Kubernetes Sensitive Object Access Activity

• Kubernetes Azure detect service accounts forbidden failure access :
  threat Azure AKS Kubernetes cluster 2024-11-14 version:4
  This search provides information on Kubernetes service accounts with failure or forbidden access status


• Kubernetes Azure detect sensitive object access :
  threat Azure AKS Kubernetes cluster 2024-11-14 version:4
  This search provides information on Kubernetes accounts accessing sensitve objects such as configmpas or secrets


• Kubernetes Azure detect suspicious kubectl calls :
  threat Azure AKS Kubernetes cluster 2024-11-14 version:4
  This search provides information on rare Kubectl calls with IP, verb namespace and object access context


• Kubernetes GCP detect service accounts forbidden failure access :
  threat GCP GKE Kubernetes cluster 2024-11-14 version:4
  This search provides information on Kubernetes service accounts with failure or forbidden access status, this search can be extended by using top or rare operators to find trends or rarities in failure status, user agents, source IPs and request URI


• AWS EKS Kubernetes cluster sensitive object access :
  threat AWS EKS Kubernetes cluster 2024-11-14 version:4
  This search provides information on Kubernetes accounts accessing sensitve objects such as configmaps or secrets


• Kubernetes GCP detect suspicious kubectl calls :
  threat GCP GKE Kubernetes cluster 2024-11-14 version:4
  This search provides information on anonymous Kubectl calls with IP, verb namespace and object access context


• Kubernetes AWS detect service accounts forbidden failure access :
  threat AWS EKS Kubernetes cluster 2024-11-14 version:4
  This search provides information on Kubernetes service accounts with failure or forbidden access status, this search can be extended by using top or rare operators to find trends or rarities in failure status, user agents, source IPs and request URI


• Kubernetes GCP detect sensitive object access :
  threat GCP GKE Kubernetes cluster 2024-11-14 version:4
  This search provides information on Kubernetes accounts accessing sensitve objects such as configmaps or secrets