Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypass infamous rkhunter antirootkit.
Why do you think that https://github.com/CoolerVoid/OctopusWAF is a good alternative to reveng_rtkit