DISARMframeworks/generated_files/DISARM_STIX/DISARM.json

3611 lines
142 KiB
JSON
Raw Normal View History

2022-02-20 15:37:38 -05:00
{
"type": "bundle",
2022-06-30 23:30:18 -04:00
"id": "bundle--72f0cf92-0ac6-4673-aa14-82f1684e4de3",
2022-02-20 15:37:38 -05:00
"objects": [
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "x-mitre-tactic--ca848c76-3e2e-4059-a61f-dce4180b4710",
"created_by_ref": "identity--579368bd-8440-4f8e-96c2-ad508b73a5e9",
"created": "2022-07-01T03:29:17.091145Z",
"modified": "2022-07-01T03:29:17.091145Z",
"name": "Plan Strategy",
2022-02-20 15:37:38 -05:00
"description": "Define the desired end state, i.e. the set of required conditions that defines achievement of all objectives.",
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA01.md",
"external_id": "TA01"
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--d12db0e6-fa29-41c5-b43e-a46d0618d61c"
2022-02-20 15:37:38 -05:00
],
2022-06-30 23:30:18 -04:00
"x_mitre_shortname": "plan-strategy"
2022-02-20 15:37:38 -05:00
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "x-mitre-tactic--eec7c49a-35c0-4ed2-9161-f7dba316a609",
"created_by_ref": "identity--7b955472-f8e6-4b82-8c31-300defa2ff1d",
"created": "2022-07-01T03:29:17.091699Z",
"modified": "2022-07-01T03:29:17.091699Z",
"name": "Plan Objectives",
"description": "Set clearly defined, measurable, and achievable objectives. Achieving objectives ties execution of tactical tasks to reaching the desired end state. There are four primary considerations: \n- Each desired effect should link directly to one or more objectives \n- The effect should be measurable \n- The objective statement should not specify the way and means of accomplishment \n- The effect should be distinguishable from the objective it supports as a condition for success, not as another objective or task.",
2022-02-20 15:37:38 -05:00
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA02.md",
"external_id": "TA02"
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--efbc7fb0-9eca-4e7c-b2e7-c22aea404a22"
2022-02-20 15:37:38 -05:00
],
2022-06-30 23:30:18 -04:00
"x_mitre_shortname": "plan-objectives"
2022-02-20 15:37:38 -05:00
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "x-mitre-tactic--e749a24c-8362-4fed-ba26-51e56b37b439",
"created_by_ref": "identity--a8a35a10-0c6d-48ab-9642-0d968a0e6579",
"created": "2022-07-01T03:29:17.092239Z",
"modified": "2022-07-01T03:29:17.092239Z",
"name": "Microtarget",
"description": "Target very specific populations of people",
2022-02-20 15:37:38 -05:00
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA05.md",
"external_id": "TA05"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--9e9c4039-2734-451e-9eae-14bfee5150c5"
2022-02-20 15:37:38 -05:00
],
2022-06-30 23:30:18 -04:00
"x_mitre_shortname": "microtarget"
2022-02-20 15:37:38 -05:00
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "x-mitre-tactic--4348a49d-d21a-4915-a512-ba1accaa8cd9",
"created_by_ref": "identity--ebae25a4-b31b-40c4-b26f-c603911318b6",
"created": "2022-07-01T03:29:17.092712Z",
"modified": "2022-07-01T03:29:17.092712Z",
"name": "Develop Content",
"description": "TBD",
2022-02-20 15:37:38 -05:00
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA06.md",
"external_id": "TA06"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--f6a72729-0ae7-401c-b0c0-8f97fa40e86e"
2022-02-20 15:37:38 -05:00
],
2022-06-30 23:30:18 -04:00
"x_mitre_shortname": "develop-content"
2022-02-20 15:37:38 -05:00
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "x-mitre-tactic--7c9b3fa5-50f8-4fab-acc3-f984b7290cd7",
"created_by_ref": "identity--68919beb-b367-4f0d-b473-7c1ef2f7cc41",
"created": "2022-07-01T03:29:17.093161Z",
"modified": "2022-07-01T03:29:17.093161Z",
"name": "Select Channels and Affordances",
"description": "Selecting platforms and affordances assesses which online or offline platforms and their associated affordances maximize an influence operation\u2019s ability to reach its target audience. To select the most appropriate platform(s), an operation may assess the technological affordances including platform algorithms, terms of service, permitted content types, or other attributes that determine platform usability and accessibility. Selecting platforms includes both choosing platforms on which the operation will publish its own content and platforms on which the operation will attempt to restrict adversarial content.",
2022-02-20 15:37:38 -05:00
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA07.md",
"external_id": "TA07"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--a3ba48a6-8927-4416-8923-070e7b66d99b"
2022-02-20 15:37:38 -05:00
],
2022-06-30 23:30:18 -04:00
"x_mitre_shortname": "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "x-mitre-tactic--f59414c8-2d4d-4d9e-8d88-fe8a339270d1",
"created_by_ref": "identity--957e8ee3-66c0-4c39-81ab-bc8f197dc060",
"created": "2022-07-01T03:29:17.093615Z",
"modified": "2022-07-01T03:29:17.093615Z",
"name": "Conduct Pump Priming",
"description": "Release content on a targetted small scale, prior to general release, including releasing seed. Used for preparation before broader release, and as message honing. Used for preparation before broader release, and as message honing. ",
2022-02-20 15:37:38 -05:00
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA08.md",
"external_id": "TA08"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--8f98688d-973b-4d80-a055-eef509cafa92"
2022-02-20 15:37:38 -05:00
],
2022-06-30 23:30:18 -04:00
"x_mitre_shortname": "conduct-pump-priming"
2022-02-20 15:37:38 -05:00
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "x-mitre-tactic--717ccb01-df67-48a8-b6ec-9551272a4ff4",
"created_by_ref": "identity--89b633d0-6026-4f5a-b937-96c110081e4b",
"created": "2022-07-01T03:29:17.094056Z",
"modified": "2022-07-01T03:29:17.094056Z",
"name": "Deliver Content",
