Skip to content

Alert on SSH to bastion #90

@MNThomson

Description

@MNThomson

Is your feature request related to a problem? Please describe.

The bastion host is a crown jewel with full access to the k8s cluster, I want to know when someone accesses it

Describe the solution you'd like

Alert to discord or other channels when a user SSH's to the bastion/gains a shell as it is a major indicator of compromise

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or requestsecurityRelating to the security of the application or this repo

    Type

    No type

    Projects

    Status

    Backlog

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions