Rootkit
nounid
3958·updated May 9, 2026verified
A set of tools used by an attacker after gaining root-level access to a host to conceal the attacker’s activities on the host and permit the attacker to maintain root-level access to the host through covert means.
Attested in
No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.
Classifications
Entity Type
Threat90%rule-basedr:entity.threat.attack.v1
Sensitivity
unclassified
Information Class
unclassified
Variants
- plural
- Rootkits
- possessive
- Rootkit's
- pluralpossessive
- Rootkits'
Framework definitions
- §1
- A collection of tools (programs) that a hacker uses to mask intrusion and obtain administrator-level access to a computer or computer network.
National Initiative for Cybersecurity Careers and Studies (NICCS) Cybersecurity Lexicon1 senseview framework →
- §1
- A set of software tools with administrator-level access privileges installed on an information system and designed to hide the presence of the tools, maintain the access privileges, and conceal the activities conducted by the tools.
- §1
- A software suite designed to aid an intruder in gaining unauthorized administrative access to a computer system
- §1
- A set of tools used by an attacker after gaining root-level access to a host to conceal the attacker’s activities on the host and permit the attacker to maintain root-level access to the host through covert means.
- §1
- A set of tools used by an attacker after gaining root-level access to a host to conceal the attacker’s activities on the host and permit the attacker to maintain root-level access to the host through covert means.
- §1 · legacy_primary
- A set of tools used by an attacker after gaining root-level access to a host to conceal the attacker’s activities on the host and permit the attacker to maintain root-level access to the host through covert means.DR-088 backfill from the noun definition column
Outgoing relationships
No outgoing triples
This term is not the subject of any RDF-style relationship yet.
Incoming relationships
No incoming triples
No other term currently asserts a relationship to this one.