Cloud Instance Metadata API
Adversaries may attempt to access the Cloud Instance Metadata API to collect credentials and other sensitive data. Most cloud service providers support a Cloud Instance Metadata API which is a service provided to running virtual instances that allows applications to access information about the running virtual instance. Available information generally includes name, security group, and additional metadata including sensitive data such as credentials and UserData scripts that may contain additio...
BY SOURCE
PROCEDURES (7)
Auto-extracted: 4 detections for unusual
Auto-extracted: 2 detections for azure
Auto-extracted: 1 detections for privilege
Auto-extracted: 1 detections for lateral
Auto-extracted: 1 detections for api
Auto-extracted: 1 detections for c2
Auto-extracted: 1 detections for privilege