Kubernetes (commonly stylized as k8s) is an open-source container-orchestration system for automating application deployment, scaling, and management.
Detects inbound traffic to Kubernetes components using tcp on a port outside of expected set
Allowed inbound ports:
Detects a process started in a kubernetes cluster outside of an expected set
Allowed processes:
Detects an attempt to access a file readonly other than below an expected list of directories
Allowed file prefixes for readonly: