Various Linux kernel integrity checked attributes.

Platform support

Please be aware that some queries can only be run against certain platforms. Below is a list of the supported platforms that this query supports. Zercurity will automatically pause queries from running if errors are detected. Running a query against an unsupported platform will result in the following error: no such table: kernel_integrity

  • Linux

Table schema

Name Type Description
sycall_addr_modified INTEGER 0 or 1, for whether a syscall table pointer is modified
text_segment_hash TEXT Hash value for the kernel’s .text memory segment

Query examples

Select all the results for the given table.

SELECT * FROM kernel_integrity;