DC0062 Snapshot Metadata
| Item | Value |
|---|---|
| ID | DC0062 |
| Version | 2.0 |
| Created | 20 October 2021 |
| Last Modified | 21 October 2025 |
Log Sources
| Name | Channel |
|---|---|
| AWS:CloudTrail | DescribeSnapshots |
| AWS:CloudTrail | CopySnapshot |
| gcp:audit | compute.disks.insert with sourceSnapshot parameter |
Detection Strategy
| ID | Name | Technique Detected |
|---|---|---|
| DET0573 | Cross-Platform Detection of Data Transfer to Cloud Account | T1537 |
| DET0423 | Detection Strategy for Modify Cloud Compute Infrastructure: Create Snapshot | T1578.001 |