Open danielsagi opened 3 years ago
Change categories for vulnerabilities, and add a corresponding field for MITRE correlation. Update kube-hunter's KB with related info
Match this as close as possible: https://www.microsoft.com/security/blog/2021/03/23/secure-containerized-environments-with-updated-threat-matrix-for-kubernetes/
When we started kube-hunter, there were no general standard for kubernetes attack scenarios. after kube-hunter went public a standard was coming out (that includes our findings, for example the DNS spoofing technique)
We can now switch to try and cover this.
What would you like to be added
Change categories for vulnerabilities, and add a corresponding field for MITRE correlation. Update kube-hunter's KB with related info
Match this as close as possible: https://www.microsoft.com/security/blog/2021/03/23/secure-containerized-environments-with-updated-threat-matrix-for-kubernetes/
Why is this needed
When we started kube-hunter, there were no general standard for kubernetes attack scenarios. after kube-hunter went public a standard was coming out (that includes our findings, for example the DNS spoofing technique)
We can now switch to try and cover this.