Persistence:Kubernetes/ContainerWithSensitiveMount

Named by 2 kept items in this workspace.

1 items name it under classification.key entities and 1 under techniques.

The items that name it 2

AWS EKS forensics: data sources and investigation tooling (Synacktiv)
articleas techniques
GuardDuty finding for a container started with a sensitive host path (e.g. node root /) mounted inside it, enabling node modification and persistence
AWS EKS Forensics: Data Sources and Investigation Tooling
articleas classification.key entities

All techniques in this workspace.