How Linux Malware Works, From Simple to Sophisticated
A full breakdown of Linux malware, from cryptominers to BPFDoor and stealth rootkits, presented at an Ericsson conference for critical infrastructure.
Craig Rowland, Founder and CEO, Sandfly Security : Published Updated
Publication Date: 27 May 2020
In this video we’re going to show you how to use Sandfly with Elasticsearch Kibana dashboards to search for and investigate a suspicious process on Linux.
We’ll go over Sandfly’s agentless collection of Linux operating system, security and intrusion detection data. Then we’ll use this information to investigate a rogue network sniffer started by mysterious user X.
Sandfly can easily send data into Elasticsearch (and Splunk) to help detect and investigate breaches. Best of all, we do it without loading any agents on your Linux endpoints. Stay tuned for more videos showing these capabilities.
A full breakdown of Linux malware, from cryptominers to BPFDoor and stealth rootkits, presented at an Ericsson conference for critical infrastructure.
Sandfly founder Craig Rowland did a presentation on the insider’s history of Intrusion Detection Systems at the Christchurch HackerCon.
We'll discuss why agentless security for Linux is the best approach for compatibility and dealing with advanced attackers trying to evade detection.