Detection rules › By catalog entry

Kubernetes-selfsubjectrulesreviews

Catalog entry	Rules
create-selfsubjectrulesreviews	5

create-selfsubjectrulesreviews

5 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

RBAC Permission Enumeration Attempt severity low T1069,T1069.003,T1087,T1087.004

Elastic (4)

Azure AKS Suspicious Self-Subject Review by Service Account or Node Identity severity low T1069,T1069.003,T1613
Direct Interactive Kubernetes API Request by Unusual Utilities severity low T1059,T1059.004,T1069,T1087,T1609,T1610
GKE Suspicious Self-Subject Review via Service Account severity low T1069,T1069.003,T1613
Kubernetes Suspicious Self-Subject Review via Unusual User Agent severity low T1069,T1069.003,T1613

Back to all Kubernetes-selfsubjectrulesreviews catalog entries