Matrices
Enterprise
Mobile
ICS
Tactics
Enterprise
Mobile
ICS
Techniques
Enterprise
Mobile
ICS
Defenses
Mitigations
Enterprise
Mobile
ICS
Assets
Detections
Detection Strategies
Analytics
Data Components
CTI
Groups
Software
Campaigns
Resources
Get Started
Learn More about ATT&CK
ATT&CKcon
ATT&CK Data & Tools
FAQ
Engage with ATT&CK
Version History
Updates
Legal & Branding
Benefactors
Blog
Search
ATT&CK v18 has been released! Check out the
blog post
or
changelog
for more information.
Home
Data Components
Instance Metadata
Instance Metadata
Contextual data about an instance and activity around it such as name, type, or status
ID:
DC0086
Domains
: Enterprise
Version
: 2.0
Created
: 20 October 2021
Last Modified
: 21 October 2025
Log Sources
Name
Channel
AWS:CloudTrail
DescribeInstances
CloudTrail:EC2
DescribeInstances
Detection Strategy
ID
Name
Technique Detected
DET0169
Detection Strategy for Cloud Infrastructure Discovery
T1580
DET0449
Detection Strategy for Modify Cloud Compute Infrastructure: Create Cloud Instance
T1578.002
DET0084
Detection Strategy for Modify Cloud Compute Infrastructure: Delete Cloud Instance
T1578.003
×
load more results