Product Update

Sandfly 5.6 - Automatic Drift Detection

Sandfly 5.5.4 - Chinese Rootkit Decloaking

Sandfly 5.5 - AI-Powered Analysis, Advanced BPFDoor Detection, and Smarter Scanning

Sandfly 5.4 - Cisco and Juniper Network Device Support

Sandfly 5.3.1 - New License Tiers and SELinux Support

Sandfly 5.3 - Detailed Host Forensics and Microsoft Sentinel Integration

Sandfly 5.2 - Linux Stealth Rootkit File and Directory De-Cloaking

Sandfly 5.1.1 - Important Performance Upgrade and Yescrypt Support

Sandfly 5.1 - Introducing SSH Security Zones

Sandfly 5.0.6 Maintenance Release

Sandfly 5.0 - Agentless Drift Detection, New UI, and Wider Linux Coverage

Sandfly 4.6.1 - Microsoft Active Directory Support and Default Linux Password Auditing

Sandfly 4.6.0 - Advanced Whitelisting and Free SSH Hunter

Sandfly 4.5.0 - Powerful New Expression Syntax

Sandfly 4.4.0 - Agentless Linux Password Auditing and Data De-Duplication

Sandfly 4.3.2 - Linux Loadable Kernel Module Rootkit Taint Detection

Sandfly 4.3.0 - Key Vault Integration, Process, SSH, and Persistence Attack Detection

Sandfly 4.2.3 - OpenSSL CVE-2022-3602 and CVE-2022-3786 Update

Sandfly Security Code Audit and Continuous Monitoring

Sandfly 4.2 - Automatic Host Discovery and Faster Than Ever

Sandfly 4.0 - SSH Credential Auditing and eBPF Rootkit Detection

Sandfly 3.3 - Reporting, SSO, Veracode Certified, Suspicious IP Detection and More

Sandfly 3.2 - Base64 Linux Malware Payload Detection & New UI Views

Sandfly 3.1 Released - Secure Linux Faster Than Ever

Sandfly Security Not Vulnerable to the Log4j Exploit

Sandfly 3.0 - Production Release and Licensing Changes

Sandfly 3.0 Beta - Live Now

Sandfly Now Available for Free at Digital Ocean

Sandfly 2.9.0 – Protect Your Linux Hosts Free Instantly

Sandfly 2.8.2 – Over 1,000 Linux Compromise Detection Modules and More

Sandfly 2.8.0 – Agentless Active Attack Response for Linux

Sandfly 2.7.2 – Performance Update

Sandfly 2.7.0 – Mitre ATT&CK Tags, Enhanced Linux Stealth Rootkit De-Cloaking and SCTP Backdoor Detection

Splunk App for Sandfly Agentless Intrusion Detection for Linux Now Available

Sandfly 2.6.0 – Elasticsearch Replication, Linux Docker Container Security Scanning, Hidden Process De-Cloaking and More

Sandfly 2.5.2 – Scheduling Priority, Detecting Command Line Web Servers, Port Scanners and Kernel Thread Masquerading

Sandfly 2.5.0 – Higher Performance, SSH Key Certificates and More Linux Forensics

Sandfly 2.4.0 – Splunk Support, Reconnaissance, Process Injection Detection and Containers

Sandfly 2.3.2 – Linux Packet Sniffer Detection and Faster Process Forensics

Sandfly 2.3 – Performance Updates, Elasticsearch 7 Support and More

Sandfly 2.2 – Enhanced Web Shell Detection, Linux Anti-Forensics and More

Sandfly 2.1 Released

Sandfly 2.0 Released – Write Your Own Sandflies

Sandfly 1.6.1 – Host ID Updates and Other Fixes

Sandfly 1.6.0 – 200 Sandflies!

Sandfly 1.5.0 Released – Enhanced Linux Process Forensics, Rootkit and Network Sniffer Hunting

Sandfly REST API Published

Sandfly 1.4.6 – Performance and Syslog Updates

Sandfly 1.4.4 – Mind your PIDness

Agentless Incident Response Sandflies and More Stealth Rootkit De-Cloaking: Sandfly 1.4.2 Released

De-Cloaking Linux Stealth Rootkits, Whitelisting and UI Updates: Sandfly 1.4 Released

Sandfly 1.3 Update

Linux File Masquerading and Malicious PIDs – Sandfly 1.2.6 Update

Sandfly 1.1.14 – Linux File Masquerading, Encrypted Malware Detection, and More

Sandfly 1.1.11 Updates

Sandfly 1.1.4 Updates

Hello, World — Sandfly 1.1 is now available

Sandfly 2.3.3 – More Linux Sniffer and Immutable File Detection