Azure Kubernetes Service Account Modified or Deleted (12d027c3-b48c-4d9d-8bb6-a732200034b2)

Identifies when a service account is modified or deleted.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Service Stop - T1489 (20fb2507-d71c-455d-9b6d-6104461cf26b)	Attack Pattern	Azure Kubernetes Service Account Modified or Deleted (12d027c3-b48c-4d9d-8bb6-a732200034b2)	Sigma-Rules	1
Data Destruction - T1485 (d45a3d09-b3cf-48f4-9f0f-f521ee5cb05c)	Attack Pattern	Azure Kubernetes Service Account Modified or Deleted (12d027c3-b48c-4d9d-8bb6-a732200034b2)	Sigma-Rules	1
Account Access Removal - T1531 (b24e2a20-3b3d-4bf0-823b-1ed765398fb0)	Attack Pattern	Azure Kubernetes Service Account Modified or Deleted (12d027c3-b48c-4d9d-8bb6-a732200034b2)	Sigma-Rules	1
Resource Hijacking - T1496 (cd25c1b4-935c-4f0e-ba8d-552f28bc4783)	Attack Pattern	Azure Kubernetes Service Account Modified or Deleted (12d027c3-b48c-4d9d-8bb6-a732200034b2)	Sigma-Rules	1