Initial construction of a new pod (ex: kubectl apply|run)
Initial construction of a new pod (ex: kubectl apply|run)
| Domain | ID | Name | |
|---|---|---|---|
| Enterprise | T1610 | Deploy Container | |
An extracted list of pods within a cluster (ex: kubectl get pods)
An extracted list of pods within a cluster (ex: kubectl get pods)
| Domain | ID | Name | |
|---|---|---|---|
| Enterprise | T1613 | Container and Resource Discovery | |
Contextual data about a pod and activity around it such as name, ID, namespace, or status
Contextual data about a pod and activity around it such as name, ID, namespace, or status
| Domain | ID | Name | |
|---|---|---|---|
| Enterprise | T1613 | Container and Resource Discovery | |
| Enterprise | T1069 | Permission Groups Discovery | |
Changes made to a pod, including its settings and/or control data (ex: kubectl set|patch|edit)
Changes made to a pod, including its settings and/or control data (ex: kubectl set|patch|edit)
| Domain | ID | Name | |
|---|---|---|---|
| Enterprise | T1610 | Deploy Container | |