Home/ MITRE Matrix/ Discovery/ T1613

T1613Container and Resource Discovery

T1613 — Container and Resource Discovery is a MITRE ATT&CK technique in the Discovery tactic. Clankerusecase tracks 3 detection use cases covering it and 3 threat-intel articles citing it.

Discovery

View on the matrix → Filter Detection Library MITRE official spec ↗

3Use cases

3Articles

0Sub-techniques

1Tactic

Use cases covering this technique (3)

[LLM] Kubernetes API curl/wget with ServiceAccount token from container Bespoke actions · alerting DSΣPDDCSCW [LLM] Container start with docker.sock or sensitive host-path bind mount Bespoke exploit · alerting DSΣPDDCS [LLM] In-cluster Kubernetes secret enumeration with Python user-agent (litellm stealer K8s pivot) Bespoke actions · alerting DSΣPDDCS

Articles citing this technique (3)

crit Containers on fire: from container escapes to supply chain attacks art-158

crit [GHSA / CRITICAL] CVE-2026-44849: Portainer has an endpoint security bypass via Swarm service create/update art-297

crit litellm: Credential Stealer Hidden in PyPI Wheel art-423