In this video Sandfly founder Craig Rowland discusses the importance of searching for Linux anti-forensic techniques on hosts you are protecting. Anti-forensics are techniques many intruders and malware use on Linux hosts to conceal their …
READ MOREWhy You Should Be Searching for Linux Anti-Forensics
This is the first in an ongoing series of short videos on topics around intrusion detection, Linux security, digital forensics, malware and anything else Sandfly Founder Craig Rowland finds interesting. Be sure to subscribe to …
Sandfly 1.6.1 is released and has some important updates. Install Simplified The install procedure for Sandfly has been greatly simplified. You now need to run one script on the server and enter some basic information …
Sandfly 1.6.0 is now available. We now have 200 sandfly checks covering a wide range of Linux rootkit, malware and intrusion detection. Our agentless approach is fast and extensive in investigating threats against Linux. Here …
Sandfly 1.5.0 has been released with many new detection methods for Linux rootkits, malware and suspicious activity. The latest update expands on our already thorough intrusion detection and threat hunting net for Linux. This version …
Below is our command line compromise detection for Linux cheat sheet and presentation given at Purplecon 2018: Linux Compromise Detection Command Cheat Sheet Linux Compromise Detection Presentation Linux Compromise Detection Video The presentation and cheat …
READ MORELinux Command Line Forensics and Intrusion Detection Cheat Sheet
Sandfly founder Craig Rowland did a presentation on the insider’s history of Intrusion Detection Systems at the Christchurch HackerCon. His slides are below and a video will be released when it is made available from …
Sandfly rides on top a full featured REST API. Users can now access the REST API documentation below: Sandfly REST API Every aspect of Sandfly can be controlled through the API and integrated into your …
Sandfly founder Craig Rowland discusses Linux cryptomining malware on the Digital Forensics Survival Podcast with host Michael. They go over what this class of malware does, how it gets onto Linux systems, what to look for …