CVE-2022-26134 | Detection.FYI

Confluence Exploit Activity on Webserver Logs

Jul 13, 2022 · attack.t1190 ·
Share on:

Detection for Confluence server activity found on webserver logs

Read More

Recent Posts

Suspicious Creation of .library-ms File — Potential CVE-2025-24054 Exploit
Potential PowerShell Console History Access Attempt via History File
Potential ClickFix Execution Pattern - Registry
Remote Access Tool - TacticalRMM Agent Registration to Potentially Attacker-Controlled Server
Potential Exploitation of CrushFTP RCE Vulnerability (CVE-2025-54309)
FunkLocker Ransomware File Creation
Registry Manipulation via WMI Stdregprov
Regsvr32 DLL Execution With Suspicious File Extension

Language

SIGMA 3922 ELASTIC 1483 MQL 719

Tags

RESOURCES-INVESTIGATION-GUIDE 1407 ATTACK.DEFENSE-EVASION 1311 USE-CASE-THREAT-DETECTION 1047 DOMAIN-ENDPOINT 911 ATTACK.EXECUTION 865 DATA-SOURCE-ELASTIC-DEFEND 745 ATTACK.PERSISTENCE 586 OS-WINDOWS 494 DATA-SOURCE-ELASTIC-ENDGAME 428 DETECTION.EMERGING-THREATS 393 ATTACK.PRIVILEGE-ESCALATION 390 TACTIC-DEFENSE-EVASION 377 OS-LINUX 375 DATA-SOURCE-SENTINELONE 367