2022-02-20 15:37:38 -05:00
{
"type" : "bundle" ,
2022-06-30 23:30:18 -04:00
"id" : "bundle--72f0cf92-0ac6-4673-aa14-82f1684e4de3" ,
2022-02-20 15:37:38 -05:00
"objects" : [
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "x-mitre-tactic--ca848c76-3e2e-4059-a61f-dce4180b4710" ,
"created_by_ref" : "identity--579368bd-8440-4f8e-96c2-ad508b73a5e9" ,
"created" : "2022-07-01T03:29:17.091145Z" ,
"modified" : "2022-07-01T03:29:17.091145Z" ,
"name" : "Plan Strategy" ,
2022-02-20 15:37:38 -05:00
"description" : "Define the desired end state, i.e. the set of required conditions that defines achievement of all objectives." ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA01.md" ,
"external_id" : "TA01"
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--d12db0e6-fa29-41c5-b43e-a46d0618d61c"
2022-02-20 15:37:38 -05:00
] ,
2022-06-30 23:30:18 -04:00
"x_mitre_shortname" : "plan-strategy"
2022-02-20 15:37:38 -05:00
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "x-mitre-tactic--eec7c49a-35c0-4ed2-9161-f7dba316a609" ,
"created_by_ref" : "identity--7b955472-f8e6-4b82-8c31-300defa2ff1d" ,
"created" : "2022-07-01T03:29:17.091699Z" ,
"modified" : "2022-07-01T03:29:17.091699Z" ,
"name" : "Plan Objectives" ,
"description" : "Set clearly defined, measurable, and achievable objectives. Achieving objectives ties execution of tactical tasks to reaching the desired end state. There are four primary considerations: \n- Each desired effect should link directly to one or more objectives \n- The effect should be measurable \n- The objective statement should not specify the way and means of accomplishment \n- The effect should be distinguishable from the objective it supports as a condition for success, not as another objective or task." ,
2022-02-20 15:37:38 -05:00
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA02.md" ,
"external_id" : "TA02"
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--efbc7fb0-9eca-4e7c-b2e7-c22aea404a22"
2022-02-20 15:37:38 -05:00
] ,
2022-06-30 23:30:18 -04:00
"x_mitre_shortname" : "plan-objectives"
2022-02-20 15:37:38 -05:00
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "x-mitre-tactic--e749a24c-8362-4fed-ba26-51e56b37b439" ,
"created_by_ref" : "identity--a8a35a10-0c6d-48ab-9642-0d968a0e6579" ,
"created" : "2022-07-01T03:29:17.092239Z" ,
"modified" : "2022-07-01T03:29:17.092239Z" ,
"name" : "Microtarget" ,
"description" : "Target very specific populations of people" ,
2022-02-20 15:37:38 -05:00
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA05.md" ,
"external_id" : "TA05"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--9e9c4039-2734-451e-9eae-14bfee5150c5"
2022-02-20 15:37:38 -05:00
] ,
2022-06-30 23:30:18 -04:00
"x_mitre_shortname" : "microtarget"
2022-02-20 15:37:38 -05:00
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "x-mitre-tactic--4348a49d-d21a-4915-a512-ba1accaa8cd9" ,
"created_by_ref" : "identity--ebae25a4-b31b-40c4-b26f-c603911318b6" ,
"created" : "2022-07-01T03:29:17.092712Z" ,
"modified" : "2022-07-01T03:29:17.092712Z" ,
"name" : "Develop Content" ,
"description" : "TBD" ,
2022-02-20 15:37:38 -05:00
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA06.md" ,
"external_id" : "TA06"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--f6a72729-0ae7-401c-b0c0-8f97fa40e86e"
2022-02-20 15:37:38 -05:00
] ,
2022-06-30 23:30:18 -04:00
"x_mitre_shortname" : "develop-content"
2022-02-20 15:37:38 -05:00
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "x-mitre-tactic--7c9b3fa5-50f8-4fab-acc3-f984b7290cd7" ,
"created_by_ref" : "identity--68919beb-b367-4f0d-b473-7c1ef2f7cc41" ,
"created" : "2022-07-01T03:29:17.093161Z" ,
"modified" : "2022-07-01T03:29:17.093161Z" ,
"name" : "Select Channels and Affordances" ,
"description" : "Selecting platforms and affordances assesses which online or offline platforms and their associated affordances maximize an influence operation\u2019s ability to reach its target audience. To select the most appropriate platform(s), an operation may assess the technological affordances including platform algorithms, terms of service, permitted content types, or other attributes that determine platform usability and accessibility. Selecting platforms includes both choosing platforms on which the operation will publish its own content and platforms on which the operation will attempt to restrict adversarial content." ,
2022-02-20 15:37:38 -05:00
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA07.md" ,
"external_id" : "TA07"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--a3ba48a6-8927-4416-8923-070e7b66d99b"
2022-02-20 15:37:38 -05:00
] ,
2022-06-30 23:30:18 -04:00
"x_mitre_shortname" : "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "x-mitre-tactic--f59414c8-2d4d-4d9e-8d88-fe8a339270d1" ,
"created_by_ref" : "identity--957e8ee3-66c0-4c39-81ab-bc8f197dc060" ,
"created" : "2022-07-01T03:29:17.093615Z" ,
"modified" : "2022-07-01T03:29:17.093615Z" ,
"name" : "Conduct Pump Priming" ,
"description" : "Release content on a targetted small scale, prior to general release, including releasing seed. Used for preparation before broader release, and as message honing. Used for preparation before broader release, and as message honing. " ,
2022-02-20 15:37:38 -05:00
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA08.md" ,
"external_id" : "TA08"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--8f98688d-973b-4d80-a055-eef509cafa92"
2022-02-20 15:37:38 -05:00
] ,
2022-06-30 23:30:18 -04:00
"x_mitre_shortname" : "conduct-pump-priming"
2022-02-20 15:37:38 -05:00
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "x-mitre-tactic--717ccb01-df67-48a8-b6ec-9551272a4ff4" ,
"created_by_ref" : "identity--89b633d0-6026-4f5a-b937-96c110081e4b" ,
"created" : "2022-07-01T03:29:17.094056Z" ,
"modified" : "2022-07-01T03:29:17.094056Z" ,
"name" : "Deliver Content" ,
"description" : "Release content to general public or larger population" ,
2022-02-20 15:37:38 -05:00
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA09.md" ,
"external_id" : "TA09"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--7b7d7a4a-d135-432c-b8e8-d758ec6aaabe"
2022-02-20 15:37:38 -05:00
] ,
2022-06-30 23:30:18 -04:00
"x_mitre_shortname" : "deliver-content"
2022-02-20 15:37:38 -05:00
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "x-mitre-tactic--b2ad03fa-b162-4161-b864-344f9cb69ad3" ,
"created_by_ref" : "identity--ef082dc6-c5d4-4f34-839a-afb81676681d" ,
"created" : "2022-07-01T03:29:17.094502Z" ,
"modified" : "2022-07-01T03:29:17.094502Z" ,
"name" : "Drive Offline Activity" ,
"description" : "Move incident/campaign from online to offline. Encouraging users to move from the platform on which they initially viewed operation content and engage in the physical information space or offline world. This may include operation-aligned rallies or protests, radio, newspaper, or billboards. An influence operation may drive to physical forums to diversify its information channels and facilitate spaces where the target audience can engage with both operation content and like-minded individuals offline. " ,
2022-02-20 15:37:38 -05:00
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA10.md" ,
"external_id" : "TA10"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--6c20ec26-a68f-4ea4-87e7-0f4c3d1dc466"
2022-02-20 15:37:38 -05:00
] ,
2022-06-30 23:30:18 -04:00
"x_mitre_shortname" : "drive-offline-activity"
2022-02-20 15:37:38 -05:00
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "x-mitre-tactic--efddae0c-df65-48be-a7a4-067237d8a528" ,
"created_by_ref" : "identity--2d057bc4-00f4-42ed-b56d-f441f58c0224" ,
"created" : "2022-07-01T03:29:17.0951Z" ,
"modified" : "2022-07-01T03:29:17.0951Z" ,
"name" : "Persist in the Information Environment" ,
"description" : "Persist in the Information Space refers to taking measures that allow an operation to maintain its presence and avoid takedown by an external entity. Techniques in Persist in the Information Space help campaigns operate without detection and appear legitimate to the target audience and platform monitoring services. Influence operations on social media often persist online by varying the type of information assets and platforms used throughout the campaign." ,
2022-02-20 15:37:38 -05:00
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA11.md" ,
"external_id" : "TA11"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--7e8d9bd0-001f-45d2-aa7f-a57b18f3df70"
2022-02-20 15:37:38 -05:00
] ,
2022-06-30 23:30:18 -04:00
"x_mitre_shortname" : "persist-in-the-information-environment"
2022-02-20 15:37:38 -05:00
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "x-mitre-tactic--96ec7676-22a8-40f8-91f9-2b770fec3a78" ,
"created_by_ref" : "identity--2390bb84-1e20-4e06-beb8-f61631529f6f" ,
"created" : "2022-07-01T03:29:17.095552Z" ,
"modified" : "2022-07-01T03:29:17.095552Z" ,
"name" : "Assess Effectiveness" ,
"description" : "Assess effectiveness of action, for use in future plans " ,
