Skip to content
Threat Feed
Subscribe

Product

Kubernetes (All Versions)

2 briefs RSS
medium advisory

Detection of Unauthorized Interactive Kubernetes API Probing

Adversaries performing hands-on-keyboard enumeration within compromised containers are detected by correlating interactive process execution with forbidden Kubernetes API audit responses.

Kubernetes +1 execution discovery cloud-native container-security container threat-detection
3t updated
medium advisory

Detection of Interactive Kubernetes API Abuse via Container Utilities

Adversaries may move laterally or perform reconnaissance by compromising a container and using interactive shells or networking utilities to query the Kubernetes API server directly.

Kubernetes container-security discovery execution cloud
3t