Kubernetes Client Accessing Multiple Secrets
Detects activity where one K8s client accesses many secrets in a short span. This could be indicative of Credential access, working towards Privilege Escalation.
Sigma

Detects activity where one K8s client accesses many secrets in a short span. This could be indicative of Credential access, working towards Privilege Escalation.

Already have an account?