Detect Linux Loadable Kernel Module Stealth Rootkits Agentlessly with Sandfly

Detect Linux Loadable Kernel Module Stealth Rootkits Agentlessly with Sandfly
Sandfly Blog

Detect Linux Loadable Kernel Module Stealth Rootkits Agentlessly with Sandfly

26 April 2018

Rootkits

Watch Sandfly’s agentless intrusion detection and threat hunting technology detect a Linux stealth rootkit. Sandfly automates the investigation and alerting of Linux rootkit compromises so you can respond quickly to threats. Hunt for rootkits. Don’t let rootkits hunt you.


Sandfly 2.6.0 – Elasticsearch Replication, Linux Docker Container Security Scanning, Hidden Process De-Cloaking and More

Sandfly 2.6.0 – Elasticsearch Replication, Linux Docker Container Security Scanning, Hidden Process De-Cloaking and More

Sandfly 2.6.0 provides agentless intrusion detection for Linux Docker containers, de-cloaking of stealth rootkits, and Elasticsearch/Kibana threat...

Read More
Sandfly 2.0 Released – Write Your Own Sandflies

Sandfly 2.0 Released – Write Your Own Sandflies

Sandfly 2.0 offers the most comprehensive agentless Linux malware and rootkit detection available. Now you can write your own Linux threat hunting...

Read More
Sandfly 5.3.1 - New License Tiers and SELinux Support

Sandfly 5.3.1 - New License Tiers and SELinux Support

Get Sandfly's Home User Edition to protect your Linux network, plus SELinux support and more stealth rootkit detection.

Read More