litew

Detection of potentially safe log4j 1.x after manual mitigation

1

Version of log4j_detector: `log4j-detector-2021.12.20.jar` Hello, currently log4j-detector logs following lines after finding log4j 1.x files: ``` $ sha256sum ./log4j-1.1.3.jar 635d4be0003f9b24f560a7835db59fef04d1102bac75824c5f1c6ae48aa626a9 ./log4j-1.1.3.jar $ java -jar ./log4j-detector-2021.12.20.jar ./log4j-1.1.3.jar /home/litew/Downloads/log4j-1.1.3.jar contains Log4J-1.x Log4j...

Reported by lognormalizer app: ``` # lognormalizer -r /usr/local/etc/sagan-rules/normalization.rulebase liblognorm error: rulebase file /usr/local/etc/sagan-rules/normalization.rulebase[155]: invalid record type detected: 'rule ' ```