fix: add warning to query to find log4j vulnerabilities (#4070)

* fix: add warning to query to find log4j vulnerabilities

* Update docs/01-Using-Fleet/standard-query-library/standard-query-library.yml

Co-authored-by: Zach Wasserman <zach@fleetdm.com>

Co-authored-by: Zach Wasserman <zach@fleetdm.com>
This commit is contained in:
Kelvin Oghenerhoro Omereshone 2022-02-08 01:15:27 +01:00 committed by GitHub
parent 55ed92291a
commit 6e7c14faef
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -562,7 +562,7 @@ kind: query
spec:
name: Detect active processes with Log4j running
platforms: macOS, Linux
description: Returns a list of active processes and the Jar paths which are using Log4j. Version numbers are usually within the Jar filename.
description: Returns a list of active processes and the Jar paths which are using Log4j. Version numbers are usually within the Jar filename. Note: This query is resource intensive and has caused problems on systems with limited swap space. Test on some systems before running this widely.
query: |
WITH target_jars AS (
SELECT DISTINCT path