Merge branch 'main' into develop

panther-labs · Nov 14, 2024 · 2920b0a · 2920b0a
2 parents 3439310 + a871308
commit 2920b0a
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 4 deletions.
diff --git a/deprecated.txt b/deprecated.txt
@@ -33,4 +33,5 @@ AWS.CloudTrail.RootConsoleLogin
 Okta.GeographicallyImprobableAccess
 Okta.BruteForceLogins
 Query.Snowflake.PublicRoleGrant
-Snowflake.PublicRoleGrant
+Snowflake.PublicRoleGrant
+GCP.K8S.Pot.Create.Or.Modify.Host.Path.Volume.Mount
diff --git a/packs/gcp_k8.yml b/packs/gcp_k8.yml
@@ -8,7 +8,7 @@ PackDefinition:
     - Standard.GCP.AuditLog
     # Rules
     - GCP.K8s.New.Daemonset.Deployed
-    - GCP.K8S.Pot.Create.Or.Modify.Host.Path.Volume.Mount
+    - GCP.K8S.Pod.Create.Or.Modify.Host.Path.Volume.Mount
     - GCP.K8S.Privileged.Pod.Created
     - GCP.K8S.Service.Type.NodePort.Deployed
     - GCP.K8s.IOC.Activity

diff --git a/rules/gcp_k8s_rules/gcp_k8s_pod_create_or_modify_host_path_vol_mount.yml b/rules/gcp_k8s_rules/gcp_k8s_pod_create_or_modify_host_path_vol_mount.yml
@@ -1,6 +1,6 @@
 AnalysisType: rule
-RuleID: "GCP.K8S.Pot.Create.Or.Modify.Host.Path.Volume.Mount"
-DisplayName: "GCP K8S Pot Create Or Modify Host Path Volume Mount"
+RuleID: "GCP.K8S.Pod.Create.Or.Modify.Host.Path.Volume.Mount"
+DisplayName: "GCP K8S Pod Create Or Modify Host Path Volume Mount"
 Enabled: true
 LogTypes:
   - GCP.AuditLog