Ruben Groenewoud ac57818efb [Rule Tuning] Kubernetes User Exec into Pod (#4814)

2025-06-17 14:02:29 +02:00

..

discovery_denied_service_account_request.toml

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

discovery_suspicious_self_subject_review.toml

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

execution_user_exec_to_pod.toml

[Rule Tuning] Kubernetes User Exec into Pod (#4814)

2025-06-17 14:02:29 +02:00

initial_access_anonymous_request_authorized.toml

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

persistence_exposed_service_created_with_type_nodeport.toml

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

privilege_escalation_container_created_with_excessive_linux_capabilities.toml

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

privilege_escalation_pod_created_with_hostipc.toml

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

privilege_escalation_pod_created_with_hostnetwork.toml

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

privilege_escalation_pod_created_with_hostpid.toml

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

privilege_escalation_pod_created_with_sensitive_hostpath_volume.toml

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

privilege_escalation_privileged_pod_created.toml

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00

privilege_escalation_suspicious_assignment_of_controller_service_account.toml

[FR] Generate investigation guides (#4358)

2025-01-22 11:17:38 -06:00