Sandfly-Entropyscan - Tool To Detect Packed Or Encrypt ed Binaries Related To Malware, Finds Malicious Files And Linux Processes And Gives Output With Cryptographic Hashes

sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy (measure of randomness) and if they are a Linux/Unix ELF type executable. Some malware for Linux is packed or encrypted and shows very high entropy. This tool can quickly find high entropy executable files and processes which often are malicious.

• Written in Golang and is portable across multiple architectures with no modifications.
• Standalone binary requires no dependencies and can be …

blueteam encrypt files hashes incident response tooling intrusion detection intrusion detection system linux malicious malware malware analysis malware research processes tool