RondoDox Log4Shell CVE-2021-44228 JNDI Exploitation with java.exe Child Process

Ibrahim Saud@tektrix

•updated Jun 25, 2026•0•0•9

Detects Log4Shell JNDI exploitation attempts by scanning incoming network request data for JNDI patterns and simultaneously monitors for suspicious shell child processes (cmd, powershell, bash, sh) spawned by java.exe, indicating post-exploitation activity.