October 2019 - Sandfly Security

Sandfly 2.3 – Performance Updates, Elasticsearch 7 Support and More

October 30, 2019October 30, 2019

Sandfly 2.3 is now released. This version features many changes to improve performance, updates the custom Sandfly syntax, eliminates false alarms and migrates to Elasticsearch 7. Performance Enhancements The backend has been made significantly faster …

Basic Linux Malware Process Forensics for Incident Responders

October 1, 2019October 1, 2019

Let’s go step-by-step and do some basic live process forensics for Linux. Today’s attack is a bind shell backdoor waiting for a connection on Ubuntu. Simulated Bind Shell Attack If you want to simulate the …