AI Plugin Indexanalyzing-azure-activity-logs-for-threats vs analyzing-kubernetes-audit-logs
analyzing-azure-activity-logs-for-threats and analyzing-kubernetes-audit-logs are both security skills. analyzing-kubernetes-audit-logs scores higher (84 vs 34 out of 100). analyzing-kubernetes-audit-logs has more GitHub stars (35k), and analyzing-kubernetes-audit-logs was updated more recently (1 month ago). The table compares them side by side.
| analyzing-azure-activity-logs-for-threats | analyzing-kubernetes-audit-logs | |
|---|---|---|
| Score | 34 / 100 | 84 / 100 |
| What it does | Queries Azure Monitor activity logs and sign-in logs via azure-monitor-query to detect suspicious administrative operations, impossible travel, privilege escalation, and resource modifications. Builds KQL queries for threat hunting in Azure environments. Use when investigating suspicious Azure tenant activity or building cloud SIEM detections. | Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API access, and builds SIEM detection rules from the event patterns. Use when investigating a suspected cluster compromise, reconstructing what an attacker did through the API server, or writing Kubernetes-specific detection content. Keywords: audit policy, audit log, kube-apiserver, exec into pod, RBAC change, anonymous access, detection rules. Do not use for syscall-level detection inside a running container - use detecting-container-runtime-threats-with-falco. ' |
| Publisher | Community: autohandai | Community: mukul975 |
| Grades | Maintenance C, Licence A, Quality C | Maintenance B, Licence A, Quality A |
| npm downloads a week | Not on npm | Not on npm |
| Runs | Skill | Skill |
| Works with | Claude Code, Claude apps | Claude Code, Claude apps |
| GitHub stars | 11 | 34,884 |
| Last commit | 15 Jul 2026 | 31 Aug 2026 |
| Licence | Apache-2.0 | Apache-2.0 |
| Listed since | 20 Oct 2026 | 22 Oct 2026 |
| Install analyzing-azure-activity-logs-for-threats | Install analyzing-kubernetes-audit-logs |
Questions
Is analyzing-azure-activity-logs-for-threats or analyzing-kubernetes-audit-logs more popular?
analyzing-kubernetes-audit-logs has more GitHub stars: 34,884.
Can I use analyzing-azure-activity-logs-for-threats and analyzing-kubernetes-audit-logs together?
Yes. AI assistants can load several skills at once. Install both and the assistant picks the right one for each task.