2022-02-20 15:37:38 -05:00
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA12.md" ,
"external_id" : "TA12"
}
] ,
"object_marking_refs" : [
"marking-definition--8b21940e-5b88-4d9f-9708-d69f7b827cf4"
] ,
"x_mitre_shortname" : "assess-effectiveness"
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
"id" : "x-mitre-tactic--10b904db-7568-4a50-bf6f-9541f3b01924" ,
"created_by_ref" : "identity--2a9898a9-5d27-4f77-90d6-81cb400c7dc0" ,
"created" : "2022-07-01T03:29:17.096002Z" ,
"modified" : "2022-07-01T03:29:17.096002Z" ,
"name" : "Target Audience Analysis" ,
"description" : "Identifying and analyzing the target audience examines target audience member locations, political affiliations, financial situations, and other attributes that an influence operation may incorporate into its messaging strategy. During this tactic, influence operations may also identify existing similarities and differences between target audience members to unite like groups and divide opposing groups. Identifying and analyzing target audience members allows influence operations to tailor operation strategy and content to their analysis. " ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA13.md" ,
"external_id" : "TA13"
}
] ,
"object_marking_refs" : [
"marking-definition--32769669-4b13-4c4b-89c6-e877a011fa61"
] ,
"x_mitre_shortname" : "target-audience-analysis"
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
"id" : "x-mitre-tactic--977b0d14-c42a-4f3e-badb-fdabb9781544" ,
"created_by_ref" : "identity--4fdd4e7b-3b3e-425e-847f-dc5f200fb7cf" ,
"created" : "2022-07-01T03:29:17.096467Z" ,
"modified" : "2022-07-01T03:29:17.096467Z" ,
"name" : "Develop Narratives" ,
"description" : "The promotion of beneficial master narratives is perhaps the most effective method for achieving long-term strategic narrative dominance. From a \"\"whole of society\"\" perspective the promotion of the society's core master narratives should occupy a central strategic role. From a misinformation campaign / cognitive security perpectve the tactics around master narratives center more precisely on the day-to-day promotion and reinforcement of this messaging. In other words, beneficial, high-coverage master narratives are a central strategic goal and their promotion constitutes an ongoing tactical struggle carried out at a whole-of-society level. Tactically, their promotion covers a broad spectrum of activities both on- and offline." ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA14.md" ,
"external_id" : "TA14"
}
] ,
"object_marking_refs" : [
"marking-definition--369927eb-a5a4-4672-a0d0-88d758feed9d"
] ,
"x_mitre_shortname" : "develop-narratives"
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
"id" : "x-mitre-tactic--5d068e30-413a-4465-b51b-8e9fc1e18b1e" ,
"created_by_ref" : "identity--e6b10b3f-81f4-4f5d-a61b-6ba6d32a927c" ,
"created" : "2022-07-01T03:29:17.096916Z" ,
"modified" : "2022-07-01T03:29:17.096916Z" ,
"name" : "Establish Social Assets" ,
"description" : "Establishing information assets generates messaging tools, including social media accounts, operation personnel, and organizations, including directly and indirectly managed assets. For assets under their direct control, the operation can add, change, or remove these assets at will. \nEstablishing information assets allows an influence operation to promote messaging directly to the target audience without navigating through external entities. Many online influence operations create or compromise social media accounts as a primary vector of information dissemination." ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA15.md" ,
"external_id" : "TA15"
}
] ,
"object_marking_refs" : [
"marking-definition--67f09a98-95d6-47d0-87b8-7499972e7685"
] ,
"x_mitre_shortname" : "establish-social-assets"
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
"id" : "x-mitre-tactic--60087ffe-9390-4baf-8e93-20b3f075da8e" ,
"created_by_ref" : "identity--3c5779ae-e3d8-4248-abd3-fd7bf16fe311" ,
"created" : "2022-07-01T03:29:17.097362Z" ,
"modified" : "2022-07-01T03:29:17.097362Z" ,
"name" : "Establish Legitimacy" ,
"description" : "TBD" ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA16.md" ,
"external_id" : "TA16"
}
] ,
"object_marking_refs" : [
"marking-definition--8309d1c8-87a1-4323-967b-7216161d998d"
] ,
"x_mitre_shortname" : "establish-legitimacy"
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
"id" : "x-mitre-tactic--c4e65fa5-4f02-4075-b26f-07c0d07badaa" ,
"created_by_ref" : "identity--9ce26eb7-7607-4333-b84b-6b0e2cd074a3" ,
"created" : "2022-07-01T03:29:17.097809Z" ,
"modified" : "2022-07-01T03:29:17.097809Z" ,
"name" : "Maximize Exposure" ,
"description" : "Maximize exposure of the target audience to incident/campaign content via flooding, amplifying, and cross-posting." ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA17.md" ,
"external_id" : "TA17"
}
] ,
"object_marking_refs" : [
"marking-definition--75ce5799-1b91-4be6-8427-d41dc3c3b8b2"
] ,
"x_mitre_shortname" : "maximize-exposure"
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
"id" : "x-mitre-tactic--2fad8829-108a-4d6a-8135-6bc3bf74a770" ,
"created_by_ref" : "identity--62fae23f-94ca-47ca-a703-4e203716b2f5" ,
"created" : "2022-07-01T03:29:17.098423Z" ,
"modified" : "2022-07-01T03:29:17.098423Z" ,
"name" : "Drive Online Harms" ,
"description" : "Actions taken by an influence operation to harm their opponents in online spaces through harassment, suppression, releasing private information, and controlling the information space through offensive cyberspace operations. " ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA18.md" ,
"external_id" : "TA18"
}
] ,
"object_marking_refs" : [
"marking-definition--885c611a-01f1-4456-9415-81dacb2de148"
] ,
"x_mitre_shortname" : "drive-online-harms"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--83124e9f-4981-445c-aa20-b7a3990c18ab" ,
"created_by_ref" : "identity--e5631f8e-4441-44b0-98de-44cef0359a06" ,
"created" : "2022-07-01T03:29:17.099228Z" ,
"modified" : "2022-07-01T03:29:17.099228Z" ,
"name" : "Facilitate State Propaganda" ,
"description" : "TA02" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "plan-objectives"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0002.md" ,
"external_id" : "T0002"
}
] ,
"object_marking_refs" : [
"marking-definition--27285727-7410-4083-a6b1-94d53ac3486a"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--9164934b-19e2-4516-a792-5d5f08b06d34" ,
"created_by_ref" : "identity--396f6b80-8694-4493-9336-c4037a980f18" ,
"created" : "2022-07-01T03:29:17.099805Z" ,
"modified" : "2022-07-01T03:29:17.099805Z" ,
"name" : "Leverage Existing Narratives" ,
"description" : "TA14" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-narratives"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0003.md" ,
"external_id" : "T0003"
}
] ,
"object_marking_refs" : [
"marking-definition--745557fb-5156-4f7d-bfe4-184c9c076280"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--fd260e6a-7b36-4c30-9a12-29745ec85672" ,
"created_by_ref" : "identity--19e9d8d8-0dd2-42aa-a34e-17adc2be525f" ,
"created" : "2022-07-01T03:29:17.100339Z" ,
"modified" : "2022-07-01T03:29:17.100339Z" ,
"name" : "Develop Competing Narratives" ,
"description" : "TA14" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-narratives"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0004.md" ,
"external_id" : "T0004"
}
] ,
"object_marking_refs" : [
"marking-definition--4ea9cf26-90ed-4b44-8a0d-43af22149baa"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--10d0a71b-b7b0-4b59-812b-6a9f859094b1" ,
"created_by_ref" : "identity--949ff029-9578-4d91-8428-1f38178d59b2" ,
"created" : "2022-07-01T03:29:17.100806Z" ,
"modified" : "2022-07-01T03:29:17.100806Z" ,
"name" : "Create Inauthentic Social Media Pages and Groups" ,
"description" : "TA15" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "establish-social-assets"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0007.md" ,
"external_id" : "T0007"
}
] ,
"object_marking_refs" : [
"marking-definition--d545e516-526f-47bc-a99e-3aa1cac2287a"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--4e5ff619-85fd-4d36-a3c4-9a400c8cbfe5" ,
"created_by_ref" : "identity--53e04b17-377e-45d2-b176-3294849546cc" ,
"created" : "2022-07-01T03:29:17.101267Z" ,
"modified" : "2022-07-01T03:29:17.101267Z" ,
"name" : "Create fake experts" ,
"description" : "TA16" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "establish-legitimacy"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0009.md" ,
"external_id" : "T0009"
}
] ,
"object_marking_refs" : [
"marking-definition--b0ce9dfe-3859-4529-b404-babf37771f31"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--e3011cc8-6ecc-4cbd-8827-15feef09bfc5" ,
"created_by_ref" : "identity--e2679b1b-d851-427f-8c2b-0c8269f6156e" ,
"created" : "2022-07-01T03:29:17.101731Z" ,
"modified" : "2022-07-01T03:29:17.101731Z" ,
"name" : "Cultivate ignorant agents" ,
