De-Cloaking Linux Stealth Malware and Rootkits: sedexp, Diamorphine, and Reptile
Quickly find stealth rootkits and malware hiding files and directories on Linux with agentless Sandfly.
Sandfly Security - Agentless Linux EDR and Incident Response : Published Updated
21 July 2025
Sandfly 5.5 has powerful new AI integration to allow teams to quickly analyze Linux security events and forensics. This new feature brings an expert-level security analyst to your team using Sandfly's high quality agentless data.
In the video below, Sandfly founder Craig Rowland discusses the new feature and demonstrates how it works on a system infected with the BPFDoor malware.
Deploying in minutes without endpoint agents, Sandfly has the widest and safest Linux coverage in the industry. From cloud, to on-prem, to embedded, and even network appliances, Sandfly can protect virtually all versions of Linux with safety and reliability.
Quickly find stealth rootkits and malware hiding files and directories on Linux with agentless Sandfly.
Sandfly founder Craig Rowland did a presentation on the insider’s history of Intrusion Detection Systems at the Christchurch HackerCon.
In this video we're going to show you how to use Sandfly with Elasticsearch Kibana dashboards to search for and investigate a suspicious process on...