Rule Info
Name
Deployment Deleted From Kubernetes Cluster
Author
Leo Tsaousis (@laripping)
Description
Detects the removal of a deployment from a Kubernetes cluster.
This could indicate disruptive activity aiming to impact business operations.
Date
2024-03-26 00:00:00
Modified
None
Id
40967487-139b-4811-81d9-c9767a92aa5a
Tags
attack.t1498 attack.impact
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
david-syk
Merge PR #5452 from @david-syk - Update the MITRE ATT&CK tags for multiple rules
2025-06-04
github-actions[bot]
Merge PR #5177 from @nasbench - promote older rules status from `experimental` to `test`
2025-02-03
Nasreddine Bencherchali
Merge PR #4950 from @nasbench - Comply With v2 Spec Changes
2024-08-12
Scan your endpoints, forensic images or collected files with our portable scanner THOR