https://sandflysecurity.com/blog Linux security and forensic articles. Learn about Linux forensics and agentless security with Sandfly. en Mon, 28 Sep 2026 21:55:24 GMT 2026-09-28T21:55:24Z en https://sandflysecurity.com/blog/why-you-should-be-searching-for-linux-anti-forensics <p><span style="color: #ffffff;">Publication Date: 09 February 2019</span></p> <p><span style="color: #ffffff;">Publication Date: 09 February 2019</span></p> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Fwhy-you-should-be-searching-for-linux-anti-forensics&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> Videos Rootkits Malware Linux Security Linux Forensics Mon, 28 Sep 2026 19:21:06 GMT https://sandflysecurity.com/blog/why-you-should-be-searching-for-linux-anti-forensics 2026-09-28T19:21:06Z Sandfly Security - Agentless Linux EDR and Incident Response https://sandflysecurity.com/blog/christchurch-hacker-con-linux-digital-forensics-video <p>Publication Date: 18 April 2018</p> <p>Publication Date: 18 April 2018</p> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Fchristchurch-hacker-con-linux-digital-forensics-video&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> Linux Security Linux Forensics Presentations Mon, 28 Sep 2026 19:20:45 GMT https://sandflysecurity.com/blog/christchurch-hacker-con-linux-digital-forensics-video 2026-09-28T19:20:45Z Sandfly Security - Agentless Linux EDR and Incident Response https://sandflysecurity.com/blog/using-elasticsearch-and-kibana-to-investigate-suspicious-linux-activity-with-sandfly <p>Publication Date: 27 May 2020</p> <p>Publication Date: 27 May 2020</p> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Fusing-elasticsearch-and-kibana-to-investigate-suspicious-linux-activity-with-sandfly&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> Videos Linux Security Presentations Mon, 28 Sep 2026 19:20:17 GMT https://sandflysecurity.com/blog/using-elasticsearch-and-kibana-to-investigate-suspicious-linux-activity-with-sandfly 2026-09-28T19:20:17Z Craig Rowland, Founder and CEO, Sandfly Security https://sandflysecurity.com/blog/immutable-file-attack-persistence-on-linux <p>Publication Date: 20 January 2025</p> <p>Publication Date: 20 January 2025</p> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Fimmutable-file-attack-persistence-on-linux&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> Videos Linux Forensics Education Mon, 28 Sep 2026 19:19:49 GMT https://sandflysecurity.com/blog/immutable-file-attack-persistence-on-linux 2026-09-28T19:19:49Z Sandfly Security - Agentless Linux EDR and Incident Response https://sandflysecurity.com/blog/compromised-linux-cheat-sheet <p>Publication Date: 20 May 2021</p> <p>Publication Date: 20 May 2021</p> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Fcompromised-linux-cheat-sheet&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> Rootkits Malware Linux Security Linux Forensics Manufacturing Mon, 28 Sep 2026 19:18:59 GMT https://sandflysecurity.com/blog/compromised-linux-cheat-sheet 2026-09-28T19:18:59Z Craig Rowland, Founder and CEO, Sandfly Security https://sandflysecurity.com/blog/how-linux-malware-works-from-simple-to-sophisticated <p>Publication Date: 17 June 2026</p> <p>Publication Date: 17 June 2026</p> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Fhow-linux-malware-works-from-simple-to-sophisticated&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> Videos Malware Linux Security Presentations Webinar Mon, 28 Sep 2026 19:18:18 GMT https://sandflysecurity.com/blog/how-linux-malware-works-from-simple-to-sophisticated 2026-09-28T19:18:18Z Craig Rowland, Founder and CEO, Sandfly Security https://sandflysecurity.com/blog/why-you-must-monitor-linux-for-signs-of-intruders <p>Publication Date: 20 February 2019</p> <p>Publication Date: 20 February 2019</p> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Fwhy-you-must-monitor-linux-for-signs-of-intruders&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> Rootkits Malware Linux Security Linux Forensics Mon, 28 Sep 2026 19:17:48 GMT https://sandflysecurity.com/blog/why-you-must-monitor-linux-for-signs-of-intruders 2026-09-28T19:17:48Z Sandfly Security - Agentless Linux EDR and Incident Response https://sandflysecurity.com/blog/ssh-key-compromise-risks-and-countermeasures <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/ssh-key-compromise-risks-and-countermeasures" title="" class="hs-featured-image-link"> <img src="https://www.datocms-assets.com/56687/1687819717-ssh-find-private-keys-annotated.png" alt="SSH Key Compromise Risks and Countermeasures" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <p>Publication Date: 26 June 2023</p> <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/ssh-key-compromise-risks-and-countermeasures" title="" class="hs-featured-image-link"> <img src="https://www.datocms-assets.com/56687/1687819717-ssh-find-private-keys-annotated.png" alt="SSH Key Compromise Risks and Countermeasures" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <p>Publication Date: 26 June 2023</p> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Fssh-key-compromise-risks-and-countermeasures&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> Videos Malware Linux Security Linux Forensics Education Mon, 28 Sep 2026 19:11:59 GMT https://sandflysecurity.com/blog/ssh-key-compromise-risks-and-countermeasures 2026-09-28T19:11:59Z Craig Rowland, Founder and CEO, Sandfly Security https://sandflysecurity.com/blog/lunk-app-for-sandfly-agentless-intrusion-detection-for-linux-now-available <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/lunk-app-for-sandfly-agentless-intrusion-detection-for-linux-now-available" title="" class="hs-featured-image-link"> <img src="https://www.datocms-assets.com/56687/1635216296-splunk-sandfly-dashboard-1.png" alt="Splunk App for Sandfly Agentless Intrusion Detection for Linux Now Available" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <p>Publication Date: 02 June 2020<br><br>We are pleased to announce the release of the Sandfly Splunk app. This <a href="https://splunkbase.splunk.com/app/5015/">new app is available on Splunkbase</a>. Sandfly users can now combine the powerful search and analysis features of Splunk, with Sandfly’s leading agentless security and visibility into Linux.</p> <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/lunk-app-for-sandfly-agentless-intrusion-detection-for-linux-now-available" title="" class="hs-featured-image-link"> <img src="https://www.datocms-assets.com/56687/1635216296-splunk-sandfly-dashboard-1.png" alt="Splunk App for Sandfly Agentless Intrusion Detection for Linux Now Available" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <p>Publication Date: 02 June 2020<br><br>We are pleased to announce the release of the Sandfly Splunk app. This <a href="https://splunkbase.splunk.com/app/5015/">new app is available on Splunkbase</a>. Sandfly users can now combine the powerful search and analysis features of Splunk, with Sandfly’s leading agentless security and visibility into Linux.</p> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Flunk-app-for-sandfly-agentless-intrusion-detection-for-linux-now-available&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> News Product Update Linux Security Mon, 28 Sep 2026 19:11:58 GMT https://sandflysecurity.com/blog/lunk-app-for-sandfly-agentless-intrusion-detection-for-linux-now-available 2026-09-28T19:11:58Z Sandfly Security - Agentless Linux EDR and Incident Response https://sandflysecurity.com/blog/sandfly-5-6-automatic-drift-detection <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/sandfly-5-6-automatic-drift-detection" title="" class="hs-featured-image-link"> <img src="https://www.datocms-assets.com/56687/1768949771-5-6-thumbnail-alt-web.png" alt="Sandfly 5.6 - Automatic Drift Detection" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <p>Publication Date: 21 January 2026</p> <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/sandfly-5-6-automatic-drift-detection" title="" class="hs-featured-image-link"> <img src="https://www.datocms-assets.com/56687/1768949771-5-6-thumbnail-alt-web.png" alt="Sandfly 5.6 - Automatic Drift Detection" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <p>Publication Date: 21 January 2026</p> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Fsandfly-5-6-automatic-drift-detection&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> News Product Update Linux Security Mon, 28 Sep 2026 19:11:56 GMT https://sandflysecurity.com/blog/sandfly-5-6-automatic-drift-detection 2026-09-28T19:11:56Z Sandfly Security - Agentless Linux EDR and Incident Response