Sandfly 2.9.0 – Protect Your Linux Hosts Free Instantly

Product Update
April 13, 2021

Sandfly 2.9.0 has been released and allows everyone to get a free annual license to monitor Linux hosts. You can use this license immediately to protect Linux hosts for either personal or business…

Sandfly 2.8.2 – Over 1,000 Linux Compromise Detection Modules and More

Product Update
January 19, 2021

Sandfly 2.8.2 is here and features many upgrades including over 1,000 compromise detection and incident response modules for Linux. This update features: User password entry decoder to search for…

Sandfly 2.8.0 – Agentless Active Attack Response for Linux

Product Update
November 16, 2020

Sandfly 2.8.0 is released and features a major new upgrade allowing users to automatically respond to detected Linux attacks agentlessly. In addition to this we have made large performance upgrades…

Sandfly 2.7.2 – Performance Update

Product Update
September 23, 2020

Sandfly 2.7.2 has been released. This is a bug fix release to address a performance issue. In the last release Sandfly introduced more extensive process decloaking for stealth rootkits. The technique…

Sandfly 2.7.0 – Mitre ATT&CK Tags, Enhanced Linux Stealth Rootkit De-Cloaking and SCTP Backdoor Detection

Product Update
August 04, 2020

Sandfly 2.7.0 is now out and features some significant upgrades. Sandfly modules now are tagged with Mitre ATT&CK categories and tactics. We are able to completely decloak even more hidden processes…

Splunk App for Sandfly Agentless Intrusion Detection for Linux Now Available

Product Update
June 02, 2020

We are pleased to announce the release of the Sandfly Splunk app. This new app is available on Splunkbase . Sandfly users can now combine the powerful search and analysis features of Splunk, with…