Rule Info
Name
Potential Remote Command Execution In Pod Container
Author
Leo Tsaousis (@laripping)
Description
Detects attempts to execute remote commands, within a Pod's container using e.g. the "kubectl exec" command.
Reference
Date
2024-03-26 00:00:00
Modified
None
Id
a1b0ca4e-7835-413e-8471-3ff2b8a66be6
Tags
attack.t1609 DEMO
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
Scan your endpoints, forensic images or collected files with our portable scanner THOR