Detection rules › By event

Kubernetes-events

Event	Rules
delete-events	3
deletecollection-events	1
any-events	1

delete-events

3 detection rules reference this event. View event page.

Sigma (1)

Kubernetes Events Deleted severity medium T1070

Elastic (2)

Azure AKS Kubernetes Events Deleted severity medium T1070
Kubernetes Events Deleted severity low T1070, T1070.004

deletecollection-events

1 detection rules reference this event. View event page.

Elastic (1)

Azure AKS Kubernetes Events Deleted severity medium T1070

any-events

1 detection rules reference this event. View event page.

Elastic (1)

Kubernetes Unusual Decision by User Agent severity low T1078