Tag
medium
advisory
Suspicious Pod Creation in Kubernetes System Namespace
2 rules 1 TTPAn attacker may deploy a pod within the kube-system namespace in Kubernetes to mimic legitimate system pods and evade detection.
Kubernetes
pod
kube-system
container
2r
1t
high
advisory
Kubernetes Pod Created in Default Namespace
2 rules 1 TTPDetection of Kubernetes pod creation in default, kube-system, or kube-public namespaces using audit logs, potentially indicating attacker attempts to hide or evade defenses following a cluster breach.
Kubernetes
pod
namespace
privilege_escalation
2r
1t