Skip to main content

Cluster Monitoring Integration

CCC.K8S.CP17

The service can send cluster, node, workload, and network activity telemetry to cloud-native or Kubernetes-compatible monitoring components.

Related Threats

IDTitleDescription
CCC.K8S.TH15Kubernetes Audit Records are Incomplete or UnavailableAudit policies, log categories, collection agents, export destinations, or retention settings that omit security-relevant activity may leave required Kubernetes records incomplete or unavailable. Cluster access and configuration changes can then occur without a reliable investigative trail, delaying detection and weakening the integrity and availability of security monitoring and incident response.