cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1174
Views
0
Helpful
0
Replies

Endpoint IOC files for CVE-2021-44228 Log4Shell

vigleik
Level 1
Level 1

Anybody have OpenIOC files that are usable with Secure Endpoint, with MD5 checksums for vulnerable Log4j files?
The example below is not accepted when uploading "Enpoint IOC" to Cisco Secure Endpoint
https://github.com/mubix/CVE-2021-44228-Log4Shell-Hashes/blob/main/Log4J-MD5.ioc

I didn't find much help in recent documentation or from TAC on building compatible IOC files.

The customer does'nt have a license for Orbital.

 

0 Replies 0