Request for guidance regarding rootkit behaviour analysis

[pranto47]

I followed the vagrant setup and successfully install the kernel. My main object is to perform rootkit analysis. After loading the rootkit I will restrict the memory access and observe how rootkit wants to alter the memory. As all of this fairly new to me, could anyone suggest some resources to help me get started? I apologize if this is off topic but I thought this is the best place to ask for some guidance.