DC0017 Cloud Storage Enumeration
| Item | Value |
|---|---|
| ID | DC0017 |
| Version | 2.0 |
| Created | 20 October 2021 |
| Last Modified | 12 November 2025 |
Log Sources
| Name | Channel |
|---|---|
| AWS:CloudTrail | ListBuckets |
| AWS:CloudTrail | ListObjectsV2 |
| azure:activity | List Blobs |
| gcp:storage | storage.objects.list |
Detection Strategy
| ID | Name | Technique Detected |
|---|---|---|
| DET0590 | Behavioral Detection of External Website Defacement across Platforms | T1491.002 |
| DET0169 | Detection Strategy for Cloud Infrastructure Discovery | T1580 |
| DET0578 | Detection Strategy for Cloud Storage Object Discovery | T1619 |