Azure Kubernetes RoleBinding/ClusterRoleBinding Modified and Deleted (25cb259b-bbdc-4b87-98b7-90d7c72f8743)

Detects the creation or patching of potential malicious RoleBinding/ClusterRoleBinding.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Service Stop - T1489 (20fb2507-d71c-455d-9b6d-6104461cf26b)	Attack Pattern	Azure Kubernetes RoleBinding/ClusterRoleBinding Modified and Deleted (25cb259b-bbdc-4b87-98b7-90d7c72f8743)	Sigma-Rules	1
Data Destruction - T1485 (d45a3d09-b3cf-48f4-9f0f-f521ee5cb05c)	Attack Pattern	Azure Kubernetes RoleBinding/ClusterRoleBinding Modified and Deleted (25cb259b-bbdc-4b87-98b7-90d7c72f8743)	Sigma-Rules	1
Azure Kubernetes RoleBinding/ClusterRoleBinding Modified and Deleted (25cb259b-bbdc-4b87-98b7-90d7c72f8743)	Sigma-Rules	Resource Hijacking - T1496 (cd25c1b4-935c-4f0e-ba8d-552f28bc4783)	Attack Pattern	1