1. Home
  2. Data Components
  3. Instance Metadata

Instance Metadata

Contextual data about an instance and activity around it such as name, type, or status

ID: DC0086
Domains: Enterprise
Version: 2.0
Created: 20 October 2021
Last Modified: 21 October 2025

Log Sources

Name Channel
AWS:CloudTrail DescribeInstances
CloudTrail:EC2 DescribeInstances

Detection Strategy

ID Name Technique Detected
DET0169 Detection Strategy for Cloud Infrastructure Discovery T1580
DET0449 Detection Strategy for Modify Cloud Compute Infrastructure: Create Cloud Instance T1578.002
DET0084 Detection Strategy for Modify Cloud Compute Infrastructure: Delete Cloud Instance T1578.003