DISARMframeworks/generated_pages/counters/C00197.md

38 lines
1.0 KiB
Markdown
Raw Normal View History

# Counter C00197: remove suspicious accounts
* **Summary**: Standard reporting for false profiles (identity issues). Includes detecting hijacked accounts and reallocating them - if possible, back to original owners.
* **Playbooks**:
* **Metatechnique**: M005 - removal
* **Resources needed:** R003 - money
* **Belongs to tactic stage**: TA03
| Actor types | Sectors |
| ----------- | ------- |
| [A004 activist](../generated_pages/actortypes/A004.md) | S002 |
| [A031 social media platform adminstrator](../generated_pages/actortypes/A031.md) | S007 |
| Counters these Tactics |
| ---------------------- |
| Counters these Techniques |
| ------------------------- |
| [T0009 Create fake experts](../generated_pages/techniques/T0009.md) |
| [T0007 Create fake Social Media Profiles / Pages / Groups](../generated_pages/techniques/T0007.md) |
| [T0011 Hijack legitimate account](../generated_pages/techniques/T0011.md) |
| Seen in incidents |
| ----------------- |
DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW