<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Investigating Kubernetes Security Events

## Tools

### K8s Forensics

| Command | Description |
|---|---|
| `kubectl get events` | Events |
| `agent.js audit-logs` | Audit |
| `agent.js pod-inspect` | Pods |
| `agent.js rbac-review` | RBAC |

### Agent Script

```bash
node agent.js audit-logs --cluster <value>
node agent.js pod-inspect --pod <value>
node agent.js rbac-review --cluster <value>
node agent.js report --investigation <value>
```
