Log4J - Local checks to find Log4J on individual computers

This document collects suggestions on ways to check individual computers for the presence of Log4J.

Note: Cybersecurity is providing this information "as is." We have not assessed the effectiveness or safety of any scanners or scripts. Use at your own risk.

Scanners/Scripts:

CERT Coordination Center scanner:

Back2Root Log4shell-rex:

LunaSec scanner:

Operating Systems:

Searching the filesystem on Linux or macOS:

find / -name 'log4j*.jar' -ls
find / -type f -name '*log4j*'
find / -type f | fgrep -i log4j
locate -i log4j

For Windows using PowerShell:
Get-WmiObject Win32_Process | Select-Object CommandLine | findstr log4j




Keywords:log4j individual computers package manager   Doc ID:115273
Owner:Allen M.Group:Office of Cybersecurity
Created:2021-12-15 17:46 CDTUpdated:2021-12-16 17:36 CDT
Sites:DoIT Help Desk, Office of Cybersecurity
Feedback:  0   0