security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[Deprecation] GCP Kubernetes Rolebindings Created or Patched (#2340)

Browse Source 
* Update privilege_escalation_gcp_kubernetes_rolebindings_created_or_patched.toml

Deprecating this rule due to high false positive rate. This behavior is too generic for an effective malicious behavior detection.

* move toml file to _deprecated

move toml file to _deprecated

Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>
This commit is contained in:
Isai
2022-11-09 12:51:52 -05:00
committed by GitHub
parent 29cf37eeec
commit 7adb199afa
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/integrations/gcp/privilege_escalation_gcp_kubernetes_rolebindings_created_or_patched.toml → rules/_deprecated/privilege_escalation_gcp_kubernetes_rolebindings_created_or_patched.toml
+3 -2
View File
@@ -1,9 +1,10 @@
[metadata]
creation_date = "2021/06/06"
maturity = "production"
maturity = "deprecated"
deprecation_date = "2022/10/04"
min_stack_comments = "New fields added: required_fields, related_integrations, setup"
min_stack_version = "8.3.0"
updated_date = "2022/08/24"
updated_date = "2022/10/04"
integration = "gcp"
[rule]