Insider Threat Matrix™Insider Threat Matrix™
  • ID: PR004.005
  • Created: 06th July 2026
  • Updated: 06th July 2026
  • Platforms: Oracle Cloud Infrastructure (OCI)Google Cloud Platform (GCP)Microsoft AzureAmazon Web Services (AWS)
  • MITRE ATT&CK®: T1530
  • Contributor: The ITM Team

Cloud Storage Exploration

A subject searches, browses, enumerates, or otherwise explores cloud storage resources to identify data of interest. This may include object storage buckets, containers, blobs, file shares, storage accounts, cloud-hosted folders, or storage-backed services within infrastructure-as-a-service, platform-as-a-service, or software-as-a-service environments.

 

Cloud storage exploration may occur through cloud management consoles, storage browsers, command-line tools, application programming interfaces, cloud shells, synchronization clients, or third-party administration tools. The subject may list storage locations, review object names and metadata, preview files, inspect access permissions, or identify repositories containing sensitive, regulated, operational, or commercially valuable data.