Detection rules › By event

Kubernetes-validatingwebhookconfigurations

Event	Rules
create-validatingwebhookconfigurations	4
update-validatingwebhookconfigurations	3
patch-validatingwebhookconfigurations	3
delete-validatingwebhookconfigurations	2

create-validatingwebhookconfigurations

4 detection rules reference this event. View event page.

Sigma (1)

Kubernetes Admission Controller Modification severity medium T1078, T1552, T1552.007

Elastic (2)

GKE Admission Webhook Created or Modified severity medium T1546, T1685
Kubernetes Admission Webhook Created or Modified severity medium T1546, T1685

Panther (1)

Kubernetes Admission Controller Webhook Created severity medium T1530, T1546, T1552

update-validatingwebhookconfigurations

3 detection rules reference this event. View event page.

Sigma (1)

Kubernetes Admission Controller Modification severity medium T1078, T1552, T1552.007

Elastic (2)

GKE Admission Webhook Created or Modified severity medium T1546, T1685
Kubernetes Admission Webhook Created or Modified severity medium T1546, T1685

patch-validatingwebhookconfigurations

3 detection rules reference this event. View event page.

Sigma (1)

Kubernetes Admission Controller Modification severity medium T1078, T1552, T1552.007

Elastic (2)

GKE Admission Webhook Created or Modified severity medium T1546, T1685
Kubernetes Admission Webhook Created or Modified severity medium T1546, T1685

delete-validatingwebhookconfigurations

2 detection rules reference this event. View event page.

Sigma (1)

Kubernetes Admission Controller Modification severity medium T1078, T1552, T1552.007

Elastic (1)

Kubernetes Admission Webhook Created or Modified severity medium T1546, T1685