"description" : "TA15" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "establish-social-assets"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0010.md" ,
"external_id" : "T0010"
}
] ,
"object_marking_refs" : [
"marking-definition--65e1b90e-5ed8-45b5-8831-99b8a6f56cfa"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--ce2ffeb8-df39-425b-992e-57d0b11174ca" ,
"created_by_ref" : "identity--2a6fb1d5-2fd2-46be-bf0a-2b7735791652" ,
"created" : "2022-07-01T03:29:17.102189Z" ,
"modified" : "2022-07-01T03:29:17.102189Z" ,
"name" : "Compromise legitimate accounts" ,
"description" : "TA16" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "establish-legitimacy"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0011.md" ,
"external_id" : "T0011"
}
] ,
"object_marking_refs" : [
"marking-definition--c64ec293-b524-48c2-8e90-1359a1052d21"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--1397f207-ad1b-4398-9d06-ed36393d53fa" ,
"created_by_ref" : "identity--e7a9ac1f-d1b0-4a3f-af61-e546ca3ae445" ,
"created" : "2022-07-01T03:29:17.102645Z" ,
"modified" : "2022-07-01T03:29:17.102645Z" ,
"name" : "Create inauthentic websites" ,
"description" : "TA15" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "establish-social-assets"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0013.md" ,
"external_id" : "T0013"
}
] ,
"object_marking_refs" : [
"marking-definition--c91f7963-b220-47db-8707-c034998735ce"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--8ca19a73-b5e2-4715-bb61-7f27777e14b1" ,
"created_by_ref" : "identity--efb531aa-da43-4bd3-b767-47d2fdfb3c3f" ,
"created" : "2022-07-01T03:29:17.10311Z" ,
"modified" : "2022-07-01T03:29:17.10311Z" ,
"name" : "Prepare fundraising campaigns" ,
"description" : "TA15" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "establish-social-assets"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0014.md" ,
"external_id" : "T0014"
}
] ,
"object_marking_refs" : [
"marking-definition--5e84c2ef-d66e-4d32-b59b-524af19cdcce"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--0f8410d6-0ede-4e4f-8b70-d8a6821d25b0" ,
"created_by_ref" : "identity--ba81db1f-626f-46c3-bb99-f88a11819af7" ,
"created" : "2022-07-01T03:29:17.103569Z" ,
"modified" : "2022-07-01T03:29:17.103569Z" ,
"name" : "Create hashtags and search artifacts" ,
"description" : "TA06" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0015.md" ,
"external_id" : "T0015"
}
] ,
"object_marking_refs" : [
"marking-definition--e25c36d4-b84a-48e3-9d85-8cd8b333f755"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--77789dad-9435-4866-a083-4dbc0a456727" ,
"created_by_ref" : "identity--6dbc3bb6-bfb1-4814-a642-e84b19de7b32" ,
"created" : "2022-07-01T03:29:17.104029Z" ,
"modified" : "2022-07-01T03:29:17.104029Z" ,
"name" : "Create Clickbait" ,
"description" : "TA05" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "microtarget"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0016.md" ,
"external_id" : "T0016"
}
] ,
"object_marking_refs" : [
"marking-definition--9df75d1a-d0a1-4531-b34d-f16b54d677be"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--86e913cc-f722-4f2e-a2df-150ade9d0726" ,
"created_by_ref" : "identity--778425bc-e2fc-4e82-9f10-74e98082be43" ,
"created" : "2022-07-01T03:29:17.104489Z" ,
"modified" : "2022-07-01T03:29:17.104489Z" ,
"name" : "Conduct fundraising" ,
"description" : "TA10" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "drive-offline-activity"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0017.md" ,
"external_id" : "T0017"
}
] ,
"object_marking_refs" : [
"marking-definition--6e5bb1e1-f5ac-42b6-b078-fe3292fa9eb1"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--e46945d5-536e-4d6f-9a46-0f9b6007112d" ,
"created_by_ref" : "identity--2b797c80-0029-4570-8ec4-d8968e972294" ,
"created" : "2022-07-01T03:29:17.104944Z" ,
"modified" : "2022-07-01T03:29:17.104944Z" ,
"name" : "Purchase Targeted Advertisements" ,
"description" : "TA05" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "microtarget"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0018.md" ,
"external_id" : "T0018"
}
] ,
"object_marking_refs" : [
"marking-definition--1cc4f334-81f1-4aa5-94a5-cc8ecdecb207"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--33acdd6d-93eb-4aaf-9e00-4691814bcc88" ,
"created_by_ref" : "identity--c67ea4eb-798d-43ad-b13e-b10aedfd81a2" ,
"created" : "2022-07-01T03:29:17.105397Z" ,
"modified" : "2022-07-01T03:29:17.105397Z" ,
"name" : "Generate information pollution" ,
"description" : "TA06" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0019.md" ,
"external_id" : "T0019"
}
] ,
"object_marking_refs" : [
"marking-definition--c157d07b-43b6-4b2f-aee8-a335fef9a052"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--adee13dd-8bd5-4738-91b1-3997cf7bd994" ,
"created_by_ref" : "identity--6edc8264-41c1-46ae-8a0e-6090e4211029" ,
"created" : "2022-07-01T03:29:17.10585Z" ,
"modified" : "2022-07-01T03:29:17.10585Z" ,
"name" : "Trial content" ,
"description" : "TA08" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "conduct-pump-priming"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0020.md" ,
"external_id" : "T0020"
}
] ,
"object_marking_refs" : [
"marking-definition--f4cdda6a-56d0-45ea-84b2-3fc6aa953f27"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--b725fa2e-779d-44e5-a0f4-4724d14b6deb" ,
"created_by_ref" : "identity--ec724bf6-a7e7-4496-8a1e-fa9e4cf5c8a4" ,
"created" : "2022-07-01T03:29:17.106312Z" ,
"modified" : "2022-07-01T03:29:17.106312Z" ,
"name" : "Leverage Conspiracy Theory Narratives" ,
"description" : "TA14" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-narratives"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0022.md" ,
"external_id" : "T0022"
}
] ,
"object_marking_refs" : [
"marking-definition--8d89ab9d-c93f-4f24-9f64-c117bbc52cf0"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--66064bf0-d00b-490e-b6f2-3e07baf1a830" ,
"created_by_ref" : "identity--b33bfbf5-ecf8-4423-bbb2-4b53d30975e9" ,
"created" : "2022-07-01T03:29:17.106773Z" ,
"modified" : "2022-07-01T03:29:17.106773Z" ,
"name" : "Distort facts" ,
"description" : "TA06" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0023.md" ,
"external_id" : "T0023"
}
] ,
"object_marking_refs" : [
"marking-definition--e34375e0-40a4-44ad-8528-8ad89576aa4f"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--5cc3ca96-5655-4238-8d76-9e212bbae9ec" ,
"created_by_ref" : "identity--58d52260-ef12-4246-ad63-ad69b0360e98" ,
"created" : "2022-07-01T03:29:17.107233Z" ,
"modified" : "2022-07-01T03:29:17.107233Z" ,
"name" : "Online polls" ,
"description" : "TA07" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "select-channels-and-affordances"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0029.md" ,
"external_id" : "T0029"
}
] ,
"object_marking_refs" : [
"marking-definition--3da6cf9d-1ce4-4f2e-b6d4-1923b709345d"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--eb6d2cf6-e0cd-446b-a1f3-2cd7b8f20162" ,
"created_by_ref" : "identity--10d05fd9-175e-477e-b416-1e4d9cbab465" ,
"created" : "2022-07-01T03:29:17.107697Z" ,
"modified" : "2022-07-01T03:29:17.107697Z" ,
"name" : "Bait legitimate influencers" ,
"description" : "TA08" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "conduct-pump-priming"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0039 .md" ,
"external_id" : "T0039 "
}
] ,
"object_marking_refs" : [
"marking-definition--24c4802c-ba22-42ec-8d8b-007d95cafea0"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--be4cb928-74dd-4243-bae4-c1bb10540fcc" ,
"created_by_ref" : "identity--0f426ba3-e76e-45e4-8e42-3fca3f75d09a" ,
"created" : "2022-07-01T03:29:17.10816Z" ,
"modified" : "2022-07-01T03:29:17.10816Z" ,
"name" : "Demand insurmountable proof" ,
"description" : "TA14" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-narratives"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0040.md" ,
"external_id" : "T0040"
}
] ,
"object_marking_refs" : [
"marking-definition--813c3ad8-34c8-488c-b3f7-7cf05abb3f41"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--670a229b-d2b3-40ae-8684-32ed5253fa30" ,
"created_by_ref" : "identity--7fc9ce06-d085-4bbc-98eb-7c160b29c799" ,
"created" : "2022-07-01T03:29:17.108618Z" ,
"modified" : "2022-07-01T03:29:17.108618Z" ,
"name" : "Seed Kernel of truth" ,
"description" : "TA08" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "conduct-pump-priming"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0042.md" ,
"external_id" : "T0042"
}
] ,
"object_marking_refs" : [
"marking-definition--f0fdf08b-0e76-4424-abc5-18a83861904d"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--474442df-9662-4d6a-8936-1bf7a71f4118" ,
"created_by_ref" : "identity--3d6ad857-87da-4328-b5bb-734f0be9f047" ,
"created" : "2022-07-01T03:29:17.109075Z" ,
"modified" : "2022-07-01T03:29:17.109075Z" ,
"name" : "Chat apps" ,
"description" : "TA07" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "select-channels-and-affordances"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0043.md" ,