"description": "Release content to general public or larger population",
2022-02-20 15:37:38 -05:00
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA09.md",
"external_id": "TA09"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--7b7d7a4a-d135-432c-b8e8-d758ec6aaabe"
2022-02-20 15:37:38 -05:00
],
2022-06-30 23:30:18 -04:00
"x_mitre_shortname": "deliver-content"
2022-02-20 15:37:38 -05:00
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "x-mitre-tactic--b2ad03fa-b162-4161-b864-344f9cb69ad3",
"created_by_ref": "identity--ef082dc6-c5d4-4f34-839a-afb81676681d",
"created": "2022-07-01T03:29:17.094502Z",
"modified": "2022-07-01T03:29:17.094502Z",
"name": "Drive Offline Activity",
"description": "Move incident/campaign from online to offline. Encouraging users to move from the platform on which they initially viewed operation content and engage in the physical information space or offline world. This may include operation-aligned rallies or protests, radio, newspaper, or billboards. An influence operation may drive to physical forums to diversify its information channels and facilitate spaces where the target audience can engage with both operation content and like-minded individuals offline. ",
2022-02-20 15:37:38 -05:00
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA10.md",
"external_id": "TA10"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--6c20ec26-a68f-4ea4-87e7-0f4c3d1dc466"
2022-02-20 15:37:38 -05:00
],
2022-06-30 23:30:18 -04:00
"x_mitre_shortname": "drive-offline-activity"
2022-02-20 15:37:38 -05:00
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "x-mitre-tactic--efddae0c-df65-48be-a7a4-067237d8a528",
"created_by_ref": "identity--2d057bc4-00f4-42ed-b56d-f441f58c0224",
"created": "2022-07-01T03:29:17.0951Z",
"modified": "2022-07-01T03:29:17.0951Z",
"name": "Persist in the Information Environment",
"description": "Persist in the Information Space refers to taking measures that allow an operation to maintain its presence and avoid takedown by an external entity. Techniques in Persist in the Information Space help campaigns operate without detection and appear legitimate to the target audience and platform monitoring services. Influence operations on social media often persist online by varying the type of information assets and platforms used throughout the campaign.",
2022-02-20 15:37:38 -05:00
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA11.md",
"external_id": "TA11"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--7e8d9bd0-001f-45d2-aa7f-a57b18f3df70"
2022-02-20 15:37:38 -05:00
],
2022-06-30 23:30:18 -04:00
"x_mitre_shortname": "persist-in-the-information-environment"
2022-02-20 15:37:38 -05:00
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "x-mitre-tactic--96ec7676-22a8-40f8-91f9-2b770fec3a78",
"created_by_ref": "identity--2390bb84-1e20-4e06-beb8-f61631529f6f",
"created": "2022-07-01T03:29:17.095552Z",
"modified": "2022-07-01T03:29:17.095552Z",
"name": "Assess Effectiveness",
"description": "Assess effectiveness of action, for use in future plans ",
2022-02-20 15:37:38 -05:00
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA12.md",
"external_id": "TA12"
}
],
"object_marking_refs": [
"marking-definition--8b21940e-5b88-4d9f-9708-d69f7b827cf4"
],
"x_mitre_shortname": "assess-effectiveness"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
"id": "x-mitre-tactic--10b904db-7568-4a50-bf6f-9541f3b01924",
"created_by_ref": "identity--2a9898a9-5d27-4f77-90d6-81cb400c7dc0",
"created": "2022-07-01T03:29:17.096002Z",
"modified": "2022-07-01T03:29:17.096002Z",
"name": "Target Audience Analysis",
"description": "Identifying and analyzing the target audience examines target audience member locations, political affiliations, financial situations, and other attributes that an influence operation may incorporate into its messaging strategy. During this tactic, influence operations may also identify existing similarities and differences between target audience members to unite like groups and divide opposing groups. Identifying and analyzing target audience members allows influence operations to tailor operation strategy and content to their analysis. ",
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA13.md",
"external_id": "TA13"
}
],
"object_marking_refs": [
"marking-definition--32769669-4b13-4c4b-89c6-e877a011fa61"
],
"x_mitre_shortname": "target-audience-analysis"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
"id": "x-mitre-tactic--977b0d14-c42a-4f3e-badb-fdabb9781544",
"created_by_ref": "identity--4fdd4e7b-3b3e-425e-847f-dc5f200fb7cf",
"created": "2022-07-01T03:29:17.096467Z",
"modified": "2022-07-01T03:29:17.096467Z",
"name": "Develop Narratives",
"description": "The promotion of beneficial master narratives is perhaps the most effective method for achieving long-term strategic narrative dominance. From a \"\"whole of society\"\" perspective the promotion of the society's core master narratives should occupy a central strategic role. From a misinformation campaign / cognitive security perpectve the tactics around master narratives center more precisely on the day-to-day promotion and reinforcement of this messaging. In other words, beneficial, high-coverage master narratives are a central strategic goal and their promotion constitutes an ongoing tactical struggle carried out at a whole-of-society level. Tactically, their promotion covers a broad spectrum of activities both on- and offline.",
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA14.md",
"external_id": "TA14"
}
],
"object_marking_refs": [
"marking-definition--369927eb-a5a4-4672-a0d0-88d758feed9d"
],
"x_mitre_shortname": "develop-narratives"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
"id": "x-mitre-tactic--5d068e30-413a-4465-b51b-8e9fc1e18b1e",
"created_by_ref": "identity--e6b10b3f-81f4-4f5d-a61b-6ba6d32a927c",
"created": "2022-07-01T03:29:17.096916Z",
"modified": "2022-07-01T03:29:17.096916Z",
