Detection rules › By catalog entry

Kubernetes-selfsubjectaccessreviews

Catalog entry	Rules
create-selfsubjectaccessreviews	4

create-selfsubjectaccessreviews

4 detection rules reference this catalog entry. View catalog entry.

Elastic (4)

Azure AKS Suspicious Self-Subject Review by Service Account or Node Identity severity low T1069,T1069.003,T1613
Direct Interactive Kubernetes API Request by Unusual Utilities severity low T1059,T1059.004,T1069,T1087,T1609,T1610
GKE Suspicious Self-Subject Review via Service Account severity low T1069,T1069.003,T1613
Kubernetes Suspicious Self-Subject Review via Unusual User Agent severity low T1069,T1069.003,T1613

Back to all Kubernetes-selfsubjectaccessreviews catalog entries