| elastic |
AWS EKS Pod Created With HostPID |
production |
2026-10-21 |
| elastic |
AWS EKS Pod Created with a Sensitive hostPath Volume |
production |
2026-10-21 |
| elastic |
AWS EKS Pod Created With HostIPC |
production |
2026-10-21 |
| elastic |
AWS EKS Pod Created With HostNetwork |
production |
2026-10-21 |
| elastic |
AWS EKS Privileged Pod Created |
production |
2026-10-21 |
| elastic |
AWS EKS Anonymous User Create/Update/Patch Pods Request |
production |
2026-10-21 |
| elastic |
AWS EKS Container Created with Excessive Linux Capabilities |
production |
2026-10-21 |
| elastic |
Kubernetes Pod Created With HostIPC |
production |
2026-10-06 |
| elastic |
Kubernetes Pod Created With HostNetwork |
production |
2026-10-06 |
| elastic |
Kubernetes Pod Created With HostPID |
production |
2026-10-06 |
| elastic |
GKE Privileged Pod Created |
production |
2026-09-18 |
| elastic |
GKE Pod Created with a Sensitive hostPath Volume |
production |
2026-09-18 |
| elastic |
GKE Suspicious Assignment of Controller Service Account |
production |
2026-09-18 |
| elastic |
Kubernetes Anonymous User Create/Update/Patch Pods Request |
production |
2026-09-18 |
| elastic |
Kubernetes Container Created with Excessive Linux Capabilities |
production |
2026-09-18 |
| elastic |
Kubernetes Pod Created with a Sensitive hostPath Volume |
production |
2026-09-18 |
| elastic |
Kubectl Apply Pod from URL |
production |
2026-09-18 |
| elastic |
Privileged Docker Container Creation |
production |
2026-09-18 |
| elastic |
Pod or Container Creation with Suspicious Command-Line |
production |
2026-09-18 |
| elastic |
Kubernetes Sensitive Configuration File Activity |
production |
2026-09-18 |
| elastic |
Potential Privilege Escalation via Container Misconfiguration |
production |
2026-09-18 |
| elastic |
Potential Privilege Escalation through Writable Docker Socket |
production |
2026-09-18 |
| elastic |
Kubernetes Privileged Pod Created |
production |
2026-09-18 |
| elastic |
Potential Kubectl Masquerading via Unexpected Process |
production |
2026-09-18 |
| elastic |
Direct Interactive Kubernetes API Request by Unusual Utilities |
production |
2026-09-18 |
| elastic |
Privileged Container Creation with Host Directory Mount |
production |
2026-09-18 |
| elastic |
Azure AKS Ephemeral Container Added to Pod |
production |
2026-09-18 |
| elastic |
GKE Anonymous Pod Create/Update/Patch |
production |
2026-09-18 |
| elastic |
GKE Container Created with Excessive Linux Capabilities |
production |
2026-09-18 |
| elastic |
GKE Pod Created With HostIPC |
production |
2026-09-18 |
| elastic |
GKE Pod Created With HostNetwork |
production |
2026-09-18 |
| elastic |
GKE Pod Created With HostPID |
production |
2026-09-18 |
| splunk |
Linux Suspicious Docker Build Command Execution |
production |
2026-07-08 |
| splunk |
Linux Suspicious Privileged Container Execution |
production |
2026-07-08 |