{
  "_type": "https://in-toto.io/Statement/v1",
  "predicate": {
    "generated_at": "2026-04-24",
    "generator": {
      "corpus_version": "gold-rules@2026-04-24",
      "model": "n/a-static-corpus",
      "name": "cloudsigma",
      "prompt_version": "p1",
      "seed": 0,
      "version": "cloudsigma@v1.0-stub"
    },
    "input": {
      "enrichment": [],
      "id": "elastic-kubernetes",
      "type": "sigma_matrix"
    },
    "publish_decision": {
      "embed_status": "production",
      "integrity_level": "L1"
    },
    "rule_metadata": {
      "corpus_path": "kubernetes/kubernetes-audit/T1562.008.yml",
      "level": "high",
      "status": "test",
      "title": "Kubernetes Audit Policy or Logging Configuration Tampering"
    }
  },
  "predicateType": "https://a13e.com/cloudsigma-rule-attestation/v1",
  "subject": [
    {
      "digest": {
        "sha256": "1bef457800fccc0331f794c7447052d14d9767f5ab756c77d0263525a7552af9"
      },
      "name": "/library/sigma/elastic-kubernetes/sigma-rule"
    }
  ]
}