Azure Kubernetes CronJob or Job Creation/Modification

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•28

Identifies when an Azure Kubernetes CronJob or Job is created or modified in Azure Cloud. Adversaries may use Kubernetes CronJobs or Jobs for scheduling execution of malicious code that would run as a container in the cluster, establishing persistence or executing malicious tasks.