Update azure_kubernetes_service_account_modified_or_deleted.yml

2021-08-08 15:12:04 -05:00
parent ed542fb931
commit f7e7be15ba
1 changed files with 4 additions and 0 deletions
@@ -6,6 +6,10 @@ status: experimental
 date: 2021/08/07
 references:
    - https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations#microsoftkubernetes
+    - https://www.microsoft.com/security/blog/2021/03/23/secure-containerized-environments-with-updated-threat-matrix-for-kubernetes/
+    - https://www.microsoft.com/security/blog/2020/04/02/attack-matrix-kubernetes/
+    - https://medium.com/mitre-engenuity/att-ck-for-containers-now-available-4c2359654bf1
+    - https://attack.mitre.org/matrices/enterprise/cloud/
 logsource:
  service: azure.activitylogs
 detection: