6.22.md

6.22 - Any remote IP addresses attemting to exploit Log4j 2 vulnerability?

List top remote IP addresses most frequently attempting to exploit "Log4j 2" vulnerability against any of your internet-facing applications sitting behind HTTP(S) Load Balancer.

Category: Network Activity
Use Cases: Detect
Data Sources: HTTP(S) LB Logs

Queries or Rules

BigQuery	Chronicle	Log Analytics
SQL	YARA-L	Contribute query

Event Generation

No event generation steps provided. Contribute emulation test to this use case.

Sample Event

No log samples provided. Contribute log samples to this use case.