"name": "Establish Social Assets",
"description": "Establishing information assets generates messaging tools, including social media accounts, operation personnel, and organizations, including directly and indirectly managed assets. For assets under their direct control, the operation can add, change, or remove these assets at will. \nEstablishing information assets allows an influence operation to promote messaging directly to the target audience without navigating through external entities. Many online influence operations create or compromise social media accounts as a primary vector of information dissemination.",
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA15.md",
"external_id": "TA15"
}
],
"object_marking_refs": [
"marking-definition--67f09a98-95d6-47d0-87b8-7499972e7685"
],
"x_mitre_shortname": "establish-social-assets"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
"id": "x-mitre-tactic--60087ffe-9390-4baf-8e93-20b3f075da8e",
"created_by_ref": "identity--3c5779ae-e3d8-4248-abd3-fd7bf16fe311",
"created": "2022-07-01T03:29:17.097362Z",
"modified": "2022-07-01T03:29:17.097362Z",
"name": "Establish Legitimacy",
"description": "TBD",
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA16.md",
"external_id": "TA16"
}
],
"object_marking_refs": [
"marking-definition--8309d1c8-87a1-4323-967b-7216161d998d"
],
"x_mitre_shortname": "establish-legitimacy"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
"id": "x-mitre-tactic--c4e65fa5-4f02-4075-b26f-07c0d07badaa",
"created_by_ref": "identity--9ce26eb7-7607-4333-b84b-6b0e2cd074a3",
"created": "2022-07-01T03:29:17.097809Z",
"modified": "2022-07-01T03:29:17.097809Z",
"name": "Maximize Exposure",
"description": "Maximize exposure of the target audience to incident/campaign content via flooding, amplifying, and cross-posting.",
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA17.md",
"external_id": "TA17"
}
],
"object_marking_refs": [
"marking-definition--75ce5799-1b91-4be6-8427-d41dc3c3b8b2"
],
"x_mitre_shortname": "maximize-exposure"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
"id": "x-mitre-tactic--2fad8829-108a-4d6a-8135-6bc3bf74a770",
"created_by_ref": "identity--62fae23f-94ca-47ca-a703-4e203716b2f5",
"created": "2022-07-01T03:29:17.098423Z",
"modified": "2022-07-01T03:29:17.098423Z",
"name": "Drive Online Harms",
"description": "Actions taken by an influence operation to harm their opponents in online spaces through harassment, suppression, releasing private information, and controlling the information space through offensive cyberspace operations. ",
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA18.md",
"external_id": "TA18"
}
],
"object_marking_refs": [
"marking-definition--885c611a-01f1-4456-9415-81dacb2de148"
],
"x_mitre_shortname": "drive-online-harms"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--83124e9f-4981-445c-aa20-b7a3990c18ab",
"created_by_ref": "identity--e5631f8e-4441-44b0-98de-44cef0359a06",
"created": "2022-07-01T03:29:17.099228Z",
"modified": "2022-07-01T03:29:17.099228Z",
"name": "Facilitate State Propaganda",
"description": "TA02",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "plan-objectives"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0002.md",
"external_id": "T0002"
}
],
"object_marking_refs": [
"marking-definition--27285727-7410-4083-a6b1-94d53ac3486a"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--9164934b-19e2-4516-a792-5d5f08b06d34",
"created_by_ref": "identity--396f6b80-8694-4493-9336-c4037a980f18",
"created": "2022-07-01T03:29:17.099805Z",
"modified": "2022-07-01T03:29:17.099805Z",
"name": "Leverage Existing Narratives",
"description": "TA14",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "develop-narratives"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0003.md",
"external_id": "T0003"
}
],
"object_marking_refs": [
"marking-definition--745557fb-5156-4f7d-bfe4-184c9c076280"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--fd260e6a-7b36-4c30-9a12-29745ec85672",
"created_by_ref": "identity--19e9d8d8-0dd2-42aa-a34e-17adc2be525f",
"created": "2022-07-01T03:29:17.100339Z",
"modified": "2022-07-01T03:29:17.100339Z",
"name": "Develop Competing Narratives",
"description": "TA14",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "develop-narratives"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0004.md",
"external_id": "T0004"
}
],
"object_marking_refs": [
"marking-definition--4ea9cf26-90ed-4b44-8a0d-43af22149baa"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--10d0a71b-b7b0-4b59-812b-6a9f859094b1",
"created_by_ref": "identity--949ff029-9578-4d91-8428-1f38178d59b2",
"created": "2022-07-01T03:29:17.100806Z",
"modified": "2022-07-01T03:29:17.100806Z",
"name": "Create Inauthentic Social Media Pages and Groups",
"description": "TA15",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "establish-social-assets"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0007.md",
"external_id": "T0007"
}
],
"object_marking_refs": [
"marking-definition--d545e516-526f-47bc-a99e-3aa1cac2287a"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--4e5ff619-85fd-4d36-a3c4-9a400c8cbfe5",
"created_by_ref": "identity--53e04b17-377e-45d2-b176-3294849546cc",
"created": "2022-07-01T03:29:17.101267Z",
"modified": "2022-07-01T03:29:17.101267Z",
"name": "Create fake experts",
"description": "TA16",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "establish-legitimacy"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0009.md",
"external_id": "T0009"
}
],
"object_marking_refs": [
"marking-definition--b0ce9dfe-3859-4529-b404-babf37771f31"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--e3011cc8-6ecc-4cbd-8827-15feef09bfc5",
"created_by_ref": "identity--e2679b1b-d851-427f-8c2b-0c8269f6156e",
"created": "2022-07-01T03:29:17.101731Z",
"modified": "2022-07-01T03:29:17.101731Z",
"name": "Cultivate ignorant agents",
