diff --git a/deprecated.txt b/deprecated.txt index b6bccd4ea..d27153eab 100644 --- a/deprecated.txt +++ b/deprecated.txt @@ -33,4 +33,5 @@ AWS.CloudTrail.RootConsoleLogin Okta.GeographicallyImprobableAccess Okta.BruteForceLogins Query.Snowflake.PublicRoleGrant -Snowflake.PublicRoleGrant \ No newline at end of file +Snowflake.PublicRoleGrant +GCP.K8S.Pot.Create.Or.Modify.Host.Path.Volume.Mount \ No newline at end of file diff --git a/packs/gcp_k8.yml b/packs/gcp_k8.yml index 366e22019..df3e5a8df 100644 --- a/packs/gcp_k8.yml +++ b/packs/gcp_k8.yml @@ -8,7 +8,7 @@ PackDefinition: - Standard.GCP.AuditLog # Rules - GCP.K8s.New.Daemonset.Deployed - - GCP.K8S.Pot.Create.Or.Modify.Host.Path.Volume.Mount + - GCP.K8S.Pod.Create.Or.Modify.Host.Path.Volume.Mount - GCP.K8S.Privileged.Pod.Created - GCP.K8S.Service.Type.NodePort.Deployed - GCP.K8s.IOC.Activity diff --git a/rules/gcp_k8s_rules/gcp_k8s_pod_create_or_modify_host_path_vol_mount.yml b/rules/gcp_k8s_rules/gcp_k8s_pod_create_or_modify_host_path_vol_mount.yml index d14b691ee..c28921e8d 100644 --- a/rules/gcp_k8s_rules/gcp_k8s_pod_create_or_modify_host_path_vol_mount.yml +++ b/rules/gcp_k8s_rules/gcp_k8s_pod_create_or_modify_host_path_vol_mount.yml @@ -1,6 +1,6 @@ AnalysisType: rule -RuleID: "GCP.K8S.Pot.Create.Or.Modify.Host.Path.Volume.Mount" -DisplayName: "GCP K8S Pot Create Or Modify Host Path Volume Mount" +RuleID: "GCP.K8S.Pod.Create.Or.Modify.Host.Path.Volume.Mount" +DisplayName: "GCP K8S Pod Create Or Modify Host Path Volume Mount" Enabled: true LogTypes: - GCP.AuditLog