As requested, the slides for the "BOFH meets SystemTap: rootkits made trivial" presentation given in the Security Devroom at FOSDEM 2011 are available at http://stapbofh.krunch.be/systemtap-bofh-fosdem2011020501.pdf All the examples along with some screenshots are also available from http://stapbofh.krunch.be/ Sorry for the poor timing for the presentation. I hope it was still useful/entertaining/informative.