T1552.005
Unsecured Credentials: Cloud Instance Metadata API
discovered 2026-06-01Probes AWS/Azure/GCP instance metadata endpoints (and Docker cgroup info) to harvest cloud role credentials and instance metadata.
View on MITRE ATT&CKProbes AWS/Azure/GCP instance metadata endpoints (and Docker cgroup info) to harvest cloud role credentials and instance metadata.
View on MITRE ATT&CKSafeDep keeps analytics anonymous and cookie-free until you opt in. Accepting helps us understand product usage and improve your experience. Privacy Policy
Choose what you share. You can change this anytime from the footer.