"description": "TA15",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "establish-social-assets"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0010.md",
"external_id": "T0010"
}
],
"object_marking_refs": [
"marking-definition--65e1b90e-5ed8-45b5-8831-99b8a6f56cfa"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--ce2ffeb8-df39-425b-992e-57d0b11174ca",
"created_by_ref": "identity--2a6fb1d5-2fd2-46be-bf0a-2b7735791652",
"created": "2022-07-01T03:29:17.102189Z",
"modified": "2022-07-01T03:29:17.102189Z",
"name": "Compromise legitimate accounts",
"description": "TA16",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "establish-legitimacy"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0011.md",
"external_id": "T0011"
}
],
"object_marking_refs": [
"marking-definition--c64ec293-b524-48c2-8e90-1359a1052d21"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--1397f207-ad1b-4398-9d06-ed36393d53fa",
"created_by_ref": "identity--e7a9ac1f-d1b0-4a3f-af61-e546ca3ae445",
"created": "2022-07-01T03:29:17.102645Z",
"modified": "2022-07-01T03:29:17.102645Z",
"name": "Create inauthentic websites",
"description": "TA15",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "establish-social-assets"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0013.md",
"external_id": "T0013"
}
],
"object_marking_refs": [
"marking-definition--c91f7963-b220-47db-8707-c034998735ce"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--8ca19a73-b5e2-4715-bb61-7f27777e14b1",
"created_by_ref": "identity--efb531aa-da43-4bd3-b767-47d2fdfb3c3f",
"created": "2022-07-01T03:29:17.10311Z",
"modified": "2022-07-01T03:29:17.10311Z",
"name": "Prepare fundraising campaigns",
"description": "TA15",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "establish-social-assets"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0014.md",
"external_id": "T0014"
}
],
"object_marking_refs": [
"marking-definition--5e84c2ef-d66e-4d32-b59b-524af19cdcce"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--0f8410d6-0ede-4e4f-8b70-d8a6821d25b0",
"created_by_ref": "identity--ba81db1f-626f-46c3-bb99-f88a11819af7",
"created": "2022-07-01T03:29:17.103569Z",
"modified": "2022-07-01T03:29:17.103569Z",
"name": "Create hashtags and search artifacts",
"description": "TA06",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "develop-content"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0015.md",
"external_id": "T0015"
}
],
"object_marking_refs": [
"marking-definition--e25c36d4-b84a-48e3-9d85-8cd8b333f755"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--77789dad-9435-4866-a083-4dbc0a456727",
"created_by_ref": "identity--6dbc3bb6-bfb1-4814-a642-e84b19de7b32",
"created": "2022-07-01T03:29:17.104029Z",
"modified": "2022-07-01T03:29:17.104029Z",
"name": "Create Clickbait",
"description": "TA05",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "microtarget"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0016.md",
"external_id": "T0016"
}
],
"object_marking_refs": [
"marking-definition--9df75d1a-d0a1-4531-b34d-f16b54d677be"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--86e913cc-f722-4f2e-a2df-150ade9d0726",
"created_by_ref": "identity--778425bc-e2fc-4e82-9f10-74e98082be43",
"created": "2022-07-01T03:29:17.104489Z",
"modified": "2022-07-01T03:29:17.104489Z",
"name": "Conduct fundraising",
"description": "TA10",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "drive-offline-activity"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0017.md",
"external_id": "T0017"
}
],
"object_marking_refs": [
"marking-definition--6e5bb1e1-f5ac-42b6-b078-fe3292fa9eb1"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--e46945d5-536e-4d6f-9a46-0f9b6007112d",
"created_by_ref": "identity--2b797c80-0029-4570-8ec4-d8968e972294",
"created": "2022-07-01T03:29:17.104944Z",
"modified": "2022-07-01T03:29:17.104944Z",
"name": "Purchase Targeted Advertisements",
"description": "TA05",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "microtarget"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0018.md",
"external_id": "T0018"
}
],
"object_marking_refs": [
"marking-definition--1cc4f334-81f1-4aa5-94a5-cc8ecdecb207"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--33acdd6d-93eb-4aaf-9e00-4691814bcc88",
"created_by_ref": "identity--c67ea4eb-798d-43ad-b13e-b10aedfd81a2",
"created": "2022-07-01T03:29:17.105397Z",
"modified": "2022-07-01T03:29:17.105397Z",
"name": "Generate information pollution",
"description": "TA06",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "develop-content"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0019.md",
"external_id": "T0019"
}
],
"object_marking_refs": [
"marking-definition--c157d07b-43b6-4b2f-aee8-a335fef9a052"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--adee13dd-8bd5-4738-91b1-3997cf7bd994",
"created_by_ref": "identity--6edc8264-41c1-46ae-8a0e-6090e4211029",
"created": "2022-07-01T03:29:17.10585Z",
"modified": "2022-07-01T03:29:17.10585Z",
"name": "Trial content",
"description": "TA08",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "conduct-pump-priming"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0020.md",
"external_id": "T0020"
}
],
"object_marking_refs": [
"marking-definition--f4cdda6a-56d0-45ea-84b2-3fc6aa953f27"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--b725fa2e-779d-44e5-a0f4-4724d14b6deb",
"created_by_ref": "identity--ec724bf6-a7e7-4496-8a1e-fa9e4cf5c8a4",
"created": "2022-07-01T03:29:17.106312Z",
"modified": "2022-07-01T03:29:17.106312Z",
"name": "Leverage Conspiracy Theory Narratives",
"description": "TA14",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "develop-narratives"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0022.md",
"external_id": "T0022"
}
],
"object_marking_refs": [
"marking-definition--8d89ab9d-c93f-4f24-9f64-c117bbc52cf0"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--66064bf0-d00b-490e-b6f2-3e07baf1a830",
