Snapshot - DS0020 (6d7de3b7-283d-48f9-909c-60d123d9d768)

A point-in-time copy of cloud volumes (files, settings, etc.) that can be created and/or deployed in cloud environments(Citation: Microsoft Snapshot)(Citation: Amazon Snapshots)

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Snapshot Metadata (8bc66f94-54a9-4be4-bdd1-fe90df643774)	mitre-data-component	Snapshot - DS0020 (6d7de3b7-283d-48f9-909c-60d123d9d768)	mitre-data-source	1
Snapshot Creation (3da222e6-53f3-451c-a239-0b405c009432)	mitre-data-component	Snapshot - DS0020 (6d7de3b7-283d-48f9-909c-60d123d9d768)	mitre-data-source	1
Snapshot Modification (f1eb6ea9-f3ab-414f-af35-2d5427199984)	mitre-data-component	Snapshot - DS0020 (6d7de3b7-283d-48f9-909c-60d123d9d768)	mitre-data-source	1
Snapshot Deletion (16e07530-764b-4d83-bae0-cdbfc31bf21d)	mitre-data-component	Snapshot - DS0020 (6d7de3b7-283d-48f9-909c-60d123d9d768)	mitre-data-source	1
Snapshot Enumeration (ffd73905-2e51-4f2d-8549-e72fb0eb6c38)	mitre-data-component	Snapshot - DS0020 (6d7de3b7-283d-48f9-909c-60d123d9d768)	mitre-data-source	1
Transfer Data to Cloud Account - T1537 (d4bdbdea-eaec-4071-b4f9-5105e12ea4b6)	Attack Pattern	Snapshot Metadata (8bc66f94-54a9-4be4-bdd1-fe90df643774)	mitre-data-component	2
Snapshot Metadata (8bc66f94-54a9-4be4-bdd1-fe90df643774)	mitre-data-component	Create Snapshot - T1578.001 (ed2e45f9-d338-4eb2-8ce5-3a2e03323bc1)	Attack Pattern	2
Snapshot Metadata (8bc66f94-54a9-4be4-bdd1-fe90df643774)	mitre-data-component	Modify Cloud Compute Infrastructure - T1578 (144e007b-e638-431d-a894-45d90c54ab90)	Attack Pattern	2
Transfer Data to Cloud Account - T1537 (d4bdbdea-eaec-4071-b4f9-5105e12ea4b6)	Attack Pattern	Snapshot Creation (3da222e6-53f3-451c-a239-0b405c009432)	mitre-data-component	2
Create Snapshot - T1578.001 (ed2e45f9-d338-4eb2-8ce5-3a2e03323bc1)	Attack Pattern	Snapshot Creation (3da222e6-53f3-451c-a239-0b405c009432)	mitre-data-component	2
Modify Cloud Compute Infrastructure - T1578 (144e007b-e638-431d-a894-45d90c54ab90)	Attack Pattern	Snapshot Creation (3da222e6-53f3-451c-a239-0b405c009432)	mitre-data-component	2
Transfer Data to Cloud Account - T1537 (d4bdbdea-eaec-4071-b4f9-5105e12ea4b6)	Attack Pattern	Snapshot Modification (f1eb6ea9-f3ab-414f-af35-2d5427199984)	mitre-data-component	2
Snapshot Modification (f1eb6ea9-f3ab-414f-af35-2d5427199984)	mitre-data-component	Modify Cloud Compute Infrastructure - T1578 (144e007b-e638-431d-a894-45d90c54ab90)	Attack Pattern	2
Data Destruction - T1485 (d45a3d09-b3cf-48f4-9f0f-f521ee5cb05c)	Attack Pattern	Snapshot Deletion (16e07530-764b-4d83-bae0-cdbfc31bf21d)	mitre-data-component	2
Snapshot Deletion (16e07530-764b-4d83-bae0-cdbfc31bf21d)	mitre-data-component	Modify Cloud Compute Infrastructure - T1578 (144e007b-e638-431d-a894-45d90c54ab90)	Attack Pattern	2
Snapshot Deletion (16e07530-764b-4d83-bae0-cdbfc31bf21d)	mitre-data-component	Inhibit System Recovery - T1490 (f5d8eed6-48a9-4cdf-a3d7-d1ffa99c3d2a)	Attack Pattern	2
Cloud Infrastructure Discovery - T1580 (57a3d31a-d04f-4663-b2da-7df8ec3f8c9d)	Attack Pattern	Snapshot Enumeration (ffd73905-2e51-4f2d-8549-e72fb0eb6c38)	mitre-data-component	2
Create Snapshot - T1578.001 (ed2e45f9-d338-4eb2-8ce5-3a2e03323bc1)	Attack Pattern	Modify Cloud Compute Infrastructure - T1578 (144e007b-e638-431d-a894-45d90c54ab90)	Attack Pattern	3