PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Kubernetes Audit Log “Gotchas”

wiz.io | blog | #cloud-security | #kubernetes | #detection | #forensics | #audit-logs | #kdr
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Drawing on lessons from implementing Kubernetes detection and response, Wiz walks through audit log pitfalls across managed and self-hosted clusters—default policies, performance, and forensic gaps.
Published
Collected

Related coverage

blog · xbow.com
MITRE ATT&CK Coverage Assessment: How to Measure Defensive Readiness
Most ATT&CK coverage heatmaps are built on assertion, not evidence. Here’s the methodology that makes numbers defensible, with the help of autonomous continuous testing.
research · volexity.com
Using Memory Analysis to Detect EDR-Nullifying Malware
In the ever-changing cybersecurity landscape, threat actors are forced to evolve and continually modify the tactics, techniques, and procedures (TTPs) they employ to launch and sustain attacks successfully. They are […]
blog · wiz.io
Wiz Sensor on GKE. 1-Click Runtime Protection, Now Native.
# Wiz Sensor on GKE. 1-Click Runtime Protection, Now Native. Enable native runtime protection for GKE in just one click. The Wiz Runtime Sensor add-on now automates deployment and credential...
blog · wiz.io
Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts
Secure your Kubernetes supply chain with WizOS Helm Charts. Eliminate hidden CI/CD risks and unmaintained dependencies with hardened, signed, and CVE-scanned charts for seamless Kubernetes deployment.
blog · wiz.io
Introducing Wiz Incident Response: Your Expert Partner for Cloud Security Incidents
Wiz launches the public preview of its Incident Response service — experts who handle cloud-native scoping, forensics, containment and remediation, backed by Wiz Defend and Runtime Sensor telemetry.
blog · wiz.io
Unveiling the power of Wiz's Security Graph with automated blast radius and root cause analysis for cloud incident response
Wiz Forensics adds automated Root Cause and Blast Radius Analysis on the Security Graph, helping IR teams see how a resource was compromised and where an attacker could move next.
Back