What do you need to know about the log4j (Log4Shell) vulnerability?

What do you need to know about the log4j (Log4Shell) vulnerability?

Channel:
United States SANS Cyber Defense
Subscribers:
23,600
Published on ● Video Link: https://www.youtube.com/watch?v=496R1c7ENVs


Category:
Vlog
Duration: 44:55
4,477 views
77

A Remote Code Execution (RCE) vulnerability in the popular log4j library was published yesterday.

While any RCE vulnerability sounds bad, this one is particularly nasty because it affects absolutely any application (server and client-side) that uses a vulnerable version of the log4j library.

In this live stream, we'll go over exploitation details and will see what blue teams can do to detect the attack and protect their environments.

Access slides and other details here:
https://www.sans.org/blog/what-do-you-need-to-know-about-the-log4j-log4shell-vulnerability/

#cyber #cybersecurity #vulnerabilities #log4j #rce #remotecodeexecution #blueteaming #blueteam #blueteams #cyberattack



Other Videos By SANS Cyber Defense


2022-03-17Lifting the Fog: Exploring Maritime OSINT
2022-03-11Visualizing TensorFlow Models: Part II
2022-03-04SOC Alert Tuning and False Positive Reduction: Setting Yourself Up for Success
2022-03-03Defenders: What to do NOW if expecting nation state attackers
2022-02-18Visualizing TensorFlow Models: Part I
2022-02-04Visualizing TensorFlow Models: Part 1
2022-01-21Visualizing How CNNs See Images
2022-01-21PowerShell 2022: State of the Art / Hack / Infection
2022-01-14All-Around Defenders: New Year, New Start
2022-01-07Applying DS/ML to Forensics and Incident Response: An Interview with Jess Garcia
2021-12-13What do you need to know about the log4j (Log4Shell) vulnerability?
2021-11-22Get to Know SANS Instructor and SEC586 Course Author Josh Johnson
2021-11-22Bringing the Sexy Back to Blue Team, with Eric Conrad and Seth Misener
2021-11-17Modern Authentication for the Security Admin
2021-11-15DeTT&CT(ing) Kubernetes ATT&CK(s) with Audit Logs
2021-11-13Ransomware Preparation, Containment and Recovery Strategies
2021-11-12Building on the Foundations of OSINT with SEC587: Advanced Open-Source Intelligence
2021-11-12AI & ML in the Modern SOC
2021-11-11YARA for Mere Mortals
2021-11-09Threat Sightings: The Power of Observation for Driving Cyber Threat Detection Improvements
2021-11-07Blue-Team-as-Code: Lessons From Real-world Red Team Detection Automation Using Logs


Tags:
log4j
log4j vulnerability
log4j exploit
log4j vulnerability explained
log4j exploit explained
Log4Shell
log4shell vulnerability
log4shell explained