Skip to content


The discovery tactic consists of techniques that are used by attackers to explore the environment to which they gained access. This exploration helps the attackers to perform lateral movement and gain access to additional resources.

ID Name
MS-TA9029 Access Kubernetes API server
MS-TA9030 Access Kubelet API
MS-TA9031 Network mapping
MS-TA9005 Exposed sensitive interfaces
MS-TA9033 Instance Metadata API