Search results

[New Rule] Kubectl Network Configuration Modification

backport: auto

container

Domain: Endpoint

OS: Linux

Rule: NewProposal for new ruleProposal for new rule

Team: TRADE

Status: Open (in progress).

elastic/detection-rulesnumber 4836

#4836 In elastic/detection-rules;

· Aegrah opened on Jun 19, 2025

[New BBR] Kubectl Configuration Discovery

backport: auto

bbrBuilding Block RulesBuilding Block Rules

container

OS: Linux

Rule: NewProposal for new ruleProposal for new rule

Team: TRADE

Status: Open (in progress).

elastic/detection-rulesnumber 4835

#4835 In elastic/detection-rules;

· Aegrah opened on Jun 19, 2025

[New Rule] Kubectl Secret Access

container

OS: Linux

Rule: NewProposal for new ruleProposal for new rule

Team: TRADE

Status: Draft (not ready).

elastic/detection-rulesnumber 4834

#4834 In elastic/detection-rules;

· Aegrah opened on Jun 19, 2025

[New Rule] Potential Impersonation Attempt via Kubectl

backport: auto

container

Domain: Endpoint

OS: Linux

Rule: NewProposal for new ruleProposal for new rule

Team: TRADE

Status: Open (in progress).

elastic/detection-rulesnumber 4833

#4833 In elastic/detection-rules;

· Aegrah opened on Jun 19, 2025

[New Rule] Potential Kubectl Masquerading

backport: auto

container

Domain: Endpoint

OS: Linux

Rule: NewProposal for new ruleProposal for new rule

Team: TRADE

Status: Open (in progress).

elastic/detection-rulesnumber 4832

#4832 In elastic/detection-rules;

· Aegrah opened on Jun 19, 2025

[Rule Tuning] Added Kubernetes Domain Tag

backport: auto

container

Domain: Endpoint

OS: Linux

Rule: Tuningtweaking or tuning an existing ruletweaking or tuning an existing rule

Team: TRADE

Status: Open (in progress).

elastic/detection-rulesnumber 4831

#4831 In elastic/detection-rules;

· Aegrah opened on Jun 19, 2025

[New BBR] Kubectl Workload and Cluster Discovery

backport: auto

bbrBuilding Block RulesBuilding Block Rules

container

OS: Linux

Rule: NewProposal for new ruleProposal for new rule

Team: TRADE

Status: Open (in progress).

elastic/detection-rulesnumber 4830

#4830 In elastic/detection-rules;

· Aegrah opened on Jun 19, 2025

[Rule Tuning] Sharpening Kubernetes Rules Indices

backport: auto

container

OS: Linux

Rule: Tuningtweaking or tuning an existing ruletweaking or tuning an existing rule

Team: TRADE

Status: Open (in progress).

elastic/detection-rulesnumber 4822

#4822 In elastic/detection-rules;

· Aegrah opened on Jun 18, 2025