mirror of
https://github.com/OTRF/OSSEM-DD
synced 2026-06-08 12:05:33 +00:00
Swann Legras
96 lines
2.4 KiB
YAML
96 lines
2.4 KiB
YAML
name: Ec2_instance_metadata Table
|
|
description: EC2 instance metadata.
|
|
platform: linux
|
|
log_source: osquery
|
|
event_id: ec2_instance_metadata
|
|
event_version: 4.4.2
|
|
event_fields:
|
|
- standard_name: TBD
|
|
standard_type: TBD
|
|
name: instance_id
|
|
type: TEXT
|
|
description: EC2 instance ID
|
|
sample_value: TBD
|
|
- standard_name: TBD
|
|
standard_type: TBD
|
|
name: instance_type
|
|
type: TEXT
|
|
description: EC2 instance type
|
|
sample_value: TBD
|
|
- standard_name: TBD
|
|
standard_type: TBD
|
|
name: architecture
|
|
type: TEXT
|
|
description: Hardware architecture of this EC2 instance
|
|
sample_value: TBD
|
|
- standard_name: TBD
|
|
standard_type: TBD
|
|
name: region
|
|
type: TEXT
|
|
description: AWS region in which this instance launched
|
|
sample_value: TBD
|
|
- standard_name: TBD
|
|
standard_type: TBD
|
|
name: availability_zone
|
|
type: TEXT
|
|
description: Availability zone in which this instance launched
|
|
sample_value: TBD
|
|
- standard_name: TBD
|
|
standard_type: TBD
|
|
name: local_hostname
|
|
type: TEXT
|
|
description: Private IPv4 DNS hostname of the first interface of this instance
|
|
sample_value: TBD
|
|
- standard_name: TBD
|
|
standard_type: TBD
|
|
name: local_ipv4
|
|
type: TEXT
|
|
description: Private IPv4 address of the first interface of this instance
|
|
sample_value: TBD
|
|
- standard_name: TBD
|
|
standard_type: TBD
|
|
name: mac
|
|
type: TEXT
|
|
description: MAC address for the first network interface of this EC2 instance
|
|
sample_value: TBD
|
|
- standard_name: TBD
|
|
standard_type: TBD
|
|
name: security_groups
|
|
type: TEXT
|
|
description: Comma separated list of security group names
|
|
sample_value: TBD
|
|
- standard_name: TBD
|
|
standard_type: TBD
|
|
name: iam_arn
|
|
type: TEXT
|
|
description: If there is an IAM role associated with the instance, contains instance profile ARN
|
|
sample_value: TBD
|
|
- standard_name: TBD
|
|
standard_type: TBD
|
|
name: ami_id
|
|
type: TEXT
|
|
description: AMI ID used to launch this EC2 instance
|
|
sample_value: TBD
|
|
- standard_name: TBD
|
|
standard_type: TBD
|
|
name: reservation_id
|
|
type: TEXT
|
|
description: ID of the reservation
|
|
sample_value: TBD
|
|
- standard_name: TBD
|
|
standard_type: TBD
|
|
name: account_id
|
|
type: TEXT
|
|
description: AWS account ID which owns this EC2 instance
|
|
sample_value: TBD
|
|
- standard_name: TBD
|
|
standard_type: TBD
|
|
name: ssh_public_key
|
|
type: TEXT
|
|
description: SSH public key. Only available if supplied at instance launch time
|
|
sample_value: TBD
|
|
references:
|
|
- text: OSQuery table documentation
|
|
link: https://osquery.io/schema/current#ec2_instance_metadata
|
|
tags: []
|