kubernetes.audit.objectref[.]nameDomain
Reported by 1 independent source · first reported by Elastic Security Labs · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
How to correlate Kubernetes audit logs with container runtime data“kubernetes.audit.objectRef[.]name, filtered to objectRef.resource: pods”
Indicators reported together
named in the same reports- cluster[.]namein 1 report
- resource[.]namein 1 report
- objectref[.]namein 1 report
Copy these 3 indicators · defanged
Thanks — we review every report.