Short Lived Windows Accounts

Local Account, Create Account

Windows Event Log Cleared

Indicator Removal, Clear Windows Event Logs

Detect Path Interception By Creation Of program exe

Path Interception by Unquoted Path, Hijack Execution Flow

Kubernetes AWS detect sensitive role access

Kubernetes AWS detect service accounts forbidden failure access