rootkit

{
  "id": "MLC-T-CYB-003642",
  "term": "rootkit",
  "field": "Cybersecurity",
  "definition": "1. A set of tools used by an attacker after gaining root-level access to a host to conceal the attacker's activities on the host and permit the attacker to maintain root- level access to the host through covert means.\n\n2. A collection of files that is installed on a host to alter the standard functionality of the host in a malicious and stealthy way.",
  "references": [
    "CNSSI 4009-2022; NIST SP 800-150",
    "NIST SP 800-83 Rev. 1",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/rootkit/"
}