Top attack vectors: December 2021

December 2021 SOC analysis found high-volume, active exploitation of the Apache Log4j zero-day alongside widespread use of Cobalt Strike beacons and a ransomware campaign pattern (BazarLoader → Cobalt Strike → Diavol); the report details incident investigations and containment, provides IOCs, and recommends urgent mitigations such as patching Log4j, validating EDR coverage, vulnerability scanning, and phishing defense.