Vulnerability Installation Instructions

Minimum Version

This DEX Pack requires SysTrack version 10.1 or higher.

Import Kit

In the Kits page:

1. Click Select Kit File and import the DEX Pack kit file

2. Click on the Download link under setup instructions to download the instructions

3. Extract the setup zip file

Import Vulnerability Role

This solution requires you to assign the SF_Vulnerability Role to the relevant Configurations:

1. Navigate to Configure > Configurations

2. Click the padlock icon in the upper-right to enable editing

3. Use the drop-down at the top to select a relevant Configuration, or create a new Configuration

4. Assign the SF_Vulnerability Role to the Configuration by dragging it from Available Roles to Assigned Roles

5. Click Save Changes at the top-right

6. Repeat this process for any other relevant Configurations

Enable Collection Extensions

1. In Configure, click Collection Extensions on the left

2. Click the Action Governance tab at the top

3. Find log4j in the list and check the Enabled box for both

4. Click Save Changes at the top right

Create Vulnerability View

This DEX Pack requires you to make a View for the relevant SF_Log4j Role.

To create the new View:

1. Navigate to the SysTrack Launch page

2. Go to Configure > Views

3. Click the padlock icon in the upper-right to enable editing

4. Click the plus icon to add a new View

5. Fill in the Settings as follows or follow them as per the screenshot from the kit

   1. View Name: SF_Log4j

   2. Existing Category: General

   3. Expires in: 30 Days

   4. When Expired: Override Data

   5. Do NOT check “When overdue by 1 day (s)”

6. Set the Refresh drop-downs to Daily, Inside, 24x7, and “Every Day”

7. 1. Copy this SQL query, and paste it into the box under SQL Selection > Generic .

8. Create View at the top-right

SF_Log4j SQL Query

T0.WGUID,
	GETUTCDATE() AS VWTIME,
	Add_Date AS RunTime,
	S0.STRVALUE AS FULLPATH
FROM DYNI_log4j AS T0
INNER JOIN SASTR_DYN AS S0 ON T0.FullName = S0.STRINGID

Enable View in Roles

1. Navigate to Configure > Roles

2. Select SF_Vulnerability from the drop down at the top

3. Click the Views tab in the center of the page

4. Check the Enable box for SF_log4j in the list

5. Click Save Changes at the top right