Log4jPostCompromiseHunting

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index


Attribute Value
Type Workbook
Solution Apache Log4j Vulnerability Detection
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Selection Criteria Transformations Ingestion API Lake-Only
AADNonInteractiveUserSignInLogs ✓ ✗ ✓
AWSCloudTrail ✓ ✓ ✓
AzureDiagnostics 🔶 Category in "ApplicationGatewayAccessLog,ApplicationGatewayFirewallLog,FrontdoorAccessLog,FrontdoorWebApplicationFirewallLog" ✗ ✗ ✗
OfficeActivity ✓ ✗ ✓
SecurityNestedRecommendation RemediationDescription has "CVE-2021-44228" ✓ ✗ ✗
SigninLogs ✓ ✗ ✓
Syslog Facility == "user"
SyslogMessage has "AUOMS_EXECVE"
SyslogMessage has "jndi"
SyslogMessage has_any "corba,dns,iiop,ldap,nds,nis,rmi"
✓ ✓ ✓
W3CIISLog ✓ ✗ ✗

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Workbooks · Back to Apache Log4j Vulnerability Detection