LoFP
/
T1552.005
T1552.005
Title
Tags
legitimate platform components and node agents may query the metadata service. validate by namespace, labels and workload identity; suppress expected sources and alert on atypical pods or namespaces.
T1552.005
kubernetes
splunk
LoFP
/
T1552.005