Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
ATT&CK technique

T1053.007

Container Orchestration Job

ExecutionPersistencePrivilege Escalation 4 detections found
View on MITRE ATT&CK →

Detection rules

Source Rule Status Updated
elastic Kubernetes Sensitive Configuration File Activity production 2026-09-18
elastic Kubernetes Static Pod Manifest File Access production 2026-09-18
splunk Kubernetes Cron Job Creation production 2026-05-13
splunk Cisco Isovalent - Cron Job Creation production 2026-05-13