Sandfly Security - Agentless Linux EDR and Incident Response

1 min read

Free Sandfly Linux Incident Response License

Sandfly is offering free licenses for incident response teams.

1 min read

SSH Excessive Keys Risk - Do You Have Too Many SSH Keys? Probably.

Publication Date: 12 December 2024

1 min read

Linux Stealth Rootkit Process Decloaking Tool Updated

Publication Date: 21 November 2022

5 min read

Sandfly 5.3.1 - New License Tiers and SELinux Support

Publication Date: 24 February 2025

Hidden Linux Binary Threats for Intruders and Malware

Publication Date : January 2026

Evasive Linux Malware and Backdoor Detection Presentation

Publication Date: 14 November 2023

Linux EDR nologin Shell Rename Backdoor Attack Detection and Forensics

Publication Date: 04 December 2024

2 min read

SSH Lateral Movement on Linux: Risks and How to Stop It

27 February 2025

1 min read

Rob Joyce, former head of NSA Tailored Access Operations, joins Sandfly's Advisory Board

Publication Date: 23 July 2024

Christchurch HackerCon 2018 Presentation – Insider’s History of Intrusion Detection Technology

Sandfly Blog Christchurch HackerCon 2018 Presentation – Insider’s History of Intrusion Detection Technology 01 November 2018 Presentations

1 min read

Rob Joyce Interview - Linux Critical Infrastructure Threats

Sandfly Blog Rob Joyce Interview - Linux Critical Infrastructure Threats 15 October 2024 Videos

2 min read

Sandfly 4.6.1 - Microsoft Active Directory Support and Default Linux Password Auditing

Sandfly Blog Sandfly 4.6.1 - Microsoft Active Directory Support and Default Linux Password Auditing 29 August 2023 News

2 min read

Hunting Linux Implants Agentlessly at Locked Shields 2026

Sandfly Blog Hunting Linux Implants Agentlessly at Locked Shields 2026 15 June 2026 Public Sector

3 min read

Linux Process Environment Variables for Live Forensics

Publication Date: 05 May 2019