Sandfly 2.1 Released
Sandfly 2.1 has been released. We have expanded MIPS and ARM CPU coverage for embedded Linux devices, boosted our bindshell backdoor coverage and added in new sniffer and rogue sudo user detection as well as …
sandfly update
Sandfly 2.0 Released – Write Your Own Sandflies
Sandfly 2.0 is here. Sandfly 2.0 brings powerful new capabilities for agentless compromise detection and incident response for Linux. This includes our new feature to write your own agentless custom sandfly modules. Widest Linux Security …
Sandfly 1.6.1 – Host ID Updates and Other Fixes
Sandfly 1.6.1 is released and has some important updates. Install Simplified The install procedure for Sandfly has been greatly simplified. You now need to run one script on the server and enter some basic information …
Sandfly 1.6.0 – 200 Sandflies!
Sandfly 1.6.0 is now available. We now have 200 sandfly checks covering a wide range of Linux rootkit, malware and intrusion detection. Our agentless approach is fast and extensive in investigating threats against Linux. Here …
Sandfly 1.5.0 Released – Enhanced Linux Process Forensics, Rootkit and Network Sniffer Hunting
Sandfly 1.5.0 has been released with many new detection methods for Linux rootkits, malware and suspicious activity. The latest update expands on our already thorough intrusion detection and threat hunting net for Linux. This version …
Sandfly 1.4.6 – Performance and Syslog Updates
Performance Updates Sandlfy 1.4.6 is released. This update adds significant performance increases to the backend enabling faster handling of a large number of hosts. Thanks to our agentless design, Sandfly was always able to scan …
Sandfly 1.4.4 – Mind your PIDness
Sandfly 1.4.4 Update Sandfly 1.4.4 is now released. We have added some new sandflies and broken out an older one to be more granular. Feature list: Sandflies to flag running processes under hidden subdirectories. Sandflies to detect malicious …
Agentless Incident Response Sandflies and More Stealth Rootkit De-Cloaking: Sandfly 1.4.2 Released
Sandfly 1.4.2 Update Sandfly 1.4.2 is now released. This version brings back the old “Recon” sandflies as “Incident” sandflies for use for Incident Response (IR) or those wanting to do spot checks on hosts for …
De-Cloaking Linux Stealth Rootkits, Whitelisting and UI Updates: Sandfly 1.4 Released
Sandfly 1.4 has been released. We now have capabilities to de-cloak data being hidden by common Linux loadable kernel module stealth rootkits. This capability works even when they are active and trying to evade detection. …
READ MOREDe-Cloaking Linux Stealth Rootkits, Whitelisting and UI Updates: Sandfly 1.4 Released