Static pod persistence

Named by 3 kept items in this workspace.

Search every workspace for Static pod persistence. It matches the name as written, so it can find other things that share it.

The items that name it 3

[tl;dr sec] #346 - Can AI Do Novel Security Research?, Anthropic's Threat Intel Report, How Cloudflare Enforces Engineering Standards
article2026-09-17
Kubernetes persistence technique detectable with CloudWatch Logs Insights queries
AWS EKS forensics: data sources and investigation tooling (Synacktiv)
article
Manifest dropped directly on the node's staticPodPath (e.g. /etc/kubernetes/kubelet/manifests) which the kubelet picks up and runs outside the normal API-driven workflow; requires first setting staticPodPath (absent by default on EKS-optimized AMIs) and reloading/restarting kubelet; kubelet register
AWS EKS Forensics: Data Sources and Investigation Tooling
article
Manifest dropped directly on the node (staticPodPath) picked up by kubelet, running outside the normal API-driven workflow, creating a mirror pod with annotation kubernetes.io/config.source = 'file'

All techniques in this workspace.