Alert on SSH to bastion
MNThomson opened this issue · 0 comments
MNThomson commented
Is your feature request related to a problem? Please describe.
The bastion host is a crown jewel with full access to the k8s cluster, I want to know when someone accesses it
Describe the solution you'd like
Alert to discord or other channels when a user SSH's to the bastion/gains a shell as it is a major indicator of compromise