Why You Should Be Searching for Linux Anti-Forensics

Sandfly Security - Agentless Linux EDR and Incident Response : Published Updated

Videos Rootkits Malware Linux Security Linux Forensics

Publication Date: 09 February 2019

In this video Sandfly founder Craig Rowland discusses why it's important to hunt for anti-forensics on Linux.

Anti-forensics are techniques intruders and malware use on Linux hosts to conceal their activity. As opposed to searching for exploit signatures that have a short shelf-life, anti-forensic activity is often difficult to hide when you look for it. The irony is that unlike exploit signatures that go stale very fast, anti-forensic tactics do not change frequently and make a great way to look for signs of compromise.

Sandfly looks for a lot of anti-forensic activity because it is so good at helping zero in on attackers without needing to worry about specific attacks they may have used to gain access. This video discusses why you may want to spend more time hunting for anti-forensics vs. traditional exploit signatures.
Hunting for Linux Intrusion Tactics is Better than Searching for Exploit Signatures

Hunting for Linux Intrusion Tactics is Better than Searching for Exploit Signatures

Sandfly Security - Agentless Linux EDR and Incident Response : 13 February 2019

In this video we'll tell you why hunting for tactics is better than focusing on zero day attacks and exploit signatures to find Linux hackers and...

Videos Rootkits Malware Linux Security Linux Forensics
Read More
Linux Forensics Tools | Intrusion Detection, Threat Hunting & Malware Detect Linux Commands Cheat Sheet

Linux Forensics Tools | Intrusion Detection, Threat Hunting & Malware Detect Linux Commands Cheat Sheet

Sandfly Security - Agentless Linux EDR and Incident Response : 26 April 2018

Download the free cheat sheet of Linux Forensic commands Tools for threat hunting and help spot compromised hosts, detect intruders, detect malware,...

Rootkits Malware Linux Security Linux Forensics
Read More

Linux Forensics Tools | Intrusion Detection, Threat Hunting & Malware Detect Linux Commands Cheat Sheet

Craig Rowland, Founder and CEO, Sandfly Security : 20 May 2021

Download the free cheat sheet of Linux Forensic commands Tools for threat hunting and help spot compromised hosts, detect intruders, detect malware,...

Rootkits Malware Linux Security Linux Forensics Manufacturing
Read More