Matrices
Enterprise
Mobile
ICS
Tactics
Enterprise
Mobile
ICS
Techniques
Enterprise
Mobile
ICS
Defenses
Mitigations
Enterprise
Mobile
ICS
Assets
Detections
Detection Strategies
Analytics
Data Components
CTI
Groups
Software
Campaigns
Resources
Get Started
Learn More about ATT&CK
ATT&CK Advisory Council
ATT&CKcon
ATT&CK Data & Tools
FAQ
Engage with ATT&CK
Version History
Updates
Legal & Branding
Benefactors
Contribute
Blog
Search
ATT&CK v19 has been released! Check out the
blog post
for more information.
Home
Data Components
Instance Metadata
Instance Metadata
Contextual data about an instance and activity around it such as name, type, or status
ID:
DC0086
Domains
: Enterprise
Version
: 2.0
Created
: 20 October 2021
Last Modified
: 12 November 2025
Log Sources
Name
Channel
AWS:CloudTrail
DescribeInstances
Detection Strategy
ID
Name
Technique Detected
DET0169
Detection Strategy for Cloud Infrastructure Discovery
T1580
DET0449
Detection Strategy for Modify Cloud Compute Infrastructure: Create Cloud Instance
T1578.002
DET0084
Detection Strategy for Modify Cloud Compute Infrastructure: Delete Cloud Instance
T1578.003
×
Core Objects:
All
Core ATT&CK Objects
All
None
Matrices
0
Tactics
0
Techniques
0
Sub-Techniques
0
Defenses:
All
Defenses
All
None
Mitigations
0
Assets
0
Detection Strategies
0
Analytics
0
Data Components
0
CTI:
All
CTI
All
None
Groups
0
Software
0
Campaigns
0
Reference:
All
Reference
All
None
Resources
0
Domains:
All
Domains
All
None
Enterprise
0
Mobile
0
ICS
0
Show all Filters
Page type
All
None
Core ATT&CK Objects
All
None
Matrices
0
Tactics
0
Techniques
0
Sub-Techniques
0
Defenses
All
None
Mitigations
0
Assets
0
Detection Strategies
0
Analytics
0
Data Components
0
CTI
All
None
Groups
0
Software
0
Campaigns
0
Reference
All
None
Resources
0
Domain
All
None
Enterprise
0
Mobile
0
ICS
0
load more results