Kubernetes Events Deleted

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•3

Detects when events are deleted in Kubernetes. An adversary may delete Kubernetes events in an attempt to evade detection.