Sandfly Blog

3 min read

Linux File Descriptor Forensics: Investigating /proc/PID/fd

Publication Date: 06 January 2021

4 min read

Sandfly 2.8.0 – Agentless Active Attack Response for Linux

Publication Date: 16 November 2020

Sandfly 2.7.2 – Performance Update

Sandfly Blog Sandfly 2.7.2 – Performance Update 23 September 2020 Product Update

4 min read

Getting In The Fight

03 September 2020

2 min read

Linux Stealth Rootkit Process Decloaking Tool – sandfly-process decloak

Publication date: 16 August 2020

4 min read

Sandfly 2.7.0 – Mitre ATT&CK Tags, Enhanced Linux Stealth Rootkit De-Cloaking and SCTP Backdoor Detection

Publication Date: 04 August 2020

7 min read

Linux Malware Detection | Ubuntu, Debian, Redhat, Suse, Fedora, Raspberry Pi etc Malware Detect

Publication Date: 08 July 2020

2 min read

Splunk App for Sandfly Agentless Intrusion Detection for Linux Now Available

Publication Date: 02 June 2020 We are pleased to announce the release of the Sandfly Splunk app. This new app is available on Splunkbase. Sandfly...

Using Elasticsearch and Kibana to Investigate Suspicious Linux Activity with Sandfly

Publication Date: 27 May 2020

6 min read

Sandfly 2.6.0 – Elasticsearch Replication, Linux Docker Container Security Scanning, Hidden Process De-Cloaking and More

Publication Date: 13 April 2020

3 min read

Detecting Linux Kernel Process Masquerading with Command Line Forensics

Publication Date: 30 March 2020

4 min read

Sandfly 2.5.2 – Scheduling Priority, Detecting Command Line Web Servers, Port Scanners and Kernel Thread Masquerading

Publication Date: 25 March 2020

4 min read

Sandfly 2.5.0 – Higher Performance, SSH Key Certificates and More Linux Forensics

Sandfly Blog Sandfly 2.5.0 – Higher Performance, SSH Key Certificates and More Linux Forensics 17 February 2020 Product Update

4 min read

Sandfly 2.4.0 – Splunk Support, Reconnaissance, Process Injection Detection and Containers

Publication date: 12 January 2020