Kubernetes Secrets Enumeration

Rule Info

Name
Kubernetes Secrets Enumeration
Author
Leo Tsaousis (@laripping)
Description
Detects enumeration of Kubernetes secrets.
Reference
https://microsoft.github.io/Threat-Matrix-for-Kubernetes/techniques/List%20K8S%20secrets/
Date
2024-03-26 00:00:00
Modified
None
Id
eeb3e9e1-b685-44e4-9232-6bb701f925b5
Tags
attack.t1552.007 DEMO
Type
Community Rule
Link to Public Repo
https://github.com/SigmaHQ/sigma/search?q=eeb3e9e1-b685-44e4-9232-6bb701f925b5

Rule History

Author
Title
Date
Commit
Leo Tsaousis
Merge PR #4694 from @LAripping - Add native Kubernetes detections
2024-03-26
0d63f52ff
THOR Logo  Scan your endpoints, forensic images or collected files with our portable scanner THOR
  Warning: Access to VALHALLA is rate-limited - once you prove unworthy, access gets denied
  Nextron Systems 2022