Advice for Defenders Responding to the log4j Vulnerability CVE-2021-44228