La orden siguiente muestra un listado con los diferentes tests que rkhunter realiza en un escaneo completo.
$ sudo rkhunter --list tests Current test names: additional_rkts all apps attributes avail_modules deleted_files filesystem group_accounts group_changes hashes hidden_ports hidden_procs immutable known_rkts loaded_modules local_host malware network none os_specific other_malware packet_cap_apps passwd_changes ports possible_rkt_files possible_rkts possible_rkt_strings promisc properties rootkits running_procs scripts shared_libs shared_libs_path startup_files startup_malware strings suspscan system_commands system_configs trojans Grouped test names: additional_rkts => possible_rkt_files possible_rkt_strings group_accounts => group_changes passwd_changes local_host => filesystem group_changes passwd_changes startup_malware system_configs malware => deleted_files hidden_procs other_malware running_procs suspscan network => hidden_ports packet_cap_apps ports promisc os_specific => avail_modules loaded_modules possible_rkts => possible_rkt_files possible_rkt_strings properties => attributes hashes immutable scripts rootkits => avail_modules deleted_files hidden_procs known_rkts loaded_modules other_malware possible_rkt_files possible_rkt_strings running_procs suspscan trojans shared_libs => shared_libs_path startup_files => startup_malware system_commands => attributes hashes immutable scripts shared_libs_path strings |