Detection Engineering
Kubernetes Audit Telemetry for Detection Engineers
Interpret Kubernetes audit events as API-server observations whose stage, level, identity, resource, authorization, and policy limits determine what a detection can honestly claim.