CastleCops Staff: Rootkit Expert

From CastleCopsWiki

Jump to: navigation, search

Rootkit Experts perform all of the functions of a Rootkit Responder in addition to the following more advanced roles:

  • Interpreting Anti-Rootkit (ARK) scan results
  • Suggesting additional specific ARKs or analysis programs to be run in after initial ARK scan results are obtained
  • Providing rootkit removal advice
  • Advising Rootkit Responders (RRs) and other Rootkit Experts (ReXs)
  • Training of Rootkit Responders (RRs) and other Rootkit Experts (ReXs)

First Responders, and Security Experts are preferred to perform the role of Rootkit Expert though other candidates may be considered if they demonstrate an extensive knowlege of malware behavior, detection and removal.

This article is part of the CastleCops Staff: Roles and Responsibilities series.
Primary roles

Administrator (Admin) | First Responder (1R) | Forum Admin | Host
Moderator | Rootkit Expert (ReX) | Rootkit Responder (RR) | Security Expert (SE) | Special Response Team (SRT) | Webmaster

Ancillary roles

Mentor | MVP | Phishing Squad | Team AdAware | Team Lead | Trainee | Wiki Sysop

edit this template
Personal tools