Kubernetes Threat Hunting using API Server Audit Logs
Tags
Common Information
| Type | Value |
|---|---|
| UUID | 11474c9b-31f5-458a-82da-ece91a757a2c |
| Fingerprint | ae3adb913fb32785 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | April 15, 2025, 11:18 a.m. |
| Added to db | April 15, 2025, 2:09 p.m. |
| Last updated | April 17, 2025, 12:09 a.m. |
| Headline | Kubernetes Threat Hunting using API Server Audit Logs |
| Title | Kubernetes Threat Hunting using API Server Audit Logs |
| Detected Hints/Tags/Attributes | 121/2/14 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 158 | ✔ | Malware Analysis, News and Indicators - Latest topics | https://malware.news/latest.rss | 2024-08-30 22:08 |
| Details | 327 | ✔ | Logpoint | https://www.logpoint.com/en/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | MITRE ATT&CK Techniques | 226 | T1133 |
|
| Details | MITRE ATT&CK Techniques | 13 | T1609 |
|
| Details | MITRE ATT&CK Techniques | 19 | T1610 |
|
| Details | MITRE ATT&CK Techniques | 1 | T1053.007 |
|
| Details | MITRE ATT&CK Techniques | 6 | T1525 |
|
| Details | MITRE ATT&CK Techniques | 2 | T1098.006 |
|
| Details | MITRE ATT&CK Techniques | 16 | T1611 |
|
| Details | MITRE ATT&CK Techniques | 270 | T1070 |
|
| Details | MITRE ATT&CK Techniques | 406 | T1036 |
|
| Details | MITRE ATT&CK Techniques | 2 | T1552.007 |
|
| Details | MITRE ATT&CK Techniques | 49 | T1528 |
|
| Details | MITRE ATT&CK Techniques | 5 | T1613 |
|
| Details | MITRE ATT&CK Techniques | 29 | T1557 |
|
| Details | MITRE ATT&CK Techniques | 115 | T1485 |