Kubernetes Secrets Enumeration via API Server

nomit vyas@xoxo

•updated Jun 24, 2026•0•0•6

Detects attempts to list, read, create, update, or delete Kubernetes secrets via the Kubernetes API server. This activity can indicate an adversary attempting to gain access to sensitive information or manipulate the environment.