Hunting for Linux Intrusion Tactics is Better than Searching for Exploit Signatures

Hunting for Linux Intrusion Tactics is Better than Searching for Exploit Signatures
Sandfly Blog

Hunting for Linux Intrusion Tactics is Better than Searching for Exploit Signatures

13 February 2019

Malware

When the NSA and CIA source code leaked a couple years back, Sandfly founder Craig Rowland ignored the zero day attacks they had and studied their tactics in the code instead. In this video he’ll tell you why hunting for tactics is better than focusing on zero day attacks. Sandfly’s agentless Linux Security Bot hunts for intruder tactics because they are they best way of finding malicious activity without a constant stream of updates needed.


Linux Forensics Tools | Intrusion Detection, Threat Hunting & Malware Detect Linux Commands Cheat Sheet

Linux Forensics Tools | Intrusion Detection, Threat Hunting & Malware Detect Linux Commands Cheat Sheet

Download the free cheat sheet of Linux Forensic commands Tools for threat hunting and help spot compromised hosts, detect intruders, detect malware,...

Read More
The Advantages of Agentless Security and Intrusion Detection for Linux

The Advantages of Agentless Security and Intrusion Detection for Linux

We'll discuss why agentless security for Linux is the best approach for compatibility and dealing with advanced attackers trying to evade detection.

Read More

Why You Must Monitor Linux for Signs of Intruders

In this video we'll tell you why hunting for tactics is better than focusing on zero day attacks and exploit signatures to find Linux hackers and...

Read More