Detection rules › By catalog entry

Kubernetes-validatingwebhookconfigurations

Catalog entry	Rules
create-validatingwebhookconfigurations	4
update-validatingwebhookconfigurations	3
patch-validatingwebhookconfigurations	3
delete-validatingwebhookconfigurations	2

create-validatingwebhookconfigurations

4 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Kubernetes Admission Controller Modification severity medium T1078,T1552,T1552.007

Elastic (2)

GKE Admission Webhook Created or Modified severity medium T1546,T1685
Kubernetes Admission Webhook Created or Modified severity medium T1546,T1685

Panther (1)

Kubernetes Admission Controller Webhook Created severity medium T1530,T1546,T1552

update-validatingwebhookconfigurations

3 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Kubernetes Admission Controller Modification severity medium T1078,T1552,T1552.007

Elastic (2)

GKE Admission Webhook Created or Modified severity medium T1546,T1685
Kubernetes Admission Webhook Created or Modified severity medium T1546,T1685

patch-validatingwebhookconfigurations

3 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Kubernetes Admission Controller Modification severity medium T1078,T1552,T1552.007

Elastic (2)

GKE Admission Webhook Created or Modified severity medium T1546,T1685
Kubernetes Admission Webhook Created or Modified severity medium T1546,T1685

delete-validatingwebhookconfigurations

2 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Kubernetes Admission Controller Modification severity medium T1078,T1552,T1552.007

Elastic (1)

Kubernetes Admission Webhook Created or Modified severity medium T1546,T1685

Back to all Kubernetes-validatingwebhookconfigurations catalog entries