“Most of the appliances or systems that you're running in your business, in your enterprise, that use Log4j don't have a software bill of materials, SBOM, to tell you, this is the things that we are using, and Log4j is one of them.”

Transcript evidence from Guy Barhart-Magen -- Log4j and Incident Response.