Log4j and Beyond - Go Tanium Tech Talks #33
The initial shock of Log4j is over, but the work is far from over. Hear stories of how and what we're finding in the field, and then review best practices to monitor for future threats ...beyond Log4j.
In this episode we interview a Tanium father and son duo to cover tales from the trenches in the current Log4j investigations, and then how we can learn from this and other examples to be prepared for the on-going impact of Log4j/Log4Shell.
Find the answer to these Log4j questions and more:
*SQL Server install gotcha!
*How do I prioritize the massive findings?
*What tools are proving most helpful?
*How do you know when you're done?
*What if someone restores a backup or uses a stale gold image?
*How long do we have to keep this up?
CHAPTERS
0:00 Intro
0:31 Welcome back
1:18 Father & son intros
3:15 Observations around Log4j in the trenches
6:00 SQL Server Log4j surprise
7:45 Prioritizing large numbers of findings using Interact queries
10:15 Tanium Map to find Log4j and network connections
11:25 What about helper scripts at scale?
15:43 Flow chart for tactically tagging machines for remediation
17:54 Reveal hits confirmed with file path
19:43 Beyond Log4j - past, present, future
22:00 Log4j v1 end of life still here
22:27 Beyond Log4j - open source risk, looking inside files
25:45 Advice to security teams
27:20 Reveal vs DLP
28:10 Wrapping up
29:00 Tanium resources to help with Log4j
BONUS RESOURCES
[INFO] Tanium Log4j resources: https://www.tanium.com/log4j
[VIDEO] Tanium Reveal to find Log4j • Go-Tanium Tech Talks | Episode 31: "T...
[DOCS] Reveal user guide https://docs.tanium.com/reveal/reveal...
[LINKS] Reveal Central community hub https://community.tanium.com/s/reveal...
[STEP-BY-STEP] Community: How Tanium Can Help with CVE-2021-44228: Log4Shell https://community.tanium.com/s/articl...
[VIDEO] Log4j Vulnerability: How Tanium Can Help • Log4j Vulnerability: How Tanium Can Help
[VIDEO] Go-Tanium Endpoint Explorers | Episode 8: Log4j and How to Secure an Enterprise • Video
[DEV/TECHNICAL] Tanium Reveal: A Federated Search Engine for Querying Unstructured File Data on Large Enterprise Networks • Industry 2025
Follow the latest CVEs and solutions on the Tanium Emerging Issues Blog: https://bit.ly/TaniumEIB
Find links to like and subscribe the Tanium Podcast, YouTube, and Twitch shows here: http://bit.ly/Go-Tanium-Show
Interact with the host and guests of the show on the Go-Tanium discussion board: http://bit.ly/Go-Tanium-Discussions
View other episodes: http://bit.ly/Go-Tanium-Episodes
Customer-only Endpoint Security discussion group: http://bit.ly/Tanium-ES-Group
Customer-only Endpoint Management discussion group: http://bit.ly/Tanium-EM-Group
#Log4j #Log4Shell #CyberSecurity #InformationTechnology #Tanium