"created_by_ref": "identity--b33bfbf5-ecf8-4423-bbb2-4b53d30975e9",
"created": "2022-07-01T03:29:17.106773Z",
"modified": "2022-07-01T03:29:17.106773Z",
"name": "Distort facts",
"description": "TA06",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "develop-content"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0023.md",
"external_id": "T0023"
}
],
"object_marking_refs": [
"marking-definition--e34375e0-40a4-44ad-8528-8ad89576aa4f"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--5cc3ca96-5655-4238-8d76-9e212bbae9ec",
"created_by_ref": "identity--58d52260-ef12-4246-ad63-ad69b0360e98",
"created": "2022-07-01T03:29:17.107233Z",
"modified": "2022-07-01T03:29:17.107233Z",
"name": "Online polls",
"description": "TA07",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "select-channels-and-affordances"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0029.md",
"external_id": "T0029"
}
],
"object_marking_refs": [
"marking-definition--3da6cf9d-1ce4-4f2e-b6d4-1923b709345d"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--eb6d2cf6-e0cd-446b-a1f3-2cd7b8f20162",
"created_by_ref": "identity--10d05fd9-175e-477e-b416-1e4d9cbab465",
"created": "2022-07-01T03:29:17.107697Z",
"modified": "2022-07-01T03:29:17.107697Z",
"name": "Bait legitimate influencers",
"description": "TA08",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "conduct-pump-priming"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0039 .md",
"external_id": "T0039 "
}
],
"object_marking_refs": [
"marking-definition--24c4802c-ba22-42ec-8d8b-007d95cafea0"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--be4cb928-74dd-4243-bae4-c1bb10540fcc",
"created_by_ref": "identity--0f426ba3-e76e-45e4-8e42-3fca3f75d09a",
"created": "2022-07-01T03:29:17.10816Z",
"modified": "2022-07-01T03:29:17.10816Z",
"name": "Demand insurmountable proof",
"description": "TA14",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "develop-narratives"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0040.md",
"external_id": "T0040"
}
],
"object_marking_refs": [
"marking-definition--813c3ad8-34c8-488c-b3f7-7cf05abb3f41"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--670a229b-d2b3-40ae-8684-32ed5253fa30",
"created_by_ref": "identity--7fc9ce06-d085-4bbc-98eb-7c160b29c799",
"created": "2022-07-01T03:29:17.108618Z",
"modified": "2022-07-01T03:29:17.108618Z",
"name": "Seed Kernel of truth",
"description": "TA08",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "conduct-pump-priming"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0042.md",
"external_id": "T0042"
}
],
"object_marking_refs": [
"marking-definition--f0fdf08b-0e76-4424-abc5-18a83861904d"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--474442df-9662-4d6a-8936-1bf7a71f4118",
"created_by_ref": "identity--3d6ad857-87da-4328-b5bb-734f0be9f047",
"created": "2022-07-01T03:29:17.109075Z",
"modified": "2022-07-01T03:29:17.109075Z",
"name": "Chat apps",
"description": "TA07",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "select-channels-and-affordances"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0043.md",
"external_id": "T0043"
}
],
"object_marking_refs": [
"marking-definition--f00e21f3-820b-458d-a385-e8cb7cec337c"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--976326b8-9bb8-4762-bf85-2e463a534f80",
"created_by_ref": "identity--72e1d4d3-1b4f-40cb-8486-7fa17d59d4fe",
"created": "2022-07-01T03:29:17.109537Z",
"modified": "2022-07-01T03:29:17.109537Z",
"name": "Seed distortions",
"description": "TA08",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "conduct-pump-priming"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0044.md",
"external_id": "T0044"
}
],
"object_marking_refs": [
"marking-definition--8aee4ccb-7e2e-462f-8ae7-41f424c8c8f4"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--7ae144a2-3b79-4740-b651-2d24c2c1a4b1",
"created_by_ref": "identity--649e1891-37f6-459c-87d9-bc02129f0023",
"created": "2022-07-01T03:29:17.109986Z",
"modified": "2022-07-01T03:29:17.109986Z",
"name": "Use fake experts",
"description": "TA08",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "conduct-pump-priming"
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0045.md",
"external_id": "T0045"
}
],
"object_marking_refs": [
"marking-definition--a086a228-95e2-4a73-8f45-73bc6df77063"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
"id": "attack-pattern--6427ef0d-29ee-4b97-a3c6-db7595938187",
"created_by_ref": "identity--52aa5c8b-baa0-4b4b-81dc-3b0337180f85",
"created": "2022-07-01T03:29:17.11044Z",
"modified": "2022-07-01T03:29:17.11044Z",
"name": "Use Search Engine Optimization",
"description": "TA08",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "conduct-pump-priming"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0046.md",
"external_id": "T0046"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--e1cbfcdc-3d0b-4a0f-8924-0b60f6e7db54"
2022-02-20 15:37:38 -05:00
],
2022-06-30 23:30:18 -04:00
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
2022-02-20 15:37:38 -05:00
},
{
2022-06-30 23:30:18 -04:00
"type": "attack-pattern",
2022-02-20 15:37:38 -05:00
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--8e05e3e1-beaa-49b9-a2f1-7200d363a900",
"created_by_ref": "identity--cd267b72-9ade-4cb3-816d-db8785ecbccd",
"created": "2022-07-01T03:29:17.110895Z",
"modified": "2022-07-01T03:29:17.110895Z",
"name": "Censor social media as a political force",
"description": "TA18",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "drive-online-harms"
}
],
2022-02-20 15:37:38 -05:00
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0047.md",
"external_id": "T0047"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--054e01ae-7378-415b-85cc-7f3751559c03"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
2022-02-20 15:37:38 -05:00
],
2022-06-30 23:30:18 -04:00
"x_mitre_version": "1,0"
2022-02-20 15:37:38 -05:00
