Volume Creation

The initial provisioning of block storage volumes in cloud or on-prem environments, typically used for data storage, backup, or workload scaling.

ID: DC0097
Domains: Enterprise
Version: 2.0
Created: 20 October 2021
Last Modified: 12 November 2025

Log Sources

Name Channel
AWS:CloudTrail CreateVolume
WinEventLog:Microsoft-Windows-VSS Volume Shadow Copy Creation

Detection Strategy