hightestEmerging Threat
Log4j RCE CVE-2021-44228 in Fields
Detects exploitation attempt against log4j RCE vulnerability reported as CVE-2021-44228 in different header fields found in web server logs (Log4Shell)
Generalwebserver
2023-01-02
Emerging Threats
CVE2021
CVE-2021-44228
3Rules
9References
1Folders
2023-01-02Latest
Summary
CVE-2021-44228 is tracked here through 3 Sigma detections for exploitation attempts and related post-exploitation behavior observed in 2021. Coverage centers on webserver, windows / process_creation.
Related Detections
Search this threathightestEmerging Threat
Log4j RCE CVE-2021-44228 Generic
Detects exploitation attempt against log4j RCE vulnerability reported as CVE-2021-44228 (Log4Shell)
Generalwebserver
2022-02-06
hightestEmerging Threat
Potential CVE-2021-44228 Exploitation Attempt - VMware Horizon
Detects potential initial exploitation attempts against VMware Horizon deployments running a vulnerable versions of Log4j.
windowsprocess_creation
2022-01-14
References