Rootkit
nounverified·updated May 9, 2026
A set of tools used by an attacker after gaining root-level access to a host to conceal the attacker’s activities on the host and permit the attacker to maintain root-level access to the host through covert means.
NISTIR 7298: Glossary of Key Information Security Terms, Revision 2
Senses
SANS Glossary of Security Terms
A collection of tools (programs) that a hacker uses to mask intrusion and obtain administrator-level access to a computer or computer network.
National Initiative for Cybersecurity Careers and Studies (NICCS) Cybersecurity Lexicon
A set of software tools with administrator-level access privileges installed on an information system and designed to hide the presence of the tools, maintain the access privileges, and conceal the activities conducted by the tools.
ISACA Cybersecurity Glossary
A software suite designed to aid an intruder in gaining unauthorized administrative access to a computer system
Classifications
Entity Type
Threat90%rule-basedr:entity.threat.attack.v1
?unassignedlast reviewed —
Sensitivity
unclassified
Information Class
unclassified
Variants
- plural
- Rootkits
- possessive
- Rootkit's
- pluralpossessive
- Rootkits'