Detection rules › By event

Kubernetes-daemonsets

Event	Rules
get-daemonsets	1
list-daemonsets	1
watch-daemonsets	1
create-daemonsets	9
update-daemonsets	1
patch-daemonsets	5

get-daemonsets

1 detection rules reference this event. View event page.

Elastic (1)

Direct Interactive Kubernetes API Request by Unusual Utilities severity low T1059, T1059.004, T1069, T1087, T1609, T1610

list-daemonsets

1 detection rules reference this event. View event page.

Elastic (1)

Direct Interactive Kubernetes API Request by Unusual Utilities severity low T1059, T1059.004, T1069, T1087, T1609, T1610

watch-daemonsets

1 detection rules reference this event. View event page.

Elastic (1)

Direct Interactive Kubernetes API Request by Unusual Utilities severity low T1059, T1059.004, T1069, T1087, T1609, T1610

create-daemonsets

9 detection rules reference this event. View event page.

Elastic (5)

Direct Interactive Kubernetes API Request by Unusual Utilities severity low T1059, T1059.004, T1069, T1087, T1609, T1610
GKE Sensitive RBAC Change Followed by Workload Modification severity medium T1098, T1098.006
GKE Unusual Sensitive Workload Modification severity low T1098, T1098.006
Kubernetes Sensitive RBAC Change Followed by Workload Modification severity medium T1098, T1098.006
Unusual Kubernetes Sensitive Workload Modification severity low T1098, T1098.006

Splunk (1)

Kubernetes DaemonSet Deployed severity low T1204

Panther (3)

Kubernetes DaemonSet Created severity informational T1543, T1610
New DaemonSet Deployed to Kubernetes severity medium
New DaemonSet Deployed to Kubernetes

update-daemonsets

1 detection rules reference this event. View event page.

Elastic (1)

Direct Interactive Kubernetes API Request by Unusual Utilities severity low T1059, T1059.004, T1069, T1087, T1609, T1610

patch-daemonsets

5 detection rules reference this event. View event page.

Elastic (5)

Direct Interactive Kubernetes API Request by Unusual Utilities severity low T1059, T1059.004, T1069, T1087, T1609, T1610
GKE Sensitive RBAC Change Followed by Workload Modification severity medium T1098, T1098.006
GKE Unusual Sensitive Workload Modification severity low T1098, T1098.006
Kubernetes Sensitive RBAC Change Followed by Workload Modification severity medium T1098, T1098.006
Unusual Kubernetes Sensitive Workload Modification severity low T1098, T1098.006