The log4shell blog
Practical write-ups on images, writing and everyday online tools.
Latest posts
12 Nov 2026
How to Preserve Evidence During a Web Security Triage
A practical guide to collecting logs safely before changing a suspected system, with a repeatable workflow, checks, and common mistakes to avoid.
9 Nov 2026
Log4Shell Incident Triage for Suspicious Domains Found in Java Logs
A strange domain appears in a Java application log. Minutes later, someone finds a DNS query for the same name. That deserves attention, but it does not yet tell you whether an att
16 Oct 2026
Auditing Mixed Java and JavaScript Stacks for Log4Shell Dependencies
Your Java service passes its dependency scan. The incident ticket closes. A week later, someone finds an older Log4j copy inside the deployed container, while the JavaScript client
28 Sep 2026
Beyond Log4Shell: Website Security Checks Worth Running
Log4Shell showed how one library can expose a site; regular external checks catch common weaknesses.