Sandfly Security

Sandfly Security Agentless Compromise and Intrusion Detection System For Linux

sandflysecurity

Entropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives output with cryptographic hashes.

sandflysecurity

Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.

sandflysecurity

Small scripts to help with Linux forensics and incident response.

sandflysecurity

Scripts to decloak Linux Loadable Kernel Module (LKM) stealth rootkits.

sandflysecurity