Ruben Groenewoud 9f46d5b496 [New Rule] Kubernetes Unusual Decision by User Agent (#4829) ...

* [New Rule] Kubernetes Unusual Request Response by User Agent

* ++

* Update execution_unusual_request_response_by_user_agent.toml

* Update rules/integrations/kubernetes/execution_unusual_request_response_by_user_agent.toml

* Update execution_unusual_request_response_by_user_agent.toml

* Update rules/integrations/kubernetes/execution_unusual_request_response_by_user_agent.toml

2025-07-18 09:44:02 +02:00

..

defense_evasion_events_deleted.toml

Add investigation guides for detection rules (#4886)

2025-07-08 00:25:42 +05:30

discovery_denied_service_account_request.toml

[Rule Tuning] Sharpening Kubernetes Rules Indices (#4822)

2025-06-24 14:11:31 +02:00

discovery_suspicious_self_subject_review.toml

[Rule Tuning] Sharpening Kubernetes Rules Indices (#4822)

2025-06-24 14:11:31 +02:00

execution_forbidden_creation_request.toml

Add investigation guides for detection rules (#4886)

2025-07-08 00:25:42 +05:30

execution_forbidden_request_from_unsual_user_agent.toml

Add investigation guides for detection rules (#4886)

2025-07-08 00:25:42 +05:30

execution_unusual_request_response_by_user_agent.toml

[New Rule] Kubernetes Unusual Decision by User Agent (#4829)

2025-07-18 09:44:02 +02:00

execution_user_exec_to_pod.toml

[Rule Tuning] Sharpening Kubernetes Rules Indices (#4822)

2025-06-24 14:11:31 +02:00

initial_access_anonymous_request_authorized.toml

[Rule Tuning] Sharpening Kubernetes Rules Indices (#4822)

2025-06-24 14:11:31 +02:00

persistence_exposed_service_created_with_type_nodeport.toml

[Rule Tuning] Sharpening Kubernetes Rules Indices (#4822)

2025-06-24 14:11:31 +02:00

privilege_escalation_container_created_with_excessive_linux_capabilities.toml

[Rule Tuning] Sharpening Kubernetes Rules Indices (#4822)

2025-06-24 14:11:31 +02:00

privilege_escalation_pod_created_with_hostipc.toml

[Rule Tuning] Sharpening Kubernetes Rules Indices (#4822)

2025-06-24 14:11:31 +02:00

privilege_escalation_pod_created_with_hostnetwork.toml

[Rule Tuning] Sharpening Kubernetes Rules Indices (#4822)

2025-06-24 14:11:31 +02:00

privilege_escalation_pod_created_with_hostpid.toml

[Rule Tuning] Sharpening Kubernetes Rules Indices (#4822)

2025-06-24 14:11:31 +02:00

privilege_escalation_pod_created_with_sensitive_hostpath_volume.toml

[Rule Tuning] Sharpening Kubernetes Rules Indices (#4822)

2025-06-24 14:11:31 +02:00

privilege_escalation_privileged_pod_created.toml

[Rule Tuning] Sharpening Kubernetes Rules Indices (#4822)

2025-06-24 14:11:31 +02:00

privilege_escalation_suspicious_assignment_of_controller_service_account.toml

[Rule Tuning] Sharpening Kubernetes Rules Indices (#4822)

2025-06-24 14:11:31 +02:00