},
{
2022-06-30 23:30:18 -04:00
"type": "attack-pattern",
2022-02-20 15:37:38 -05:00
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--d053b450-19a8-44c7-a847-6fd11ba6f69a",
"created_by_ref": "identity--54dddb49-ea23-4b28-959d-d68f3ffe6964",
"created": "2022-07-01T03:29:17.111351Z",
"modified": "2022-07-01T03:29:17.111351Z",
"name": "Harass",
"description": "TA18",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "drive-online-harms"
}
],
2022-02-20 15:37:38 -05:00
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0048.md",
"external_id": "T0048"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--53bfe890-fcbd-4e0a-a085-76874996797a"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
2022-02-20 15:37:38 -05:00
],
2022-06-30 23:30:18 -04:00
"x_mitre_version": "1,0"
2022-02-20 15:37:38 -05:00
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--68bcc375-48d3-4efe-aa6b-dc94b2c9be3b",
"created_by_ref": "identity--c12463fb-d446-4d46-86d8-187a9ccd523e",
"created": "2022-07-01T03:29:17.111805Z",
"modified": "2022-07-01T03:29:17.111805Z",
"name": "Flooding the Information Space",
"description": "TA17",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "maximize-exposure"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0049.md",
"external_id": "T0049"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--ce5228d1-307d-4b48-99bd-dc5f8baf0157"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--5ced2330-8d58-4417-8ae3-ce66cabb513c",
"created_by_ref": "identity--6edd4070-0d58-4fcb-a92c-1cd606b1e372",
"created": "2022-07-01T03:29:17.112292Z",
"modified": "2022-07-01T03:29:17.112292Z",
"name": "Organize Events",
"description": "TA10",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "drive-offline-activity"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0057.md",
"external_id": "T0057"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--b4a225e6-c764-4dc7-907a-91c3b332d65d"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--08850f6c-e006-4c4f-886b-c904d8fb77f5",
"created_by_ref": "identity--2f19463e-0d5e-4578-a45f-ecef828a771b",
"created": "2022-07-01T03:29:17.11275Z",
"modified": "2022-07-01T03:29:17.11275Z",
"name": "Play the long game",
"description": "TA11",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "persist-in-the-information-environment"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0059.md",
"external_id": "T0059"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--02d2bd8f-5650-473c-b7b8-7c42a13c9820"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--b499ae71-92f2-41b4-94f1-a3c061a96871",
"created_by_ref": "identity--7c5a1256-d940-4fd2-ab27-0072959a20bd",
"created": "2022-07-01T03:29:17.113212Z",
"modified": "2022-07-01T03:29:17.113212Z",
"name": "Continue to Amplify",
"description": "TA11",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "persist-in-the-information-environment"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0060.md",
"external_id": "T0060"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--31e37208-2a7d-43c4-b831-7e3462c2b2ee"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--0590dab3-9ceb-4b71-9187-8847ed98f0c5",
"created_by_ref": "identity--81fccebf-8fd2-4369-b6d8-eb7bc5a94dc4",
"created": "2022-07-01T03:29:17.113675Z",
"modified": "2022-07-01T03:29:17.113675Z",
"name": "Sell Merchandise",
"description": "TA10",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "drive-offline-activity"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0061.md",
"external_id": "T0061"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--ef2c3e54-f8ba-4edc-8460-be63c6cfc8c7"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--c50c3595-ae68-4e13-8b76-40359cd0846a",
"created_by_ref": "identity--24f42049-ba0d-4bc3-8a8a-1121fb44228c",
"created": "2022-07-01T03:29:17.114138Z",
"modified": "2022-07-01T03:29:17.114138Z",
"name": "Prepare Physical Broadcast Capabilities",
"description": "TA15",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "establish-social-assets"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0065.md",
"external_id": "T0065"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--66721b32-473e-4f07-b524-25780f47c326"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--8311c92c-61a1-4277-afca-5c4a43e18c06",
"created_by_ref": "identity--cfb5f6df-5c4d-4a9a-823e-337fa893c6b7",
"created": "2022-07-01T03:29:17.114594Z",
"modified": "2022-07-01T03:29:17.114594Z",
"name": "Degrade Adversary",
"description": "TA02",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "plan-objectives"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0066.md",
"external_id": "T0066"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--b04ba37c-7f96-4ce1-b762-dee94ae0bd38"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--82df414a-473f-4d78-9bb0-ee9efd58965c",
"created_by_ref": "identity--9be00094-7bf8-4112-8695-c3f7debcfc07",
"created": "2022-07-01T03:29:17.115059Z",
"modified": "2022-07-01T03:29:17.115059Z",
"name": "Respond to Breaking News Event or Active Crisis",
"description": "TA14",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "develop-narratives"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0068.md",
"external_id": "T0068"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--879a346f-3cc6-4e3a-accd-2d0ae5b6f2f2"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--21c051ac-c395-4ac0-a064-f97aff09639b",
"created_by_ref": "identity--66aa20b5-b271-42ea-b341-498721a297b4",
"created": "2022-07-01T03:29:17.115517Z",
"modified": "2022-07-01T03:29:17.115517Z",
"name": "Segment Audiences",
"description": "TA13",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "target-audience-analysis"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0072.md",
"external_id": "T0072"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--fbb99453-572c-48a8-a6f6-b7d63530c287"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--5a63d85c-fe2a-4932-8db2-f5efaabdfff5",
