Azure Kubernetes Events Deleted

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•24

Detects when events are deleted in Azure Kubernetes. An adversary may delete events in Azure Kubernetes in an attempt to evade detection by removing forensic evidence.