CastleCops Staff: Rootkit Responder

From CastleCopsWiki

Rootkit Responders have experience and knowledge dealing with malware and computing problems. They have a knowledge of rootkit methadology, rootkit detection program usage and the ability to respond to users who think they may have a rootkit infection. The RR has the ability to suggest Anti-rootkit (ARKs) scans, and other analyses to be performed to determine whether a user does indeed have a rootkit issue. Final interpretation of the scan results and rootkit removal instructions should be performed by a Rootkit Expert, however. Rootkit Responders are also able to answer general malware and computing questions.

First Responders, SRTs, First Responder and SRT trainees - that are nearing the end of their training - are the preferred candidates for the Rootkit Responder role.

This article is part of the CastleCops Staff: Roles and Responsibilities series.

Primary roles