attack.t1498 | Detection.FYI

Deployment Deleted From Kubernetes Cluster

Feb 3, 2025 · attack.t1498 ·
Share on:

Detects the removal of a deployment from a Kubernetes cluster. This could indicate disruptive activity aiming to impact business operations.

Read More
OpenCanary - NTP Monlist Request

Feb 3, 2025 · attack.impact attack.t1498 ·
Share on:

Detects instances where an NTP service on an OpenCanary node has had a NTP monlist request.

Read More
Potential BlackByte Ransomware Activity

Jan 30, 2025 · attack.execution attack.defense-evasion attack.impact attack.t1485 attack.t1498 attack.t1059.001 attack.t1140 detection.emerging-threats ·
Share on:

Detects command line patterns used by BlackByte ransomware in different operations

Read More