Suspicious Tomcat Confluence Process Launch
The query checks for suspicious Tomcat process launches associated with likely exploitation of Confluence - CVE-2022-26134 Read more here:. https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html https://nvd.nist.gov/vuln/detail/CVE-2022-26134 Tags: #exploit #CVE-2022-26134
Microsoft Sentinel (KQL)
