@caipingcba  Even tho not available in the WebUI you can configure "custom parameters" withing the database. This information is then published in the BeaconConfig.xml. With the configuration update the agents then retrieve this information. In the case of the example a a registry key (windows) will be written as  "CTrackerIncludeFile"  with the Value "log4j-core-*.jar"  This will lead to the same result as all the other options. It just has little manual effort, since the agents update themself with the new config. This also works for UX based agents. The information is just stored in the config file, since there is no registry. ... View more

Very nice summary! Is there any reason for the specification of "log4j-core-%.jar" instead of "log4j%.jar" or was that just an example? Because I scanned just for the jar extention and the results, after filtering on both options differ both in the quantity of files and in the number of devices on which something was found. Looking at the CVE article I think "-core" was just used as an example. ... View more