Skip to content
Sign In
Telemetry

k8s:audit create

create

Log source
Kubernetes API server audit log
Host type
Kubernetes
Tier, host type
Recommended
Techniques
1
Rules depending on it
Elastic 1

Why this tier

By role

RoleTierBasis
Kubernetes clusterRecommended

Techniques it helps detect

Rules that depend on it

Elastic 1

Dataset version 0.5.3, built 2026-11-08, from public sources only. Vendor rule names, requirement text and ATT&CK content are reproduced as published; the links between them are the authors' analysis. See the references for each source, its version and its license.