| elastic |
Application Removed from Blocklist in Google Workspace |
production |
2026-09-18 |
| elastic |
Google Workspace Drive Encryption Key(s) Accessed from Anonymous User |
production |
2026-09-18 |
| elastic |
Google Workspace Gmail Routing or Forwarding Rule Created or Modified |
production |
2026-09-18 |
| elastic |
Google Workspace Drive Data Transfer or Takeout Export Initiated |
production |
2026-09-18 |
| elastic |
GitHub Owner Role Granted To User |
production |
2026-09-18 |
| elastic |
New GitHub Personal Access Token (PAT) Added |
production |
2026-09-18 |
| elastic |
New GitHub Owner Added |
production |
2026-09-18 |
| elastic |
New GitHub Self Hosted Action Runner |
production |
2026-09-18 |
| elastic |
GitHub Actions Workflow Modification Blocked |
production |
2026-09-18 |
| elastic |
GitHub Actions Unusual Bot Push to Repository |
production |
2026-09-18 |
| elastic |
High Number of Protected Branch Force Pushes by User |
production |
2026-09-18 |
| elastic |
Several Failed Protected Branch Force Pushes by User |
production |
2026-09-18 |
| elastic |
High Number of Closed Pull Requests by User |
production |
2026-09-18 |
| elastic |
GitHub Repository Deleted |
production |
2026-09-18 |
| elastic |
Github Activity on a Private Repository from an Unusual IP |
production |
2026-09-18 |
| elastic |
GitHub Exfiltration via High Number of Repository Clones by User |
production |
2026-09-18 |
| elastic |
GitHub Private Repository Turned Public |
production |
2026-09-18 |
| elastic |
New GitHub App Installed |
production |
2026-09-18 |
| elastic |
GitHub UEBA - Multiple Alerts from a GitHub Account |
production |
2026-09-18 |
| elastic |
High Number of Cloned GitHub Repos From PAT |
production |
2026-09-18 |
| elastic |
GitHub Secret Scanning Disabled |
production |
2026-09-18 |
| elastic |
GitHub Protected Branch Settings Changed |
production |
2026-09-18 |
| elastic |
GKE Unusual Sensitive Workload Modification |
production |
2026-09-18 |
| elastic |
GKE Suspicious Assignment of Controller Service Account |
production |
2026-09-18 |
| elastic |
GKE Service Account Modified RBAC Objects |
production |
2026-09-18 |
| elastic |
GKE Sensitive RBAC Change Followed by Workload Modification |
production |
2026-09-18 |
| elastic |
GKE Pod Created with a Sensitive hostPath Volume |
production |
2026-09-18 |
| elastic |
GKE RBAC Wildcard Elevation on Existing Role |
production |
2026-09-18 |
| elastic |
GKE Privileged Pod Created |
production |
2026-09-18 |
| elastic |
GKE Pod Created With HostPID |
production |
2026-09-18 |
| elastic |
GKE Pod Created With HostNetwork |
production |
2026-09-18 |
| elastic |
GKE Pod Created With HostIPC |
production |
2026-09-18 |
| elastic |
GKE Container Created with Excessive Linux Capabilities |
production |
2026-09-18 |
| elastic |
GKE Ephemeral Container Added to Pod |
production |
2026-09-18 |
| elastic |
GKE Certificate Signing Request for Privileged Identity |
production |
2026-09-18 |
| elastic |
GKE Certificate Signing Request API Client Signer Requested |
production |
2026-09-18 |
| elastic |
GKE API Request Impersonating Privileged Identity |
production |
2026-09-18 |
| elastic |
GKE API Server Proxying Request to Kubelet |
production |
2026-09-18 |
| elastic |
GCP IAM Service Account Impersonation Role Granted |
production |
2026-09-18 |
| elastic |
GCP Service Account Creation |
production |
2026-09-18 |