The signature triggered on the creation of the webshell files, of which we observed the following file written:  /usr/local/tomcat/work/Catalina/localhost/ROOT/org/apache/jsp/shell_jsp.java /usr/local/tomcat/webapps/ROOT/shell_.jsp  SpringShell is officially assigned CVE-2022-22965, and the patch was released on March 31, 2022.