Hide Navigation Hide TOC Container Creation (a5ae90ca-0c4b-481c-959f-0eb18a7ff953) Initial construction of a new container (ex: docker create ) Cluster A Galaxy A Cluster B Galaxy B Level Create or Modify System Process - T1543 (106c0cf6-bf73-4601-9aa8-0945c2715ec5) Attack Pattern Container Creation (a5ae90ca-0c4b-481c-959f-0eb18a7ff953) mitre-data-component 1 Malicious Image - T1204.003 (b0c74ef9-c61e-4986-88cb-78da98a355ec) Attack Pattern Container Creation (a5ae90ca-0c4b-481c-959f-0eb18a7ff953) mitre-data-component 1 User Execution - T1204 (8c32eb4d-805f-4fc5-bf60-c4d476c131b5) Attack Pattern Container Creation (a5ae90ca-0c4b-481c-959f-0eb18a7ff953) mitre-data-component 1 Deploy Container - T1610 (56e0d8b8-3e25-49dd-9050-3aa252f5aa92) Attack Pattern Container Creation (a5ae90ca-0c4b-481c-959f-0eb18a7ff953) mitre-data-component 1 Container Service - T1543.005 (b0e54bf7-835e-4f44-bd8e-62f431b9b76a) Attack Pattern Container Creation (a5ae90ca-0c4b-481c-959f-0eb18a7ff953) mitre-data-component 1 Container Orchestration Job - T1053.007 (1126cab1-c700-412f-a510-61f4937bb096) Attack Pattern Container Creation (a5ae90ca-0c4b-481c-959f-0eb18a7ff953) mitre-data-component 1 Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9) Attack Pattern Container Creation (a5ae90ca-0c4b-481c-959f-0eb18a7ff953) mitre-data-component 1 Escape to Host - T1611 (4a5b7ade-8bb5-4853-84ed-23f262002665) Attack Pattern Container Creation (a5ae90ca-0c4b-481c-959f-0eb18a7ff953) mitre-data-component 1 User Execution - T1204 (8c32eb4d-805f-4fc5-bf60-c4d476c131b5) Attack Pattern Malicious Image - T1204.003 (b0c74ef9-c61e-4986-88cb-78da98a355ec) Attack Pattern 2 Create or Modify System Process - T1543 (106c0cf6-bf73-4601-9aa8-0945c2715ec5) Attack Pattern Container Service - T1543.005 (b0e54bf7-835e-4f44-bd8e-62f431b9b76a) Attack Pattern 2 Container Orchestration Job - T1053.007 (1126cab1-c700-412f-a510-61f4937bb096) Attack Pattern Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9) Attack Pattern 2