Detection catalogue

Explore published rules with transparent provenance, licensing, and ATT&CK mappings.

detections

Loading detections…

Log4j vulnerability exploit aka Log4Shell IP IOC

Identifies a match across various data feeds for IP IOCs related to the Log4j vulnerability exploit aka Log4Shell described in CVE-2021-44228. References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-44228

ATT&CK coverage

Outside the enterprise matrix

T1071Application Layer Protocol 161 detections cover this technique

What the source says

Tagged by the source as

CommandAndControl

Detection logic

Published to signed-in readers

The query as its source wrote it, its canonical form, and the content hash that pins this exact revision.

Detection catalogue

Log4j vulnerability exploit aka Log4Shell IP IOC

ATT&CK coverage

Detection requirements

What the source says

Tagged by the source as

Detection logic

Log4j vulnerability exploit aka Log4Shell IP IOC

ATT&CK coverage

Detection requirements

What the source says

Tagged by the source as

Detection logic