Detections

CISA KEV additions: Cisco Secure Firewall Management Center and Oracle PeopleSoft exploitation

Template: Oracle PeopleSoft Environment Management Hub (PSEMHUB) endpoint access

spl · template

index=web uri_path="*PSEMHUB*" | stats count min(_time) as first_seen max(_time) as last_seen dc(src) as unique_sources values(src) as sources by uri_path, status

Template: Oracle PeopleSoft Environment Management Hub (PSEMHUB) endpoint access

kql · template

WebAccessLogs | where UrlPath contains "PSEMHUB" | project TimeGenerated, SrcIp, UrlPath, HttpStatus, UserAgent