WebLogic or Java Process Spawning an Operating System Shell
Detects Java or WebLogic processes spawning command interpreters on an application server, which may indicate successful remote code execution.
Microsoft Sentinel (KQL)

Detects Java or WebLogic processes spawning command interpreters on an application server, which may indicate successful remote code execution.

Already have an account?