A collection of intelligence about Log4Shell and its exploitation activity.
☆181Mar 4, 2022Updated 4 years ago
Alternatives and similar repositories for Log4Shell-IOCs
Users that are interested in Log4Shell-IOCs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆22Dec 22, 2020Updated 5 years ago
- A MITRE ATT&CK Lookup Tool☆46Apr 25, 2024Updated 2 years ago
- ☆97Apr 8, 2026Updated 4 months ago
- Hashes for vulnerable LOG4J versions☆155Dec 17, 2021Updated 4 years ago
- IP addresses exploiting recent log4j2 vulnerability CVE-2021-44228☆15Dec 19, 2021Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A community sourced list of log4j-affected software☆1,124Nov 9, 2022Updated 3 years ago
- Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228☆149Dec 20, 2021Updated 4 years ago
- Threat Box Assessment Tool☆20Mar 5, 2026Updated 5 months ago
- #ThreatHunting #DFIR #Malware #Detection Mind Maps☆308Nov 13, 2021Updated 4 years ago
- Operational information regarding the log4shell vulnerabilities in the Log4j logging library.☆1,883Jun 15, 2022Updated 4 years ago
- This repository contains analysis scripts, YARA rules, and additional IoCs related to our Telekom Security blog posts.☆122Mar 4, 2026Updated 5 months ago
- IOC from articles, tweets for archives☆318Dec 12, 2023Updated 2 years ago
- Rip Raw is a small tool to analyse the memory of compromised Linux systems.☆133Jan 31, 2022Updated 4 years ago
- An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.☆343Dec 3, 2025Updated 8 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Unpacking and decryption tools for the Emotet malware☆44Dec 5, 2021Updated 4 years ago
- ☆508Oct 7, 2024Updated last year
- Detector for Log4Shell exploitation attempts☆725Feb 12, 2022Updated 4 years ago
- Sophos-originated indicators-of-compromise from published reports☆668Jul 28, 2026Updated 2 weeks ago
- Tools for hunting for threats.☆619Jul 15, 2026Updated 3 weeks ago
- BlackBerry Threat Research & Intelligence☆100Oct 20, 2023Updated 2 years ago
- The Threat Hunting In Rapid Iterations (THIRI) Jupyter notebook is designed as a research aide to let you rapidly prototype threat huntin…☆154Apr 25, 2022Updated 4 years ago
- Repository of public reference frameworks for the DFIR community.☆122Jul 4, 2023Updated 3 years ago
- Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for…☆935Jun 26, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Russia / Ukraine 2022 conflict related IOCs from CERT Orange Cyberdefense Threat Intelligence Datalake☆174Dec 9, 2022Updated 3 years ago
- ShellSweeping the evil.☆53Jun 18, 2024Updated 2 years ago
- ☆45Jul 11, 2025Updated last year
- TweetFeed collects Indicators of Compromise (IOCs) shared by the infosec community at Twitter. Here you will find malicious URLs, domains…☆671Updated this week
- Indicators of Normality☆11Jul 22, 2022Updated 4 years ago
- Detection Ideas & Rules repository.☆179Sep 10, 2021Updated 4 years ago
- Configuration Extractor for BlackCat Ransomware☆29Mar 18, 2022Updated 4 years ago
- ☆130Jan 29, 2024Updated 2 years ago
- Practical Information Sharing between Law Enforcement and CSIRT communities using MISP☆36Sep 18, 2023Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- An extendable tool to extract and aggregate IoCs from threat feeds☆33Feb 6, 2024Updated 2 years ago
- ☆33Feb 26, 2022Updated 4 years ago
- A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...☆141Nov 19, 2023Updated 2 years ago
- Collection of Event ID ressources useful for Digital Forensics and Incident Response☆662Jun 19, 2024Updated 2 years ago
- PCRE RegEx matching Log4Shell CVE-2021-44228 IOC in your logs☆291Dec 21, 2021Updated 4 years ago
- Signatures and IoCs from public Volexity blog posts.☆369Jul 17, 2026Updated 3 weeks ago
- Various code samples and useful tips and tricks from reverse engineering and malware analysis fields.☆107Jun 11, 2025Updated last year