Live session · Includes Sandfly demo

Is that Linux alert real?

A practical standard for judging what your Linux tooling is telling you.

Tue 27 Oct 11am PDT / 2pm EDT / 6pm GMT YouTube Live 45 min

Join live session


Can't make it live? Register anyway and we'll send you the recording.

Most Linux security tools will tell you something is wrong. Fewer can tell you whether it's worth your team's time. In this practitioner-led session, Craig Rowland, Founder and CEO of Sandfly Security, sets out a simple standard: what a Linux detection needs behind it before you should trust its verdict. You'll leave with a checklist you can apply to whatever you already run. Craig will finish with a live demo of how Sandfly applies this standard.

 

A 4-point checklist for judging Linux alerts

01
Where did the data come from?
Host data beats scraped signals.
02
Does it show its evidence?
If you can't inspect it, you can't defend it.
03
Is it ranked consistently?
A score only counts if it's applied everywhere.
04
Does it survive being wrong?
Correct it once, fixed on every host.
Who should attend
Security leaders SecOps teams Linux engineers

Your Speakers
Craig-Rowland-headshot-circle
Craig Rowland
Founder and CEO,
Sandfly Security

Craig Rowland is the Founder and CEO of Sandfly Security. He started his career breaking into networks professionally alongside U.S. Air Force information warfare veterans, then built intrusion detection products at start-ups later acquired by Cisco. He has spent decades hunting attackers on Linux, and writes regularly on rootkits and Linux malware.

Brekke-Mehis-headshot-circle
Brekke Mehis
Global VP of Sales,
Sandfly Security

Brekke brings years of experience leading sales teams in threat intelligence and identity security, and works with enterprise security teams to secure their Linux environments.

About Sandfly

Sandfly Security protects Linux systems for enterprise teams globally. Our platform scans hosts agentlessly, with no software to install, and gives security teams a ranked view of what's real so they spend their time on genuine threats, not noise.