"external_id" : "T0043"
}
] ,
"object_marking_refs" : [
"marking-definition--f00e21f3-820b-458d-a385-e8cb7cec337c"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--976326b8-9bb8-4762-bf85-2e463a534f80" ,
"created_by_ref" : "identity--72e1d4d3-1b4f-40cb-8486-7fa17d59d4fe" ,
"created" : "2022-07-01T03:29:17.109537Z" ,
"modified" : "2022-07-01T03:29:17.109537Z" ,
"name" : "Seed distortions" ,
"description" : "TA08" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "conduct-pump-priming"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0044.md" ,
"external_id" : "T0044"
}
] ,
"object_marking_refs" : [
"marking-definition--8aee4ccb-7e2e-462f-8ae7-41f424c8c8f4"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--7ae144a2-3b79-4740-b651-2d24c2c1a4b1" ,
"created_by_ref" : "identity--649e1891-37f6-459c-87d9-bc02129f0023" ,
"created" : "2022-07-01T03:29:17.109986Z" ,
"modified" : "2022-07-01T03:29:17.109986Z" ,
"name" : "Use fake experts" ,
"description" : "TA08" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "conduct-pump-priming"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0045.md" ,
"external_id" : "T0045"
}
] ,
"object_marking_refs" : [
"marking-definition--a086a228-95e2-4a73-8f45-73bc6df77063"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
"id" : "attack-pattern--6427ef0d-29ee-4b97-a3c6-db7595938187" ,
"created_by_ref" : "identity--52aa5c8b-baa0-4b4b-81dc-3b0337180f85" ,
"created" : "2022-07-01T03:29:17.11044Z" ,
"modified" : "2022-07-01T03:29:17.11044Z" ,
"name" : "Use Search Engine Optimization" ,
"description" : "TA08" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "conduct-pump-priming"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0046.md" ,
"external_id" : "T0046"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--e1cbfcdc-3d0b-4a0f-8924-0b60f6e7db54"
2022-02-20 15:37:38 -05:00
] ,
2022-06-30 23:30:18 -04:00
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
2022-02-20 15:37:38 -05:00
} ,
{
2022-06-30 23:30:18 -04:00
"type" : "attack-pattern" ,
2022-02-20 15:37:38 -05:00
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--8e05e3e1-beaa-49b9-a2f1-7200d363a900" ,
"created_by_ref" : "identity--cd267b72-9ade-4cb3-816d-db8785ecbccd" ,
"created" : "2022-07-01T03:29:17.110895Z" ,
"modified" : "2022-07-01T03:29:17.110895Z" ,
"name" : "Censor social media as a political force" ,
"description" : "TA18" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "drive-online-harms"
}
] ,
2022-02-20 15:37:38 -05:00
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0047.md" ,
"external_id" : "T0047"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--054e01ae-7378-415b-85cc-7f3751559c03"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
2022-02-20 15:37:38 -05:00
] ,
2022-06-30 23:30:18 -04:00
"x_mitre_version" : "1,0"
2022-02-20 15:37:38 -05:00
} ,
{
2022-06-30 23:30:18 -04:00
"type" : "attack-pattern" ,
2022-02-20 15:37:38 -05:00
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--d053b450-19a8-44c7-a847-6fd11ba6f69a" ,
"created_by_ref" : "identity--54dddb49-ea23-4b28-959d-d68f3ffe6964" ,
"created" : "2022-07-01T03:29:17.111351Z" ,
"modified" : "2022-07-01T03:29:17.111351Z" ,
"name" : "Harass" ,
"description" : "TA18" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "drive-online-harms"
}
] ,
2022-02-20 15:37:38 -05:00
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0048.md" ,
"external_id" : "T0048"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--53bfe890-fcbd-4e0a-a085-76874996797a"
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
2022-02-20 15:37:38 -05:00
] ,
2022-06-30 23:30:18 -04:00
"x_mitre_version" : "1,0"
2022-02-20 15:37:38 -05:00
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--68bcc375-48d3-4efe-aa6b-dc94b2c9be3b" ,
"created_by_ref" : "identity--c12463fb-d446-4d46-86d8-187a9ccd523e" ,
"created" : "2022-07-01T03:29:17.111805Z" ,
"modified" : "2022-07-01T03:29:17.111805Z" ,
"name" : "Flooding the Information Space" ,
"description" : "TA17" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "maximize-exposure"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0049.md" ,
"external_id" : "T0049"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--ce5228d1-307d-4b48-99bd-dc5f8baf0157"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--5ced2330-8d58-4417-8ae3-ce66cabb513c" ,
"created_by_ref" : "identity--6edd4070-0d58-4fcb-a92c-1cd606b1e372" ,
"created" : "2022-07-01T03:29:17.112292Z" ,
"modified" : "2022-07-01T03:29:17.112292Z" ,
"name" : "Organize Events" ,
"description" : "TA10" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "drive-offline-activity"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0057.md" ,
"external_id" : "T0057"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--b4a225e6-c764-4dc7-907a-91c3b332d65d"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--08850f6c-e006-4c4f-886b-c904d8fb77f5" ,
"created_by_ref" : "identity--2f19463e-0d5e-4578-a45f-ecef828a771b" ,
"created" : "2022-07-01T03:29:17.11275Z" ,
"modified" : "2022-07-01T03:29:17.11275Z" ,
"name" : "Play the long game" ,
"description" : "TA11" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "persist-in-the-information-environment"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0059.md" ,
"external_id" : "T0059"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--02d2bd8f-5650-473c-b7b8-7c42a13c9820"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--b499ae71-92f2-41b4-94f1-a3c061a96871" ,
"created_by_ref" : "identity--7c5a1256-d940-4fd2-ab27-0072959a20bd" ,
"created" : "2022-07-01T03:29:17.113212Z" ,
"modified" : "2022-07-01T03:29:17.113212Z" ,
"name" : "Continue to Amplify" ,
"description" : "TA11" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "persist-in-the-information-environment"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0060.md" ,
"external_id" : "T0060"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--31e37208-2a7d-43c4-b831-7e3462c2b2ee"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--0590dab3-9ceb-4b71-9187-8847ed98f0c5" ,
"created_by_ref" : "identity--81fccebf-8fd2-4369-b6d8-eb7bc5a94dc4" ,
"created" : "2022-07-01T03:29:17.113675Z" ,
"modified" : "2022-07-01T03:29:17.113675Z" ,
"name" : "Sell Merchandise" ,
"description" : "TA10" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "drive-offline-activity"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0061.md" ,
"external_id" : "T0061"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--ef2c3e54-f8ba-4edc-8460-be63c6cfc8c7"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--c50c3595-ae68-4e13-8b76-40359cd0846a" ,
"created_by_ref" : "identity--24f42049-ba0d-4bc3-8a8a-1121fb44228c" ,
"created" : "2022-07-01T03:29:17.114138Z" ,
"modified" : "2022-07-01T03:29:17.114138Z" ,
"name" : "Prepare Physical Broadcast Capabilities" ,
"description" : "TA15" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "establish-social-assets"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0065.md" ,
"external_id" : "T0065"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--66721b32-473e-4f07-b524-25780f47c326"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--8311c92c-61a1-4277-afca-5c4a43e18c06" ,
"created_by_ref" : "identity--cfb5f6df-5c4d-4a9a-823e-337fa893c6b7" ,
"created" : "2022-07-01T03:29:17.114594Z" ,
"modified" : "2022-07-01T03:29:17.114594Z" ,
"name" : "Degrade Adversary" ,
"description" : "TA02" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "plan-objectives"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0066.md" ,
"external_id" : "T0066"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--b04ba37c-7f96-4ce1-b762-dee94ae0bd38"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--82df414a-473f-4d78-9bb0-ee9efd58965c" ,
"created_by_ref" : "identity--9be00094-7bf8-4112-8695-c3f7debcfc07" ,
"created" : "2022-07-01T03:29:17.115059Z" ,
"modified" : "2022-07-01T03:29:17.115059Z" ,
"name" : "Respond to Breaking News Event or Active Crisis" ,
"description" : "TA14" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "develop-narratives"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0068.md" ,
"external_id" : "T0068"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--879a346f-3cc6-4e3a-accd-2d0ae5b6f2f2"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--21c051ac-c395-4ac0-a064-f97aff09639b" ,
"created_by_ref" : "identity--66aa20b5-b271-42ea-b341-498721a297b4" ,
"created" : "2022-07-01T03:29:17.115517Z" ,
"modified" : "2022-07-01T03:29:17.115517Z" ,
"name" : "Segment Audiences" ,
"description" : "TA13" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "target-audience-analysis"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0072.md" ,
"external_id" : "T0072"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--fbb99453-572c-48a8-a6f6-b7d63530c287"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--5a63d85c-fe2a-4932-8db2-f5efaabdfff5" ,
