Sandfly Version 5.0 Is Now Available!

Sandfly Version 5.0 Is Now Available!

Publication date: 14 February 2024

 

Today is a big day for us here at Sandfly as we release our latest version to the public. Version 5.0 marks a significant advancement in our multi-layered Linux defense platform, exceeding traditional Endpoint Detection and Response (EDR) capabilities.

This release introduces our new agentless drift detection feature, providing extensive active threat hunting and proactive security measures for all your Linux systems.

Other enhancements in 5.0 include:

  • Improved User Interface and mobile support 
  • Even Greater Coverage
  • Whitelist Profiles
  • Simplified Deployment and Faster Scanning Speeds
  • Expanded Container Coverage
  • Parent Process Detection 

To learn more about these new features, head over to our news and product updates to read the full post.

Sandfly 1.3 Update

Sandfly 1.3 Update

A new version of Sandfly has been released. Version 1.3 has the following changes: Container OS was switched from Alpine to Ubuntu Minimal for better...

Read More
Detecting Linux Binary File Poisoning

Detecting Linux Binary File Poisoning

Binary poisoning is tampering with a Linux system command and replacing it with a malicious version. Here's how to find it.

Read More
Linux File Masquerading and Malicious PIDs | Sandfly 1.2.6 Update

Linux File Masquerading and Malicious PIDs | Sandfly 1.2.6 Update

Sandfly 1.2.6 Released This version of Sandfly has many internal performance improvements. Some sandfly checks have been sped up over 50%.

Read More