Kubernetes Secrets Access Attempt

nomit vyas@xoxo

•updated Jun 24, 2026•1•0•20

Detects network connections attempting to access Kubernetes API endpoints related to secrets. This could indicate an adversary trying to enumerate or exfiltrate sensitive credentials from a Kubernetes cluster.