To test the utility, you can use the Diamorphine rootkit (https://github.com/m0nad/Diamorphine). The author runs Arch Linux LTS kernel, so it is only guaranteed to ...