Detect Suspicious Cloud Instance Metadata Activities

An illustration shows a red flag with a DNS logo, surrounded by abstract cloud shapes against a blue sky. The text reads, “Upwind: Detect Suspicious Cloud Instance Metadata Activities.”.

We’re excited to release  a new detection type, allowing you to detect advanced metadata DNS rebind activities in real time. A metadata DNS rebind detection alerts you that a virtual machine or a container is querying a domain that resolves to the metadata service IP address (169.254.169.254).  What is Cloud Instance Metadata Service (IMDS)? When […]