New Kubernetes Service Account Created

SigmaHQ Detections@sigmaHQ

•updated May 20, 2025•0•0•0

Detects creation of new Kubernetes service account, which could indicate an attacker's attempt to persist within a cluster.