Detection rules › By event

Kubernetes-selfsubjectrulesreviews

Event	Rules
create-selfsubjectrulesreviews	5

create-selfsubjectrulesreviews

5 detection rules reference this event. View event page.

Sigma (1)

RBAC Permission Enumeration Attempt severity low T1069, T1069.003, T1087, T1087.004

Elastic (4)

Azure AKS Suspicious Self-Subject Review by Service Account or Node Identity severity low T1069, T1069.003, T1613
Direct Interactive Kubernetes API Request by Unusual Utilities severity low T1059, T1059.004, T1069, T1087, T1609, T1610
GKE Suspicious Self-Subject Review via Service Account severity low T1069, T1069.003, T1613
Kubernetes Suspicious Self-Subject Review via Unusual User Agent severity low T1069, T1069.003, T1613