DS0034 Volume
Block object storage hosted on-premise or by third-party providers, typically made available to resources as virtualized hard drives123
| Item | Value |
|---|---|
| ID | DS0034 |
| Platforms | IaaS, Linux, Windows, macOS |
| Collection Layers | Cloud Control Plane, Host |
| Version | 1.0 |
| Created | 20 October 2021 |
| Last Modified | 30 March 2022 |
Data Components
Volume Creation
Initial construction of a cloud volume (ex: AWS create-volume)
| Domain | ID | Name |
|---|---|---|
| enterprise | T1578 | Modify Cloud Compute Infrastructure |
Volume Deletion
Removal of a a cloud volume (ex: AWS delete-volume)
| Domain | ID | Name |
|---|---|---|
| enterprise | T1485 | Data Destruction |
| enterprise | T1578 | Modify Cloud Compute Infrastructure |
Volume Enumeration
An extracted list of available volumes within a cloud environment (ex: AWS describe-volumes)
| Domain | ID | Name |
|---|---|---|
| enterprise | T1580 | Cloud Infrastructure Discovery |
Volume Metadata
Contextual data about a cloud volume and activity around it, such as id, type, state, and size
| Domain | ID | Name |
|---|---|---|
| enterprise | T1578 | Modify Cloud Compute Infrastructure |
Volume Modification
Changes made to a cloud volume, including its settings and control data (ex: AWS modify-volume)
| Domain | ID | Name |
|---|---|---|
| enterprise | T1611 | Escape to Host |
| enterprise | T1578 | Modify Cloud Compute Infrastructure |