New Kubernetes Service Account Created — Detection Rule

Detects creation of new Kubernetes service account, which could indicate an attacker's attempt to persist within a cluster.

Read the full analysis on IntelFusions