"created_by_ref": "identity--b6bd7a37-8032-46e7-bda4-0605831594c3",
"created": "2022-07-01T03:29:17.115975Z",
"modified": "2022-07-01T03:29:17.115975Z",
"name": "Determine Target Audiences",
"description": "TA01",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "plan-strategy"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0073.md",
"external_id": "T0073"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--7c733617-4276-4f98-94a3-c8b7ad2e371e"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--d9e11aed-9dd8-4475-8ae5-8712ff59f586",
"created_by_ref": "identity--d1019309-43a3-4678-9e95-0dcc6adf34db",
"created": "2022-07-01T03:29:17.116426Z",
"modified": "2022-07-01T03:29:17.116426Z",
"name": "Determine Strategic Ends",
"description": "TA01",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "plan-strategy"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0074.md",
"external_id": "T0074"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--7c51b002-f10f-4d6a-822d-4222b2b6bc2b"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--fe45dbba-bd39-40a4-b62a-befd4cd7a11f",
"created_by_ref": "identity--ce3227cb-dbca-431c-9508-bd9b38c37f02",
"created": "2022-07-01T03:29:17.116887Z",
"modified": "2022-07-01T03:29:17.116887Z",
"name": "Dismiss",
"description": "TA02",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "plan-objectives"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0075.md",
"external_id": "T0075"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--a58597d6-33a8-492d-a437-fb7b94fdb267"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--36f2f883-c35e-49e4-8908-7002029f200a",
"created_by_ref": "identity--435d8bae-f490-434e-ae08-a769da31c9ff",
"created": "2022-07-01T03:29:17.117339Z",
"modified": "2022-07-01T03:29:17.117339Z",
"name": "Distort",
"description": "TA02",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "plan-objectives"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0076.md",
"external_id": "T0076"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--436a148e-4689-48bf-bfee-44345ad7b74d"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--ad9ae97c-340b-4e33-96fe-ee0ad1407eb0",
"created_by_ref": "identity--533564df-a233-45cc-a4bd-67dde9b464a3",
"created": "2022-07-01T03:29:17.117798Z",
"modified": "2022-07-01T03:29:17.117798Z",
"name": "Distract",
"description": "TA02",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "plan-objectives"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0077.md",
"external_id": "T0077"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--08870f86-287a-418d-aec3-1e5ccf8543b7"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--156bbbf4-8f8a-44f3-9533-af5118313265",
"created_by_ref": "identity--0fbb6aa3-5a2c-4965-bad7-e1a009a30414",
"created": "2022-07-01T03:29:17.118259Z",
"modified": "2022-07-01T03:29:17.118259Z",
"name": "Dismay",
"description": "TA02",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "plan-objectives"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0078.md",
"external_id": "T0078"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--0745cf80-2737-42fc-8f9d-816fb5e54dfd"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--571a7838-129d-4251-b809-3309b9e8aa5f",
"created_by_ref": "identity--406cf1bb-fe17-4550-b474-c0199f3e6e7c",
"created": "2022-07-01T03:29:17.11871Z",
"modified": "2022-07-01T03:29:17.11871Z",
"name": "Divide",
"description": "TA02",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "plan-objectives"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0079.md",
"external_id": "T0079"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--f0f06852-d69f-4922-a268-3cca81dfe969"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--d538394c-6e96-4019-851d-f16db761bfb9",
"created_by_ref": "identity--83f9262b-4bd1-4abd-b280-723cda0c0770",
"created": "2022-07-01T03:29:17.119171Z",
"modified": "2022-07-01T03:29:17.119171Z",
"name": "Map Target Audience Information Environment",
"description": "TA13",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "target-audience-analysis"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0080.md",
"external_id": "T0080"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--b57d8117-50dc-4f53-992c-e1dd829298cc"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--06e0e6e4-1c50-4813-9ff3-f49592514ab8",
"created_by_ref": "identity--1436a742-18aa-4755-a263-57093176e4e9",
"created": "2022-07-01T03:29:17.119621Z",
"modified": "2022-07-01T03:29:17.119621Z",
"name": "Identify Social and Technical Vulnerabilities",
"description": "TA13",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "target-audience-analysis"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0081.md",
"external_id": "T0081"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--897d9914-1f35-4b99-8192-8bc918077f22"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--aa45be8a-db0f-422f-96d0-9959091d70b6",
"created_by_ref": "identity--a9de2212-e29b-40c5-a5f2-96262b6ab411",
"created": "2022-07-01T03:29:17.120074Z",
"modified": "2022-07-01T03:29:17.120074Z",
"name": "Develop New Narratives",
"description": "TA14",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "develop-narratives"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0082.md",
"external_id": "T0082"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--5395b9fe-bc52-4781-a8d7-b2e89efffb7d"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--17f077e3-6308-4266-9f63-06d69db6fb45",
"created_by_ref": "identity--2c304336-3c15-47fb-929a-26b00f4d0b65",
"created": "2022-07-01T03:29:17.120528Z",
"modified": "2022-07-01T03:29:17.120528Z",
"name": "Integrate Target Audience Vulnerabilities into Narrative",
"description": "TA14",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "develop-narratives"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0083.md",
