Unauthorized Pod Execution Alert

Unauthorized Pod Execution is an incident type that occurs when an unauthorized entity attempts to create a pod in a system without proper permissions. This playbook against your Kubernetes master node(s), you can investigate unauthorized pod execution alerts and gather relevant information to understand how the unauthorized pod was deployed and any associated events.