| elastic |
AWS EKS Service Account Modified RBAC Objects |
production |
2026-10-21 |
| elastic |
AWS EKS Sensitive RBAC Change Followed by Workload Modification |
production |
2026-10-21 |
| elastic |
AWS EKS Unusual Kubernetes Sensitive Workload Modification |
production |
2026-10-21 |
| elastic |
AWS EKS Cluster-Admin Role Binding Created |
production |
2026-10-21 |
| elastic |
AWS EKS Creation or Modification of Sensitive Role |
production |
2026-10-21 |
| elastic |
AWS EKS Creation of a RoleBinding Referencing a ServiceAccount |
production |
2026-10-21 |
| elastic |
AWS EKS RBAC Wildcard Elevation on Existing Role |
production |
2026-10-20 |
| elastic |
AWS EKS Client Certificate Signing Request Created or Approved |
production |
2026-10-09 |
| elastic |
AWS EKS Authentication Configuration Modified |
production |
2026-10-09 |
| elastic |
GKE Certificate Signing Request API Client Signer Requested |
production |
2026-09-18 |
| elastic |
GKE Certificate Signing Request for Privileged Identity |
production |
2026-09-18 |
| elastic |
GKE RBAC Wildcard Elevation on Existing Role |
production |
2026-09-18 |
| elastic |
GKE Sensitive RBAC Change Followed by Workload Modification |
production |
2026-09-18 |
| elastic |
GKE Service Account Modified RBAC Objects |
production |
2026-09-18 |
| elastic |
GKE Unusual Sensitive Workload Modification |
production |
2026-09-18 |
| elastic |
Kubernetes Cluster-Admin Role Binding Created |
production |
2026-09-18 |
| elastic |
AWS EKS Access Entry Created Then Deleted by Same Identity |
production |
2026-09-18 |
| elastic |
EKS Authentication Configuration Modified |
production |
2026-09-18 |
| elastic |
Kubernetes Creation or Modification of Sensitive Role |
production |
2026-09-18 |
| elastic |
Kubernetes Creation of a RoleBinding Referencing a ServiceAccount |
production |
2026-09-18 |
| elastic |
Kubernetes RBAC Wildcard Elevation on Existing Role |
production |
2026-09-18 |
| elastic |
Kubernetes Sensitive RBAC Change Followed by Workload Modification |
production |
2026-09-18 |
| elastic |
Unusual Kubernetes Sensitive Workload Modification |
production |
2026-09-18 |
| elastic |
Kubernetes Service Account Modified RBAC Objects |
production |
2026-09-18 |
| elastic |
Kubernetes Client Certificate Signing Request Created or Approved |
production |
2026-09-18 |
| elastic |
AWS EKS Access Entry Modified |
production |
2026-09-18 |
| elastic |
AWS EKS Access Entry Granted Cluster Admin Policy |
production |
2026-09-18 |
| elastic |
Azure Kubernetes Services (AKS) Kubernetes Rolebindings Created |
production |
2026-09-18 |
| elastic |
GKE Certificate Signing Request Self-Approved |
production |
2026-09-18 |
| elastic |
GKE Client Certificate Signing Request Created or Approved |
production |
2026-09-18 |
| elastic |
GKE Cluster-Admin Role Binding Created or Modified |
production |
2026-09-18 |
| elastic |
GKE Creation of a RoleBinding Referencing a ServiceAccount |
production |
2026-09-18 |
| elastic |
GKE Creation or Modification of Sensitive Role |
production |
2026-09-18 |