Is that Linux alert real?
A practical standard for judging what your Linux tooling is telling you.
Overview
Most Linux security tools will tell you something is wrong. Fewer can tell you whether it's worth your team's time. In this practitioner-led session, Craig Rowland, Founder and CEO of Sandfly Security, sets out a simple standard: what a Linux detection needs behind it before you should trust its verdict. He runs through a checklist you can apply to whatever you already run. Craig then finishes with a live demo of how Sandfly applies this standard.
Your Speakers
Craig Rowland
Founder and CEO,
Sandfly Security
Craig Rowland is the Founder and CEO of Sandfly Security. He started his career breaking into networks professionally alongside U.S. Air Force information warfare veterans, then built intrusion detection products at start-ups later acquired by Cisco. He has spent decades hunting attackers on Linux, and writes regularly on rootkits and Linux malware.
Brekke Mehis
Global VP of Sales,
Sandfly Security
Brekke brings years of experience leading sales teams in threat intelligence and identity security, and works with enterprise security teams to secure their Linux environments.
About Sandfly
Sandfly Security protects Linux systems for enterprise teams globally. Our platform scans hosts agentlessly, with no software to install, and gives security teams a ranked view of what's real so they spend their time on genuine threats, not noise.
Full Linux visibility. Nothing installed.
No agents, no kernel modules, nothing left behind. See how Sandfly hunts for intruders across your environment without touching production.