analyzing-linux-kernel-rootkits

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly directs capturing physical memory using the LiME kernel module (and mentions /proc/kcore), which requires inserting a kernel module or privileged access and thus modifies kernel state and needs sudo-level actions.