Stealth for survival

I thought others might find this paper from the Sans.org reading room interesting. Among the items discussed is a comparison of some of the rootkit tools we have seen discussed here. The paper does provide an reason for the recent spate of anti-rootkit tools from the AV companies.

Stealth for Survival:Threat of the Unknown