6.22.md

6.22 - Any remote IP addresses attempting to exploit Log4j 2 vulnerability?

List top remote IP addresses most frequently attempting to exploit "Log4j 2" vulnerability against any of your internet-facing applications sitting behind HTTP(S) Load Balancer.

Category: Network Activity
Use Cases: Detect
Data Sources: HTTP(S) LB Logs

Queries or Rules

BigQuery	Log Analytics	Google SecOps
SQL	Contribute query	YARA-L

Event Generation

No event generation steps provided. Contribute emulation test to this use case.

Sample Event

No log samples provided. Contribute log samples to this use case.