Snapshot Creation

The process of taking a point-in-time copy of a cloud storage volume (files, settings, configurations, etc.), virtual machine (VM), or database that can be created and deployed in cloud environments.

ID: DC0057
Domains: Enterprise
Version: 2.0
Created: 20 October 2021
Last Modified: 12 November 2025

Log Sources

Name Channel
AWS:CloudTrail CreateSnapshot
azure:activity MICROSOFT.COMPUTE/SNAPSHOTS/WRITE
esxi:vmkernel snapshot create/write events

Detection Strategy