Can Defender for Endpoint detect JNDI Lookup workaround

[stmarko]

Hi,

can Defender for Endpoint detect, that JNDI lookup workaround was implemented on log4j library ?

Will venerability disappear in venerability dashboard or device software inventory when  JNDI lookup workaround is implemented ?

[#2]

Here ya go:
https://www.microsoft.com/security/blog/2021/12/11/guidance-for-preventing-detecting-and-hunting-for...

[#3]

@David_Caddick 

Hi David, I think this Mitigation status works only when you click on Mitigation option in Defender and

Defender agent applies the JNDL lookup workaround.

My question was, can Defender detect when JNDL Lookup workaround is performed manually by server admins. 

[#4]

@stmarko 

 I have the same question: if the JNDILookup class is manually removed, will Defender pick that up?