Kubernetes Audit Log Detections: 8 Rules We Tested
Eight detection rules for the Kubernetes audit log, written as jq filters and mapped to MITRE ATT&CK: exec and debug sessions, pods asking for host …
Tag
Audit Logging
Kubernetes Audit Policy: What to Log, at What Level
A Kubernetes audit policy decides which API requests kube-apiserver records and how much of each it keeps. The first matching rule wins, so one …