"created_by_ref" : "identity--b6bd7a37-8032-46e7-bda4-0605831594c3" ,
"created" : "2022-07-01T03:29:17.115975Z" ,
"modified" : "2022-07-01T03:29:17.115975Z" ,
"name" : "Determine Target Audiences" ,
"description" : "TA01" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "plan-strategy"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0073.md" ,
"external_id" : "T0073"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--7c733617-4276-4f98-94a3-c8b7ad2e371e"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--d9e11aed-9dd8-4475-8ae5-8712ff59f586" ,
"created_by_ref" : "identity--d1019309-43a3-4678-9e95-0dcc6adf34db" ,
"created" : "2022-07-01T03:29:17.116426Z" ,
"modified" : "2022-07-01T03:29:17.116426Z" ,
"name" : "Determine Strategic Ends" ,
"description" : "TA01" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "plan-strategy"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0074.md" ,
"external_id" : "T0074"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--7c51b002-f10f-4d6a-822d-4222b2b6bc2b"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--fe45dbba-bd39-40a4-b62a-befd4cd7a11f" ,
"created_by_ref" : "identity--ce3227cb-dbca-431c-9508-bd9b38c37f02" ,
"created" : "2022-07-01T03:29:17.116887Z" ,
"modified" : "2022-07-01T03:29:17.116887Z" ,
"name" : "Dismiss" ,
"description" : "TA02" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "plan-objectives"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0075.md" ,
"external_id" : "T0075"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--a58597d6-33a8-492d-a437-fb7b94fdb267"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--36f2f883-c35e-49e4-8908-7002029f200a" ,
"created_by_ref" : "identity--435d8bae-f490-434e-ae08-a769da31c9ff" ,
"created" : "2022-07-01T03:29:17.117339Z" ,
"modified" : "2022-07-01T03:29:17.117339Z" ,
"name" : "Distort" ,
"description" : "TA02" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "plan-objectives"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0076.md" ,
"external_id" : "T0076"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--436a148e-4689-48bf-bfee-44345ad7b74d"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--ad9ae97c-340b-4e33-96fe-ee0ad1407eb0" ,
"created_by_ref" : "identity--533564df-a233-45cc-a4bd-67dde9b464a3" ,
"created" : "2022-07-01T03:29:17.117798Z" ,
"modified" : "2022-07-01T03:29:17.117798Z" ,
"name" : "Distract" ,
"description" : "TA02" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "plan-objectives"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0077.md" ,
"external_id" : "T0077"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--08870f86-287a-418d-aec3-1e5ccf8543b7"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--156bbbf4-8f8a-44f3-9533-af5118313265" ,
"created_by_ref" : "identity--0fbb6aa3-5a2c-4965-bad7-e1a009a30414" ,
"created" : "2022-07-01T03:29:17.118259Z" ,
"modified" : "2022-07-01T03:29:17.118259Z" ,
"name" : "Dismay" ,
"description" : "TA02" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "plan-objectives"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0078.md" ,
"external_id" : "T0078"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--0745cf80-2737-42fc-8f9d-816fb5e54dfd"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--571a7838-129d-4251-b809-3309b9e8aa5f" ,
"created_by_ref" : "identity--406cf1bb-fe17-4550-b474-c0199f3e6e7c" ,
"created" : "2022-07-01T03:29:17.11871Z" ,
"modified" : "2022-07-01T03:29:17.11871Z" ,
"name" : "Divide" ,
"description" : "TA02" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "plan-objectives"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0079.md" ,
"external_id" : "T0079"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--f0f06852-d69f-4922-a268-3cca81dfe969"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--d538394c-6e96-4019-851d-f16db761bfb9" ,
"created_by_ref" : "identity--83f9262b-4bd1-4abd-b280-723cda0c0770" ,
"created" : "2022-07-01T03:29:17.119171Z" ,
"modified" : "2022-07-01T03:29:17.119171Z" ,
"name" : "Map Target Audience Information Environment" ,
"description" : "TA13" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "target-audience-analysis"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0080.md" ,
"external_id" : "T0080"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--b57d8117-50dc-4f53-992c-e1dd829298cc"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--06e0e6e4-1c50-4813-9ff3-f49592514ab8" ,
"created_by_ref" : "identity--1436a742-18aa-4755-a263-57093176e4e9" ,
"created" : "2022-07-01T03:29:17.119621Z" ,
"modified" : "2022-07-01T03:29:17.119621Z" ,
"name" : "Identify Social and Technical Vulnerabilities" ,
"description" : "TA13" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "target-audience-analysis"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0081.md" ,
"external_id" : "T0081"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--897d9914-1f35-4b99-8192-8bc918077f22"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--aa45be8a-db0f-422f-96d0-9959091d70b6" ,
"created_by_ref" : "identity--a9de2212-e29b-40c5-a5f2-96262b6ab411" ,
"created" : "2022-07-01T03:29:17.120074Z" ,
"modified" : "2022-07-01T03:29:17.120074Z" ,
"name" : "Develop New Narratives" ,
"description" : "TA14" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "develop-narratives"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0082.md" ,
"external_id" : "T0082"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--5395b9fe-bc52-4781-a8d7-b2e89efffb7d"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--17f077e3-6308-4266-9f63-06d69db6fb45" ,
"created_by_ref" : "identity--2c304336-3c15-47fb-929a-26b00f4d0b65" ,
"created" : "2022-07-01T03:29:17.120528Z" ,
"modified" : "2022-07-01T03:29:17.120528Z" ,
"name" : "Integrate Target Audience Vulnerabilities into Narrative" ,
"description" : "TA14" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "develop-narratives"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0083.md" ,
"external_id" : "T0083"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--273d5ee8-e85f-451f-9fa3-466df09eae72"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--e5a96616-8465-4184-ac6f-09b46bdb5e1f" ,
"created_by_ref" : "identity--b091aac5-cc47-4c38-a077-15d5acb0564c" ,
"created" : "2022-07-01T03:29:17.120982Z" ,
"modified" : "2022-07-01T03:29:17.120982Z" ,
"name" : "Reuse Existing Content" ,
2022-02-20 15:37:38 -05:00
"description" : "TA06" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0084.md" ,
"external_id" : "T0084"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--af398d8c-ff47-4d4c-b671-e73af7df50f4"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--9988cf65-495c-4880-95c1-f660858e7939" ,
"created_by_ref" : "identity--c48b52b0-b82d-4bda-98c7-01a8f94a99ba" ,
"created" : "2022-07-01T03:29:17.121437Z" ,
"modified" : "2022-07-01T03:29:17.121437Z" ,
"name" : "Develop Text-based Content" ,
2022-02-20 15:37:38 -05:00
"description" : "TA06" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0085.md" ,
"external_id" : "T0085"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--728e63f8-bd2b-4daa-a1cc-bd368c32ed74"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--58c939d8-05bb-45ca-b12d-dcd9cc8df2dc" ,
"created_by_ref" : "identity--e46499c8-aed1-4aeb-80ff-a73482840b99" ,
"created" : "2022-07-01T03:29:17.121892Z" ,
"modified" : "2022-07-01T03:29:17.121892Z" ,
"name" : "Develop Image-based Content" ,
2022-02-20 15:37:38 -05:00
"description" : "TA06" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0086.md" ,
"external_id" : "T0086"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--8f90dd1e-493a-45f6-afd6-160a43d5980f"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--41cd20d5-2365-446a-bd9d-5756ff5f5986" ,
"created_by_ref" : "identity--a8bb5ff1-6d2f-4d1f-901d-77eb1c1cd8d8" ,
"created" : "2022-07-01T03:29:17.122352Z" ,
"modified" : "2022-07-01T03:29:17.122352Z" ,
"name" : "Develop Video-based Content" ,
2022-02-20 15:37:38 -05:00
"description" : "TA06" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0087.md" ,
"external_id" : "T0087"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--59edea27-8e32-4551-81f0-7406355eb952"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--b25838c1-95b5-4c31-a1bc-f4b5e4994854" ,
"created_by_ref" : "identity--a5fd4261-af1c-4f01-8c80-548a054a1235" ,
"created" : "2022-07-01T03:29:17.122823Z" ,
"modified" : "2022-07-01T03:29:17.122823Z" ,
"name" : "Develop Audio-based Content" ,
2022-02-20 15:37:38 -05:00
"description" : "TA06" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0088.md" ,
"external_id" : "T0088"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--3fb5f453-07e4-433f-8e63-158bc202fec8"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--82022c93-6e94-4842-99b6-93a783657a12" ,
"created_by_ref" : "identity--6f3df079-f7df-473f-8e69-65e4867052e6" ,
"created" : "2022-07-01T03:29:17.123282Z" ,
