Chkrootkit

• chklastlog(8) check lastlog file for deleted entries
• chkrootkit-daily(8) Run chkrootkit and report results
• chkrootkit(8) Scan the system for signs of rootkits
• chkwtmp(8) check wtmp file deleted entries