Graylog

Reported Context (2)

Graylog. Available as open source and commercial editions. Guide Compares Log Analysis Tools and Demonstrates a LogTotal Investigation Workflow
The operator got execution on at least two hosts. The one we document in full was a Graylog logging server, and its Elasticsearch cluster held 6.8 million documents belonging to Ukraine’s state data-exchange platform. Research Details Graylog Log4Shell Activity Against Ukrainian Data-Exchange Systems

CVE (2)

MITRE ATT&CK (9)

Vendors (2)

Products (15)

Tools (4)

Industries (1)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.