"modified" : "2022-07-01T03:29:17.123282Z" ,
"name" : "Obtain Private Documents" ,
2022-02-20 15:37:38 -05:00
"description" : "TA06" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0089.md" ,
"external_id" : "T0089"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--73f8f675-6ecb-4d1b-bc52-8b52558d8493"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--8702511a-d1e3-4ca5-97a3-0a8b33bbdf53" ,
"created_by_ref" : "identity--a26fa083-3fc8-4278-8ed5-77a44b571648" ,
"created" : "2022-07-01T03:29:17.123743Z" ,
"modified" : "2022-07-01T03:29:17.123743Z" ,
"name" : "Create Inauthentic Accounts" ,
"description" : "TA15" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "establish-social-assets"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0090.md" ,
"external_id" : "T0090"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--c15c1264-bd1f-40d1-b0a2-bb3f67de3659"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--eea82e81-08cd-42f7-9c3f-32d296341fee" ,
"created_by_ref" : "identity--05400086-dfff-4980-bb7d-ec94e33ae378" ,
"created" : "2022-07-01T03:29:17.124198Z" ,
"modified" : "2022-07-01T03:29:17.124198Z" ,
"name" : "Recruit bad actors" ,
"description" : "TA15" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "establish-social-assets"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0091.md" ,
"external_id" : "T0091"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--860df523-d43d-4b94-a3e7-33382331c6d5"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--378c1a19-24f1-466d-a5f8-93457ca0b89c" ,
"created_by_ref" : "identity--a13afd19-3282-4cee-9704-a69dae1249b8" ,
"created" : "2022-07-01T03:29:17.124689Z" ,
"modified" : "2022-07-01T03:29:17.124689Z" ,
"name" : "Build Network" ,
"description" : "TA15" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "establish-social-assets"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0092.md" ,
"external_id" : "T0092"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--249a4868-99f9-4e0b-be59-7925d3d061b9"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--86b561d4-5a64-4dbb-bc52-2c68bdec854a" ,
"created_by_ref" : "identity--be1c3972-948e-444a-8bce-61c3b8643de9" ,
"created" : "2022-07-01T03:29:17.125148Z" ,
"modified" : "2022-07-01T03:29:17.125148Z" ,
"name" : "Acquire/ recruit Network" ,
"description" : "TA15" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "establish-social-assets"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0093.md" ,
"external_id" : "T0093"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--6ff5c683-050b-4fa1-a54f-49cb8d1d3df2"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--4ccec7a7-945f-40c2-8b51-a5701ae8aa14" ,
"created_by_ref" : "identity--799d635e-d062-4488-aaa4-ab32cd1763da" ,
"created" : "2022-07-01T03:29:17.125607Z" ,
"modified" : "2022-07-01T03:29:17.125607Z" ,
"name" : "Infiltrate Existing Networks" ,
"description" : "TA15" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "establish-social-assets"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0094.md" ,
"external_id" : "T0094"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--7200a735-ad5b-4c08-ad3e-07d725a7faac"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--ab0f7411-ff09-4897-b55c-301fdd6276b8" ,
"created_by_ref" : "identity--3b10ff39-a4f1-461b-9b82-26e85d98d99d" ,
"created" : "2022-07-01T03:29:17.126065Z" ,
"modified" : "2022-07-01T03:29:17.126065Z" ,
"name" : "Develop Owned Media Assets" ,
"description" : "TA15" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "establish-social-assets"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0095.md" ,
"external_id" : "T0095"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--2c194b27-329e-41fb-98ed-df4f06db3141"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--5db1d9a2-52a4-4b43-bca4-cdb387335a3b" ,
"created_by_ref" : "identity--5f39833d-3706-4af3-b5db-9f00bdc5e02c" ,
"created" : "2022-07-01T03:29:17.126517Z" ,
"modified" : "2022-07-01T03:29:17.126517Z" ,
"name" : "Leverage Content Farm" ,
"description" : "TA15" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "establish-social-assets"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0096.md" ,
"external_id" : "T0096"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--f7ea534a-bb6f-4ea3-a4f2-24a05bcc6a32"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--e00abc7f-5f53-487a-8562-e3ba4c6ca0b6" ,
"created_by_ref" : "identity--7a62d925-cec9-4cde-a5b4-e4eb5ee97b73" ,
"created" : "2022-07-01T03:29:17.126973Z" ,
"modified" : "2022-07-01T03:29:17.126973Z" ,
"name" : "Create personas" ,
"description" : "TA16" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "establish-legitimacy"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0097.md" ,
"external_id" : "T0097"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--aa05a95c-e43f-490a-ac96-f7f0c5fe3fef"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--ecfdb2b2-5841-4c61-ae57-1bfa1dd50a87" ,
"created_by_ref" : "identity--22a4d897-ac44-41d7-9761-d1c23a31ce28" ,
"created" : "2022-07-01T03:29:17.127428Z" ,
"modified" : "2022-07-01T03:29:17.127428Z" ,
"name" : "Establish Inauthentic News Sites" ,
"description" : "TA16" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "establish-legitimacy"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0098.md" ,
"external_id" : "T0098"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--d684d1f9-7edd-412e-a730-e5cf08509bbf"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--69e703e0-990f-45cf-a4eb-9eb2193ee58d" ,
"created_by_ref" : "identity--81d31ff3-891e-4a34-b094-297d877e070a" ,
"created" : "2022-07-01T03:29:17.12789Z" ,
"modified" : "2022-07-01T03:29:17.12789Z" ,
"name" : "Prepare Assets Impersonating Legitimate Entities" ,
"description" : "TA16" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "establish-legitimacy"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0099.md" ,
"external_id" : "T0099"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--7238cf38-fabd-46b9-a27d-325688c423fe"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--ed11f144-9907-4dda-8d51-f9084227b41c" ,
"created_by_ref" : "identity--1fdd359e-d9eb-42ef-851f-e8f7e907a990" ,
"created" : "2022-07-01T03:29:17.128344Z" ,
"modified" : "2022-07-01T03:29:17.128344Z" ,
"name" : "Co-opt Trusted Sources" ,
"description" : "TA16" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "establish-legitimacy"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0100.md" ,
"external_id" : "T0100"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--06d3e445-3c4b-4a34-8641-98f8469a880c"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--7283861d-801a-40d3-8e63-fb2d9951fee6" ,
"created_by_ref" : "identity--6d431156-2568-4a98-a905-75b4dc2ec0b8" ,
"created" : "2022-07-01T03:29:17.12891Z" ,
"modified" : "2022-07-01T03:29:17.12891Z" ,
"name" : "Create Localized Content" ,
"description" : "TA05" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "microtarget"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0101.md" ,
"external_id" : "T0101"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--4e4ef88f-e70b-4a42-99b7-9d6114c92124"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--fef87440-2f0d-4623-b952-04f8f6712938" ,
"created_by_ref" : "identity--5c1d10e0-6bff-4f50-8d47-2ef9197c061c" ,
"created" : "2022-07-01T03:29:17.129378Z" ,
"modified" : "2022-07-01T03:29:17.129378Z" ,
"name" : "Leverage Echo Chambers/Filter Bubbles" ,
"description" : "TA05" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "microtarget"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0102.md" ,
"external_id" : "T0102"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--7996c25b-9633-4fa2-b7c0-1afd4aa59123"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--f7eb387d-dc29-4961-9aa5-2ef707ef4d4e" ,
"created_by_ref" : "identity--02600a7a-9c21-4d6a-91bd-65d45451d843" ,
"created" : "2022-07-01T03:29:17.129843Z" ,
"modified" : "2022-07-01T03:29:17.129843Z" ,
"name" : "Livestream" ,
"description" : "TA07" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0103.md" ,
"external_id" : "T0103"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--bf0180fb-de93-494f-805a-f3fceab6d48f"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--966328aa-86fd-4f90-85da-0685b146c1ac" ,
"created_by_ref" : "identity--d103d1d9-e3c8-4796-903e-067a5d929aff" ,
"created" : "2022-07-01T03:29:17.130301Z" ,
"modified" : "2022-07-01T03:29:17.130301Z" ,
"name" : "Social Networks" ,
"description" : "TA07" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0104.md" ,
"external_id" : "T0104"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--ad51d9d0-5a1c-4bd2-8bac-ccc2d5f01161"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--df56db91-8883-40b5-88d3-a144c2093f27" ,
"created_by_ref" : "identity--350a4915-af5e-4bd0-a737-a79d6d5d527f" ,
"created" : "2022-07-01T03:29:17.130762Z" ,
"modified" : "2022-07-01T03:29:17.130762Z" ,
"name" : "Media Sharing Networks" ,
