AWS EKS Kubernetes cluster sensitive object access

Windows Terminating Lsass Process

Disable or Modify Tools, Impair Defenses

AWS Cloud Provisioning From Previously Unseen Region

Unused/Unsupported Cloud Regions

Excessive number of service control start as disabled

Disable or Modify Tools, Impair Defenses

Clients Connecting to Multiple DNS Servers

Exfiltration Over Unencrypted Non-C2 Protocol