable debug mode to show all output
chkrootkit -dIdentifySpecify excluded files for some tests
chkrootkit -e "path/to/file"IdentifySpecify a directory as the root for testing (e.g. mounted ext drives)
chkrootkit -r path/to/directoryIdentifyIgnore nfs-mounted directories
chkrootkit -nIdentifyInvoke Tests and ignore specific filesystem types
chkrootkit -T filesystemtypeIdentifyGenerate list of available tests
chkrootkit -lIdentify