Update azure_kubernetes_events_deleted.yml
This commit is contained in:
@@ -6,7 +6,7 @@ status: experimental
|
||||
date: 2021/07/24
|
||||
references:
|
||||
- https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations#microsoftkubernetes
|
||||
- https://github.com/elastic/detection-rules/blob/da3852b681cf1a33898b1535892eab1f3a76177a/rules/integrations/azure/defense_evasion_kubernetes_events_deleted.toml
|
||||
- https://github.com/elastic/detection-rules/blob/da3852b681cf1a33898b1535892eab1f3a76177a/rules/integrations/azure/defense_evasion_kubernetes_events_deleted.toml
|
||||
logsource:
|
||||
service: azure.activitylogs
|
||||
detection:
|
||||
|
||||
Reference in New Issue
Block a user