It is very basic, just to verify possible filesystem/files corruption, too easy to fool it, and wont cover even known implants.It seems that already there is such tool. It could be just extended for some more checks if they are needed
checkinstallation.PNG
ip rule add dev eth0 table 201