Unexpected JSP File Written Under PSEMHUB.war

Daniel Jeremiah@daniyyell

•updated Jun 19, 2026•1•0•5

Detects the creation, modification, or renaming of a JSP file within the 'PSEMHUB.war' directory. This activity can indicate the deployment of a web shell or other malicious code within the PeopleSoft PSEMHUB web application, often associated with server compromise.