Evading Elastic Security: Linux Rootkit Detection Bypass

Bypassing YARA rules and behavioral detection through symbol randomization, module fragmentation, XOR encoding, and ICMP reverse shell staging