"description" : "TA07" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0105.md" ,
"external_id" : "T0105"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--ad61e09c-a1f4-40b5-877c-2c9933937e24"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--fdd2573d-3ad7-4ae0-a0ff-7542978aa448" ,
"created_by_ref" : "identity--86080875-4c7c-4777-bda0-b3493e0c2d02" ,
"created" : "2022-07-01T03:29:17.13122Z" ,
"modified" : "2022-07-01T03:29:17.13122Z" ,
"name" : "Discussion Forums" ,
"description" : "TA07" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0106.md" ,
"external_id" : "T0106"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--c4cd66f6-9714-4a00-9007-5f5b13e547e2"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--99eb03c9-985f-4c62-9c07-d20939f7beb6" ,
"created_by_ref" : "identity--c98c629f-8200-4d6c-bd09-efb9809fafd9" ,
"created" : "2022-07-01T03:29:17.131683Z" ,
"modified" : "2022-07-01T03:29:17.131683Z" ,
"name" : "Bookmarking and Content Curation" ,
"description" : "TA07" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0107.md" ,
"external_id" : "T0107"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--b2249aa7-99b9-4ff6-8491-e806868349e5"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--06cfef07-9214-4df2-a401-84c040d3e062" ,
"created_by_ref" : "identity--635e6fde-dc4a-4c1e-8423-251d86d1716e" ,
"created" : "2022-07-01T03:29:17.132138Z" ,
"modified" : "2022-07-01T03:29:17.132138Z" ,
"name" : "Blogging and Publishing Networks" ,
"description" : "TA07" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0108.md" ,
"external_id" : "T0108"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--331b217d-fcf4-4a64-b4af-eb0f06c33825"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--970f3833-768b-4789-b6f3-8158c240e6c1" ,
"created_by_ref" : "identity--4cae941b-6bdd-41bd-8c00-1231cf53eaef" ,
"created" : "2022-07-01T03:29:17.132595Z" ,
"modified" : "2022-07-01T03:29:17.132595Z" ,
"name" : "Consumer Review Networks" ,
"description" : "TA07" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0109.md" ,
"external_id" : "T0109"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--19909584-6abf-42d1-985b-231aa5609359"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--89c58eaa-2973-4ce4-81b2-bc644d8dff02" ,
"created_by_ref" : "identity--771e28f4-3218-4abb-b6bb-a27c787bdbfa" ,
"created" : "2022-07-01T03:29:17.133055Z" ,
"modified" : "2022-07-01T03:29:17.133055Z" ,
"name" : "Formal Diplomatic Channels" ,
"description" : "TA07" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0110.md" ,
"external_id" : "T0110"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--871acae2-78f0-4ead-8a9e-b10689e07906"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--470a1d29-5132-4744-b5ed-fa2ab50973a3" ,
"created_by_ref" : "identity--da0bc2f8-12e6-4ec3-9794-58ce6c5d2550" ,
"created" : "2022-07-01T03:29:17.133515Z" ,
"modified" : "2022-07-01T03:29:17.133515Z" ,
"name" : "Traditional Media" ,
"description" : "TA07" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0111.md" ,
"external_id" : "T0111"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--4db91436-2db3-4a1e-89c6-80b0be3fcadb"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--2f468380-3519-45f0-b377-050df5af0316" ,
"created_by_ref" : "identity--68496637-a6d4-4740-a8c6-4d9b0b688ad0" ,
"created" : "2022-07-01T03:29:17.13397Z" ,
"modified" : "2022-07-01T03:29:17.13397Z" ,
"name" : "Email" ,
"description" : "TA07" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0112.md" ,
"external_id" : "T0112"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--048a31b3-4103-4c59-b29e-26adf227909c"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--5b44f922-66c0-4241-b933-4781edcbd457" ,
"created_by_ref" : "identity--24d24d03-1356-4aee-a3da-4653eb081889" ,
"created" : "2022-07-01T03:29:17.134421Z" ,
"modified" : "2022-07-01T03:29:17.134421Z" ,
"name" : "Employ Commercial Analytic Firms" ,
"description" : "TA08" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "conduct-pump-priming"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0113.md" ,
"external_id" : "T0113"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--7cd3c8f4-122d-4262-9f63-a6e646f96fb5"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--501730c4-a597-4dfe-8487-688befb42b10" ,
"created_by_ref" : "identity--e785f97d-e66a-4e3b-9d3d-dcb75ab307d8" ,
"created" : "2022-07-01T03:29:17.134957Z" ,
"modified" : "2022-07-01T03:29:17.134957Z" ,
"name" : "Deliver Ads" ,
2022-02-20 15:37:38 -05:00
"description" : "TA09" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "deliver-content"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0114.md" ,
"external_id" : "T0114"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--6206fbd9-5b7d-4101-9869-4a031afbe4df"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--bc6b823b-8a40-4ba3-99ab-0092341f2cc6" ,
"created_by_ref" : "identity--147a00a2-3f5b-49ce-9d1e-78a6780d7d81" ,
"created" : "2022-07-01T03:29:17.135439Z" ,
"modified" : "2022-07-01T03:29:17.135439Z" ,
"name" : "Post Content" ,
2022-02-20 15:37:38 -05:00
"description" : "TA09" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "deliver-content"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0115.md" ,
"external_id" : "T0115"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--87fb19be-2eab-4cb0-92c0-950b415b07d2"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--55e306db-023f-4634-8e7a-d9f1753f1403" ,
"created_by_ref" : "identity--4e65dc6d-3f43-4ea2-a633-6ea513b65471" ,
"created" : "2022-07-01T03:29:17.1359Z" ,
"modified" : "2022-07-01T03:29:17.1359Z" ,
"name" : "Comment or Reply on Content" ,
2022-02-20 15:37:38 -05:00
"description" : "TA09" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "deliver-content"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0116.md" ,
"external_id" : "T0116"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--1d1032b7-2302-4980-b4fa-0ddaca3c1fe8"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--c9156db4-b6b2-485b-bac1-a31516bea444" ,
"created_by_ref" : "identity--2bef3f55-6ce0-44da-acde-3a7855a38291" ,
"created" : "2022-07-01T03:29:17.136363Z" ,
"modified" : "2022-07-01T03:29:17.136363Z" ,
"name" : "Attract Traditional Media" ,
2022-02-20 15:37:38 -05:00
"description" : "TA09" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "deliver-content"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0117.md" ,
"external_id" : "T0117"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--96aa2ed8-9c51-4307-88fc-441d79e72b72"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--37aed67a-9d72-4f4f-a44b-3dfb06995535" ,
"created_by_ref" : "identity--00a115b8-decc-4ece-a2b4-752003ba4683" ,
"created" : "2022-07-01T03:29:17.136819Z" ,
"modified" : "2022-07-01T03:29:17.136819Z" ,
"name" : "Amplify Existing Narrative" ,
"description" : "TA17" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "maximize-exposure"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0118.md" ,
"external_id" : "T0118"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--00bcdef4-19d7-4556-ad99-237f7161a01f"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--0ab43e92-4882-457c-8ca6-c354ac48b294" ,
"created_by_ref" : "identity--e6d8a95b-9b10-48ca-b8e1-b077500ec588" ,
"created" : "2022-07-01T03:29:17.137316Z" ,
"modified" : "2022-07-01T03:29:17.137316Z" ,
"name" : "Cross-Posting" ,
"description" : "TA17" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "maximize-exposure"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0119.md" ,
"external_id" : "T0119"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--16a6d36f-a149-4ed5-b05e-63ac6aaa928a"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--fb0fe94e-7214-4aed-a3b8-d8e21fe0f934" ,
"created_by_ref" : "identity--9a50eaed-346d-429b-ab68-36d9d1883d71" ,
"created" : "2022-07-01T03:29:17.137779Z" ,
"modified" : "2022-07-01T03:29:17.137779Z" ,
"name" : "Incentivize Sharing" ,
"description" : "TA17" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "maximize-exposure"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0120.md" ,
"external_id" : "T0120"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--aac40058-3121-4869-9029-566b754482ea"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--0281663e-716f-41b1-be93-08f7bad1ddef" ,
"created_by_ref" : "identity--c520075b-a92a-4f85-96fe-b724de95492a" ,
"created" : "2022-07-01T03:29:17.138235Z" ,
"modified" : "2022-07-01T03:29:17.138235Z" ,
"name" : "Manipulate Platform Algorithm" ,
"description" : "TA17" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "maximize-exposure"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0121.md" ,
"external_id" : "T0121"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--7a0da991-8525-4cd7-9707-546159b1d1c3"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--fb56da5b-2a04-4d5d-8399-97b7ac04525f" ,
"created_by_ref" : "identity--01935b3a-243c-4232-8366-767df5ba5d9d" ,
