GLOSSARY / Rootkit
What is Rootkit?
Stealthy malware that hides its presence and grants persistent privileged access.
Rootkits operate at a deep level — user-mode, kernel-mode, bootloader, or firmware — to conceal processes, files, and network connections from the OS and security tools.
Kernel and firmware rootkits are notoriously hard to detect and remove, often requiring a full reimage.
Related free tools
Related terms
Part of the Ciphers Security glossary. Free reference for analysts, defenders & learners.