Image - DS0007 (1ac0ca69-e07e-4b34-9061-e4588e146c52)

A single file used to deploy a virtual machine/bootable disk into an on-premise or third-party cloud environment(Citation: Microsoft Image)(Citation: Amazon AMI)

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Image Metadata (b597a220-6510-4397-b0d8-342cd2c58827)	mitre-data-component	Image - DS0007 (1ac0ca69-e07e-4b34-9061-e4588e146c52)	mitre-data-source	1
Image Deletion (8b4ca854-ac08-47da-b24f-601b28a39aff)	mitre-data-component	Image - DS0007 (1ac0ca69-e07e-4b34-9061-e4588e146c52)	mitre-data-source	1
Image Modification (071a09b1-8945-46fd-8bb7-6bcc89400963)	mitre-data-component	Image - DS0007 (1ac0ca69-e07e-4b34-9061-e4588e146c52)	mitre-data-source	1
Image Creation (b008766d-f34f-4ded-b712-659f59aaed6e)	mitre-data-component	Image - DS0007 (1ac0ca69-e07e-4b34-9061-e4588e146c52)	mitre-data-source	1
Match Legitimate Name or Location - T1036.005 (1c4e5d32-1fe9-4116-9d9d-59e3925bd6a2)	Attack Pattern	Image Metadata (b597a220-6510-4397-b0d8-342cd2c58827)	mitre-data-component	2
Run Virtual Instance - T1564.006 (b5327dd1-6bf9-4785-a199-25bcbd1f4a9d)	Attack Pattern	Image Metadata (b597a220-6510-4397-b0d8-342cd2c58827)	mitre-data-component	2
Implant Internal Image - T1525 (4fd8a28b-4b3a-4cd6-a8cf-85ba5f824a7f)	Attack Pattern	Image Metadata (b597a220-6510-4397-b0d8-342cd2c58827)	mitre-data-component	2
Masquerading - T1036 (42e8de7b-37b2-4258-905a-6897815e58e0)	Attack Pattern	Image Metadata (b597a220-6510-4397-b0d8-342cd2c58827)	mitre-data-component	2
Data Destruction - T1485 (d45a3d09-b3cf-48f4-9f0f-f521ee5cb05c)	Attack Pattern	Image Deletion (8b4ca854-ac08-47da-b24f-601b28a39aff)	mitre-data-component	2
Image Modification (071a09b1-8945-46fd-8bb7-6bcc89400963)	mitre-data-component	Implant Internal Image - T1525 (4fd8a28b-4b3a-4cd6-a8cf-85ba5f824a7f)	Attack Pattern	2
Malicious Image - T1204.003 (b0c74ef9-c61e-4986-88cb-78da98a355ec)	Attack Pattern	Image Creation (b008766d-f34f-4ded-b712-659f59aaed6e)	mitre-data-component	2
User Execution - T1204 (8c32eb4d-805f-4fc5-bf60-c4d476c131b5)	Attack Pattern	Image Creation (b008766d-f34f-4ded-b712-659f59aaed6e)	mitre-data-component	2
Build Image on Host - T1612 (800f9819-7007-4540-a520-40e655876800)	Attack Pattern	Image Creation (b008766d-f34f-4ded-b712-659f59aaed6e)	mitre-data-component	2
Implant Internal Image - T1525 (4fd8a28b-4b3a-4cd6-a8cf-85ba5f824a7f)	Attack Pattern	Image Creation (b008766d-f34f-4ded-b712-659f59aaed6e)	mitre-data-component	2
Match Legitimate Name or Location - T1036.005 (1c4e5d32-1fe9-4116-9d9d-59e3925bd6a2)	Attack Pattern	Masquerading - T1036 (42e8de7b-37b2-4258-905a-6897815e58e0)	Attack Pattern	3
Hide Artifacts - T1564 (22905430-4901-4c2a-84f6-98243cb173f8)	Attack Pattern	Run Virtual Instance - T1564.006 (b5327dd1-6bf9-4785-a199-25bcbd1f4a9d)	Attack Pattern	3
User Execution - T1204 (8c32eb4d-805f-4fc5-bf60-c4d476c131b5)	Attack Pattern	Malicious Image - T1204.003 (b0c74ef9-c61e-4986-88cb-78da98a355ec)	Attack Pattern	3