Product
Elastic
- First Reported
- Dec 21, 2021
- Latest Reported
- May 10, 2022
Reported Context (2)
- examination, AFairfax’s only running process on the server was wsmprovhost.exe. If we take a look at our Elastic instance, which collects our logs, we see that it has detected that wsmprovhost has spawned a ‘whoami’. How to Evict an Attacker from Active Directory After Detection
- them. All types of software are affected: management software like vCenter, backend solutions like Elastic, Kafka, and even Minecraft. Locating and updating the software is crucial. Log4j Update: Patch Priority, Affected Versions and CVE-2021-44832
CVE (3)
Malware (2)
People (1)
Threat Actors (2)
MITRE ATT&CK (12)
Vendors (2)
Products (6)
Tools (7)
Countries (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.