Kubernetes Audit Event Deletion
Detects deletion of Kubernetes events in audit logs when the request completes successfully. Adversaries may delete events to impair defenses and cover tracks (defense evasion).
Sigma
Detects deletion of Kubernetes events in audit logs when the request completes successfully. Adversaries may delete events to impair defenses and cover tracks (defense evasion).
Already have an account?