SIMP installs the chkrootkit tool. Chkrootkit scans systems for the presence of rootkits. A cron job runs chkrootrootkit once per day.
References: SI-3, SI-3a.