Popular repositories Loading

1. sandfly-entropyscan sandfly-entropyscan Public

   Entropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives output with cryptographic hashes.

   Go 167 25

2. sandfly-processdecloak sandfly-processdecloak Public

   Sandfly Linux Stealth Rootkit Decloaking Utility

   Go 107 18

3. sandfly-setup sandfly-setup Public

   Sandfly Security Agentless Compromise and Intrusion Detection System For Linux

   Shell 86 14

4. sandfly-forensic-scripts sandfly-forensic-scripts Public

   Small scripts to help with Linux forensics and incident response.

   Shell 55 4

5. sandfly-kernel-module-decloak sandfly-kernel-module-decloak Public

   Scripts to decloak Linux Loadable Kernel Module (LKM) stealth rootkits.

   Shell 35 4

6. sandfly-file-decloak sandfly-file-decloak Public

   Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.

   Python 29 5