fig9-mining-process-is-hidden-by-rootkit