DISARMframeworks/generated_pages/counters/C00197.md

# Counter C00197: remove suspicious accounts

* **Summary**: Standard reporting for false profiles (identity issues).  Includes detecting hijacked accounts and reallocating them - if possible, back to original owners. 

* **Playbooks**: 

* **Metatechnique**: M005 - removal

* **Resources needed:** R003 - money

* **Belongs to tactic stage**: TA15


| Actor types | Sectors |
| ----------- | ------- |
| [A004 activist](../../generated_pages/actortypes/A004.md) | S002 |
| [A031 social media platform adminstrator](../../generated_pages/actortypes/A031.md) | S007 |


| Counters these Tactics |
| ---------------------- |


| Counters these Techniques |
| ------------------------- |
| [T0009 Create Fake Experts](../../generated_pages/techniques/T0009.md) |
| [T0007 Create Inauthentic Social Media Pages and Groups](../../generated_pages/techniques/T0007.md) |
| [T0011 Compromise Legitimate Accounts](../../generated_pages/techniques/T0011.md) |


| Seen in incidents |
| ----------------- |


DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW
Copy AMITT repository, clean up and rebrand Took a copy of the current AMITT github repository - we'll be updating this and merging the SPICE branch back in Rebranded to DISARM Moved generated pages to their own folder, to make looking at the repository less confusing 2022-01-29 11:34:46 -05:00			`# Counter C00197: remove suspicious accounts`

			`* Summary: Standard reporting for false profiles (identity issues). Includes detecting hijacked accounts and reallocating them - if possible, back to original owners.`

			`* Playbooks:`

			`* Metatechnique: M005 - removal`

			`* Resources needed: R003 - money`

Revisions to DISARM Framework 2022-06-30 23:30:18 -04:00			`* Belongs to tactic stage: TA15`
Copy AMITT repository, clean up and rebrand Took a copy of the current AMITT github repository - we'll be updating this and merging the SPICE branch back in Rebranded to DISARM Moved generated pages to their own folder, to make looking at the repository less confusing 2022-01-29 11:34:46 -05:00

			`\| Actor types \| Sectors \|`
			`\| ----------- \| ------- \|`
apply generated_pages_fudge to all the object markdown pages 2022-07-01 12:24:47 -04:00			`\| [A004 activist](../../generated_pages/actortypes/A004.md) \| S002 \|`
			`\| [A031 social media platform adminstrator](../../generated_pages/actortypes/A031.md) \| S007 \|`
Copy AMITT repository, clean up and rebrand Took a copy of the current AMITT github repository - we'll be updating this and merging the SPICE branch back in Rebranded to DISARM Moved generated pages to their own folder, to make looking at the repository less confusing 2022-01-29 11:34:46 -05:00


			`\| Counters these Tactics \|`
			`\| ---------------------- \|`



			`\| Counters these Techniques \|`
			`\| ------------------------- \|`
Amended technique names to MLA Title Case in following sheets: techniques, detections and countermeasures 2023-05-25 15:57:53 -04:00			`\| [T0009 Create Fake Experts](../../generated_pages/techniques/T0009.md) \|`
apply generated_pages_fudge to all the object markdown pages 2022-07-01 12:24:47 -04:00			`\| [T0007 Create Inauthentic Social Media Pages and Groups](../../generated_pages/techniques/T0007.md) \|`
Amended technique names to MLA Title Case in following sheets: techniques, detections and countermeasures 2023-05-25 15:57:53 -04:00			`\| [T0011 Compromise Legitimate Accounts](../../generated_pages/techniques/T0011.md) \|`
Copy AMITT repository, clean up and rebrand Took a copy of the current AMITT github repository - we'll be updating this and merging the SPICE branch back in Rebranded to DISARM Moved generated pages to their own folder, to make looking at the repository less confusing 2022-01-29 11:34:46 -05:00


			`\| Seen in incidents \|`
			`\| ----------------- \|`


			`DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW`