Home/ MITRE Matrix/ Execution/ T1053.007

T1053.007Container Orchestration Job

T1053.007 — Container Orchestration Job is a MITRE ATT&CK technique in the Execution tactic. Clankerusecase tracks 3 detection use cases covering it and 1 threat-intel article citing it.

ExecutionPersistencePrivilege Escalation

View on the matrix → Filter Detection Library MITRE official spec ↗

3Use cases

1Articles

0Sub-techniques

3Tactics

↑ Parent technique: T1053 · Scheduled Task/Job

Use cases covering this technique (3)

Kubernetes Cron Job Creation ESCU actions · hunting P Cisco Isovalent - Cron Job Creation ESCU actions · hunting P [LLM] Orphaned Nuclio CronJob without ownerReferences (CVE-2026-52831 persistence) Bespoke install · hunting SPDD

Articles citing this technique (1)

crit [GHSA / CRITICAL] CVE-2026-52831: Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persisten art-224