I'm putting together a new toolkit for securing- setting up new servers and for security audits on suspected issues. A while back I came across a site that offered a set of replacement binaries for use on systems you suspect have been compromised and have corrupted binary / trojan horse issues. I misplaced the link and no amount of searching is turning this site up. It was basically replacements for top, ls, netstat etc. Would anyone happen to know the site in question or have something similiar?