Kubernetes AWS Detect Rbac Authorization By Account

Description

This search provides information on Kubernetes RBAC authorizations by accounts, this search can be modified by adding top to see both extremes of RBAC by accounts occurrences

Content Mapping

This content is not mapped to any local saved search. Add mapping


Use Case

Security Monitoring

Category

Adversary Tactics

Alert Volume

This search provides information on Kubernetes RBAC authorizations by accounts, this search can be modified by adding top to see both extremes of RBAC by accounts occurrences

SPL Difficulty

None

Journey

Stage 3

Data Sources

AWS
Audit Trail

   Help

Kubernetes AWS Detect Rbac Authorization By Account Help

You must install splunk AWS add on and Splunk App for AWS. This search works with cloudwatch logs

   Search

Open in Search