Lynx

[ufinfosec]

Deepen Backdoor detection (there's many ways online people have done this, mainly look for malicious PAM modules and hashes). Optionally you can add PAM recovery to a good state if a backdoor is detected.