"created" : "2022-07-01T03:29:17.138696Z" ,
"modified" : "2022-07-01T03:29:17.138696Z" ,
"name" : "Direct Users to Alternative Platforms" ,
"description" : "TA17" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "maximize-exposure"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0122.md" ,
"external_id" : "T0122"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--98150158-c209-40ef-8f67-8b0e068283dd"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--bd436c13-0ab4-4b4b-a845-ae87918a04e8" ,
"created_by_ref" : "identity--dd4a264b-4dc5-4e7f-9cb1-41d62ff84fe4" ,
"created" : "2022-07-01T03:29:17.139152Z" ,
"modified" : "2022-07-01T03:29:17.139152Z" ,
"name" : "Control Information Environment through Offensive Cyberspace Operations" ,
"description" : "TA18" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "drive-online-harms"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0123.md" ,
"external_id" : "T0123"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--7ad306b6-8013-4090-b62a-ddad48b77c66"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--93c39fc5-412f-44b7-a1a1-badc8a1bca3a" ,
"created_by_ref" : "identity--ff3177e1-cb74-49f6-92d9-9760994d1245" ,
"created" : "2022-07-01T03:29:17.139611Z" ,
"modified" : "2022-07-01T03:29:17.139611Z" ,
"name" : "Suppress Opposition" ,
"description" : "TA18" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "drive-online-harms"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0124.md" ,
"external_id" : "T0124"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--374994be-2311-4e29-91b4-8e46d3a733d6"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--eedcc7f8-edec-4edb-9b08-a890cf55c907" ,
"created_by_ref" : "identity--7f51c314-3c76-4bb9-b1e9-c43a441088a9" ,
"created" : "2022-07-01T03:29:17.140068Z" ,
"modified" : "2022-07-01T03:29:17.140068Z" ,
"name" : "Platform Filtering" ,
"description" : "TA18" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "drive-online-harms"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0125.md" ,
"external_id" : "T0125"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--aec46781-a9af-4956-ac97-90805bdd57a2"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--5f3b98bc-bb23-495b-bb5f-d374cb552333" ,
"created_by_ref" : "identity--04a2369c-c174-45ec-8f6c-bd86d4615e94" ,
"created" : "2022-07-01T03:29:17.140525Z" ,
"modified" : "2022-07-01T03:29:17.140525Z" ,
"name" : "Encourage Attendance at Events" ,
"description" : "TA10" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "drive-offline-activity"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0126.md" ,
"external_id" : "T0126"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--75b6f15e-0ebc-4023-8401-c77c43cad473"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--d529115b-3c95-42c2-bd2c-ca9f33aac00c" ,
"created_by_ref" : "identity--b75c115a-736d-4f7e-b16e-2c77681d4355" ,
"created" : "2022-07-01T03:29:17.140979Z" ,
"modified" : "2022-07-01T03:29:17.140979Z" ,
"name" : "Physical Violence" ,
"description" : "TA10" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "drive-offline-activity"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0127.md" ,
"external_id" : "T0127"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--93c68e3b-9c3d-4734-8bc3-f5f15d277b97"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--055b0bf8-8474-488f-8e3d-52d947132649" ,
"created_by_ref" : "identity--6754c7de-f65b-4c7a-ab0e-2f6898e78b9b" ,
"created" : "2022-07-01T03:29:17.141434Z" ,
"modified" : "2022-07-01T03:29:17.141434Z" ,
"name" : "Conceal People" ,
"description" : "TA11" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "persist-in-the-information-environment"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0128.md" ,
"external_id" : "T0128"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--ce3102d0-e888-457e-978c-080e0d170683"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--61f9d9e8-83c8-4eaa-b7c2-b7bba16b948b" ,
"created_by_ref" : "identity--bddd29bc-196d-40b4-8c68-be85f2f68e35" ,
"created" : "2022-07-01T03:29:17.14189Z" ,
"modified" : "2022-07-01T03:29:17.14189Z" ,
"name" : "Conceal Operational Activity" ,
"description" : "TA11" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "persist-in-the-information-environment"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0129.md" ,
"external_id" : "T0129"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--4bfa250f-3859-47a6-b2aa-0a0feab550b8"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--e5ca8c74-3a97-449f-b2fd-a6c68001022e" ,
"created_by_ref" : "identity--74764361-a0ca-4a61-b7c3-07f5589c908c" ,
"created" : "2022-07-01T03:29:17.142343Z" ,
"modified" : "2022-07-01T03:29:17.142343Z" ,
"name" : "Conceal Infrastructure" ,
"description" : "TA11" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "persist-in-the-information-environment"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0130.md" ,
"external_id" : "T0130"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--0732f928-a6d2-46c4-983f-f385a18d9c30"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--f8c2e933-a4ba-410a-8689-d6882b92e28c" ,
"created_by_ref" : "identity--6d8fd8d9-aa56-4ae4-80fc-4a0ca136f567" ,
"created" : "2022-07-01T03:29:17.1428Z" ,
"modified" : "2022-07-01T03:29:17.1428Z" ,
"name" : "Exploit TOS/Content Moderation" ,
"description" : "TA11" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "persist-in-the-information-environment"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0131.md" ,
"external_id" : "T0131"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--3e99c627-a96e-4eef-9a2e-ce23c1e3895f"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--a0c6c1cb-b4b6-4f91-ba68-489a7fcf2b9b" ,
"created_by_ref" : "identity--5bf5359f-d86d-462a-9231-ec13db821278" ,
"created" : "2022-07-01T03:29:17.143249Z" ,
"modified" : "2022-07-01T03:29:17.143249Z" ,
"name" : "Measure Performance" ,
"description" : "TA12" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "assess-effectiveness"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0132.md" ,
"external_id" : "T0132"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--7006fd01-2469-4378-8f80-02f3b2632f4d"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--0503f142-a258-45ee-8c51-4ec589ec4d26" ,
"created_by_ref" : "identity--f26d6354-06a8-49af-a6ab-35b84e3aaafa" ,
"created" : "2022-07-01T03:29:17.143701Z" ,
"modified" : "2022-07-01T03:29:17.143701Z" ,
"name" : "Measure Effectiveness" ,
"description" : "TA12" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "assess-effectiveness"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0133.md" ,
"external_id" : "T0133"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--9a5ed9b1-4394-4791-be2a-8ee409828b58"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "attack-pattern--7cb970a6-d4bb-43be-ac7f-92a1b3eb24ef" ,
"created_by_ref" : "identity--34d1bc62-7da2-4c56-b1c5-320c7cd9f44f" ,
"created" : "2022-07-01T03:29:17.144152Z" ,
"modified" : "2022-07-01T03:29:17.144152Z" ,
"name" : "Measure Effectiveness Indicators (or KPIs)" ,
"description" : "TA12" ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "assess-effectiveness"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0134.md" ,
"external_id" : "T0134"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-06-30 23:30:18 -04:00
"marking-definition--4f5f5cd0-90a6-4338-beaf-441168ca9303"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "x-mitre-matrix" ,
"spec_version" : "2.1" ,
2022-06-30 23:30:18 -04:00
"id" : "x-mitre-matrix--4592a0a9-b821-47ad-b0c6-5ce63c628719" ,
"created" : "2022-07-01T03:29:17.144346Z" ,
"modified" : "2022-07-01T03:29:17.144346Z" ,
2022-02-20 15:37:38 -05:00
"name" : "DISARM Framework" ,
"description" : "DISARM is a framework designed for describing and understanding disinformation incidents." ,
"tactic_refs" : [
2022-06-30 23:30:18 -04:00
"x-mitre-tactic--ca848c76-3e2e-4059-a61f-dce4180b4710" ,
"x-mitre-tactic--eec7c49a-35c0-4ed2-9161-f7dba316a609" ,
"x-mitre-tactic--e749a24c-8362-4fed-ba26-51e56b37b439" ,
"x-mitre-tactic--4348a49d-d21a-4915-a512-ba1accaa8cd9" ,
"x-mitre-tactic--7c9b3fa5-50f8-4fab-acc3-f984b7290cd7" ,
"x-mitre-tactic--f59414c8-2d4d-4d9e-8d88-fe8a339270d1" ,
"x-mitre-tactic--717ccb01-df67-48a8-b6ec-9551272a4ff4" ,
"x-mitre-tactic--b2ad03fa-b162-4161-b864-344f9cb69ad3" ,
"x-mitre-tactic--efddae0c-df65-48be-a7a4-067237d8a528" ,
"x-mitre-tactic--96ec7676-22a8-40f8-91f9-2b770fec3a78" ,
"x-mitre-tactic--10b904db-7568-4a50-bf6f-9541f3b01924" ,
"x-mitre-tactic--977b0d14-c42a-4f3e-badb-fdabb9781544" ,
"x-mitre-tactic--5d068e30-413a-4465-b51b-8e9fc1e18b1e" ,
"x-mitre-tactic--60087ffe-9390-4baf-8e93-20b3f075da8e" ,
"x-mitre-tactic--c4e65fa5-4f02-4075-b26f-07c0d07badaa" ,
"x-mitre-tactic--2fad8829-108a-4d6a-8135-6bc3bf74a770"
2022-02-20 15:37:38 -05:00
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation" ,
"external_id" : "DISARM"
}
]
}
]
}