Linux Rootkit File and Directory De-Cloaking Explained
Stealth rootkits hide files and directories from ls and find. See how agentless de-cloaking exposes them on Linux, with detection examples from...
Sandfly Security - Agentless Linux EDR and Incident Response : Published Updated
02 March 2025
Sandfly 5.3.1 features new licensing tier options, including an affordable Home User Edition. We've also added SELinux tamper detection and more stealth rootkit decloaking. Please watch the video below for a demonstration of these new features.
Stealth rootkits hide files and directories from ls and find. See how agentless de-cloaking exposes them on Linux, with detection examples from...
Find stealth packet sniffing malware on Linux with command line forensics.
sandfly-filescan is an open source entropy file scanner for Linux. Spot packed or encrypted malware binaries automatically on Linux.