{
  "technique_id": "T1526",
  "name": "Cloud Service Discovery",
  "tactics": [
    "Discovery"
  ],
  "platforms": [
    "IaaS",
    "Identity Provider",
    "Office Suite",
    "SaaS"
  ],
  "summary": "An adversary may attempt to enumerate the cloud services running on a system after gaining access. These methods can differ from platform-as-a-service (PaaS), to infrastructure-as-a-service (IaaS), or software-as-a-service (SaaS). Many services exist throughout the various cloud providers and can include Continuous Integration and Continuous Delivery (CI/CD), Lambda Functions, Entra ID, etc...",
  "generated_by": "SOC Response Atlas by Basyrix"
}