| CPC H04L 9/088 (2013.01) [H04L 9/0822 (2013.01)] | 21 Claims | 

| 
               1. A method for inspecting virtual instances in a cloud computing environment for cybersecurity threats, comprising: 
            selecting a virtual instance in a cloud computing environment, wherein the virtual instance includes a disk having a disk descriptor with an address in a cloud storage system; 
                generating a cloned disk of the virtual instance by generating a cloned disk descriptor, the cloned disk descriptor having a data field including the address of the disk of the virtual instance; 
                inspecting the cloned disk for a cybersecurity object; and 
                releasing the cloned disk in response to completing the inspection of the cloned disk. 
               |