mirror of
https://github.com/kubescape/kubescape.git
synced 2026-04-15 06:58:11 +00:00
* feat: added support for ListControls and GetFrameworks * perf: introduced jsoniter unmarshalling for faster decoding * introduced stricted error handling & predefined errors: * suppressed edge cases when a flaky value is returned instead of an error * added full unit tests of LoadPolicy Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
136 lines
2.9 KiB
JSON
136 lines
2.9 KiB
JSON
[
|
|
{
|
|
"apiVersion": "regolibrary.kubescape/v1alpha1",
|
|
"kind": "AttackTrack",
|
|
"metadata": {
|
|
"name": "node"
|
|
},
|
|
"spec": {
|
|
"data": {
|
|
"name": "Initial access",
|
|
"subSteps": [
|
|
{
|
|
"name": "Execution",
|
|
"subSteps": [
|
|
{
|
|
"name": "Persistence"
|
|
},
|
|
{
|
|
"name": "Credential access"
|
|
},
|
|
{
|
|
"name": "Defense evasion"
|
|
},
|
|
{
|
|
"name": "Discovery"
|
|
},
|
|
{
|
|
"name": "Lateral movement"
|
|
},
|
|
{
|
|
"name": "Impact - data theft"
|
|
},
|
|
{
|
|
"name": "Impact - data destruction"
|
|
},
|
|
{
|
|
"name": "Impact - service injection"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"apiVersion": "regolibrary.kubescape/v1alpha1",
|
|
"kind": "AttackTrack",
|
|
"metadata": {
|
|
"name": "kubeapi"
|
|
},
|
|
"spec": {
|
|
"data": {
|
|
"name": "Initial access",
|
|
"subSteps": [
|
|
{
|
|
"name": "Persistence"
|
|
},
|
|
{
|
|
"name": "Privilege escalation"
|
|
},
|
|
{
|
|
"name": "Credential access"
|
|
},
|
|
{
|
|
"name": "Discovery"
|
|
},
|
|
{
|
|
"name": "Lateral movement"
|
|
},
|
|
{
|
|
"name": "Defense evasion"
|
|
},
|
|
{
|
|
"name": "Impact - data destruction"
|
|
},
|
|
{
|
|
"name": "Impact - service injection"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"apiVersion": "regolibrary.kubescape/v1alpha1",
|
|
"kind": "AttackTrack",
|
|
"metadata": {
|
|
"name": "container"
|
|
},
|
|
"spec": {
|
|
"data": {
|
|
"name": "Initial access",
|
|
"subSteps": [
|
|
{
|
|
"name": "Execution",
|
|
"subSteps": [
|
|
{
|
|
"name": "Privilege escalation"
|
|
},
|
|
{
|
|
"name": "Credential access",
|
|
"subSteps": [
|
|
{
|
|
"name": "Impact - service access"
|
|
},
|
|
{
|
|
"name": "Impact - K8s API access",
|
|
"subSteps": [
|
|
{
|
|
"name": "Defense evasion - KubeAPI"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "Discovery"
|
|
},
|
|
{
|
|
"name": "Lateral movement"
|
|
},
|
|
{
|
|
"name": "Impact - Data access in container"
|
|
},
|
|
{
|
|
"name": "Persistence"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "Impact - service destruction"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
}
|
|
] |