DISARMframeworks/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5bca3084-f5b0-48a8-934c-7f2c03bfd2c3.json

{
    "type": "bundle",
    "id": "bundle--74a6b91e-a11b-444c-8f76-968b1b1d815e",
    "objects": [
        {
            "type": "attack-pattern",
            "spec_version": "2.1",
            "id": "attack-pattern--5bca3084-f5b0-48a8-934c-7f2c03bfd2c3",
            "created_by_ref": "identity--f1a0f560-2d9e-4c5d-bf47-7e96e805de82",
            "created": "2023-09-25T16:17:56.689297Z",
            "modified": "2023-09-25T16:17:56.689297Z",
            "name": "Change Names of Information Assets",
            "description": "Changing names or brand names of information assets such as accounts, channels, pages etc. An operation may change the names or brand names of its assets throughout an operation to avoid detection or alter the names of newly acquired or repurposed assets to fit operational narratives.",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "mitre-attack",
                    "phase_name": "persist-in-the-information-environment"
                }
            ],
            "external_references": [
                {
                    "source_name": "mitre-attack",
                    "url": "https://github.com/DISARMFoundation/DISARMframeworks/blob/main/generated_pages/techniques/T0128.005.md",
                    "external_id": "T0128.005"
                }
            ],
            "object_marking_refs": [
                "marking-definition--f79f25d2-8b96-4580-b169-eb7b613a7c31"
            ],
            "x_mitre_is_subtechnique": true,
            "x_mitre_platforms": [
                "Windows",
                "Linux",
                "Mac"
            ],
            "x_mitre_version": "2.1"
        }
    ]
}