Silverfort - Log4Shell Incident

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Vulnerability allows attackers to execute arbitrary code on affected systems by exploiting a flaw in the way Log4j handles log messages containing specially crafted strings

Attribute Value
Type Analytic Rule
Solution Silverfort
ID d6abed70-4043-46da-9304-a98f3446fa5f
Severity High
Kind Scheduled
Tactics InitialAccess
Techniques T1190
Required Connectors SilverfortAma
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Selection Criteria Transformations Ingestion API Lake-Only
CommonSecurityLog DeviceEventClassID == "NewIncident"
DeviceProduct has "Admin Console"
DeviceVendor has "Silverfort"
?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to Silverfort