GCP Break-glass Container Workload Deployed (76737c19-66ee-4c07-b65a-a03301d1573d)
Detects the deployment of workloads that are deployed by using the break-glass flag to override Binary Authorization controls.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Abuse Elevation Control Mechanism - T1548 (67720091-eee3-4d2d-ae16-8264567f6f5b) | Attack Pattern | GCP Break-glass Container Workload Deployed (76737c19-66ee-4c07-b65a-a03301d1573d) | Sigma-Rules | 1 |