Windows Event Log Cleared

Indicator Removal, Clear Windows Event Logs

Detect Path Interception By Creation Of program exe

Path Interception by Unquoted Path, Hijack Execution Flow

Kubernetes AWS detect RBAC authorization by account

Kubernetes AWS detect sensitive role access

Kubernetes AWS detect service accounts forbidden failure access