Snapshot Enumeration (ffd73905-2e51-4f2d-8549-e72fb0eb6c38)
The process of listing or retrieving metadata about existing snapshots in a cloud environment.
Data Collection Measures:
- AWS CloudTrail
- Logs API calls such as
DescribeSnapshots,ListSnapshots, andGetSnapshotAttributes.
- Logs API calls such as
- Azure Monitor Logs
- Tracks snapshot enumeration via
Microsoft.Compute/snapshots/read.
- Tracks snapshot enumeration via
- Google Cloud Logging
- Detects snapshot listing through
compute.disks.listSnapshots.
- Detects snapshot listing through
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Snapshot Enumeration (ffd73905-2e51-4f2d-8549-e72fb0eb6c38) | mitre-data-component | Cloud Infrastructure Discovery - T1580 (57a3d31a-d04f-4663-b2da-7df8ec3f8c9d) | Attack Pattern | 1 |