Detecting Traditional Rootkits
¨Host-based IDS eg. Tripwire
¨Strings command