"external_id": "T0083"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--273d5ee8-e85f-451f-9fa3-466df09eae72"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--e5a96616-8465-4184-ac6f-09b46bdb5e1f",
"created_by_ref": "identity--b091aac5-cc47-4c38-a077-15d5acb0564c",
"created": "2022-07-01T03:29:17.120982Z",
"modified": "2022-07-01T03:29:17.120982Z",
"name": "Reuse Existing Content",
2022-02-20 15:37:38 -05:00
"description": "TA06",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "develop-content"
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0084.md",
"external_id": "T0084"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--af398d8c-ff47-4d4c-b671-e73af7df50f4"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--9988cf65-495c-4880-95c1-f660858e7939",
"created_by_ref": "identity--c48b52b0-b82d-4bda-98c7-01a8f94a99ba",
"created": "2022-07-01T03:29:17.121437Z",
"modified": "2022-07-01T03:29:17.121437Z",
"name": "Develop Text-based Content",
2022-02-20 15:37:38 -05:00
"description": "TA06",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "develop-content"
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0085.md",
"external_id": "T0085"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--728e63f8-bd2b-4daa-a1cc-bd368c32ed74"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--58c939d8-05bb-45ca-b12d-dcd9cc8df2dc",
"created_by_ref": "identity--e46499c8-aed1-4aeb-80ff-a73482840b99",
"created": "2022-07-01T03:29:17.121892Z",
"modified": "2022-07-01T03:29:17.121892Z",
"name": "Develop Image-based Content",
2022-02-20 15:37:38 -05:00
"description": "TA06",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "develop-content"
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0086.md",
"external_id": "T0086"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--8f90dd1e-493a-45f6-afd6-160a43d5980f"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--41cd20d5-2365-446a-bd9d-5756ff5f5986",
"created_by_ref": "identity--a8bb5ff1-6d2f-4d1f-901d-77eb1c1cd8d8",
"created": "2022-07-01T03:29:17.122352Z",
"modified": "2022-07-01T03:29:17.122352Z",
"name": "Develop Video-based Content",
2022-02-20 15:37:38 -05:00
"description": "TA06",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "develop-content"
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0087.md",
"external_id": "T0087"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--59edea27-8e32-4551-81f0-7406355eb952"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--b25838c1-95b5-4c31-a1bc-f4b5e4994854",
"created_by_ref": "identity--a5fd4261-af1c-4f01-8c80-548a054a1235",
"created": "2022-07-01T03:29:17.122823Z",
"modified": "2022-07-01T03:29:17.122823Z",
"name": "Develop Audio-based Content",
2022-02-20 15:37:38 -05:00
"description": "TA06",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "develop-content"
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0088.md",
"external_id": "T0088"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--3fb5f453-07e4-433f-8e63-158bc202fec8"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--82022c93-6e94-4842-99b6-93a783657a12",
"created_by_ref": "identity--6f3df079-f7df-473f-8e69-65e4867052e6",
"created": "2022-07-01T03:29:17.123282Z",
"modified": "2022-07-01T03:29:17.123282Z",
"name": "Obtain Private Documents",
2022-02-20 15:37:38 -05:00
"description": "TA06",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
"phase_name": "develop-content"
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0089.md",
"external_id": "T0089"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--73f8f675-6ecb-4d1b-bc52-8b52558d8493"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--8702511a-d1e3-4ca5-97a3-0a8b33bbdf53",
"created_by_ref": "identity--a26fa083-3fc8-4278-8ed5-77a44b571648",
"created": "2022-07-01T03:29:17.123743Z",
"modified": "2022-07-01T03:29:17.123743Z",
"name": "Create Inauthentic Accounts",
"description": "TA15",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "establish-social-assets"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0090.md",
"external_id": "T0090"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--c15c1264-bd1f-40d1-b0a2-bb3f67de3659"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--eea82e81-08cd-42f7-9c3f-32d296341fee",
"created_by_ref": "identity--05400086-dfff-4980-bb7d-ec94e33ae378",
"created": "2022-07-01T03:29:17.124198Z",
"modified": "2022-07-01T03:29:17.124198Z",
"name": "Recruit bad actors",
"description": "TA15",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "establish-social-assets"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0091.md",
"external_id": "T0091"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--860df523-d43d-4b94-a3e7-33382331c6d5"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--378c1a19-24f1-466d-a5f8-93457ca0b89c",
"created_by_ref": "identity--a13afd19-3282-4cee-9704-a69dae1249b8",
"created": "2022-07-01T03:29:17.124689Z",
"modified": "2022-07-01T03:29:17.124689Z",
"name": "Build Network",
"description": "TA15",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "establish-social-assets"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0092.md",
"external_id": "T0092"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--249a4868-99f9-4e0b-be59-7925d3d061b9"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--86b561d4-5a64-4dbb-bc52-2c68bdec854a",
"created_by_ref": "identity--be1c3972-948e-444a-8bce-61c3b8643de9",
"created": "2022-07-01T03:29:17.125148Z",
"modified": "2022-07-01T03:29:17.125148Z",
"name": "Acquire/ recruit Network",
"description": "TA15",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "establish-social-assets"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0093.md",
"external_id": "T0093"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--6ff5c683-050b-4fa1-a54f-49cb8d1d3df2"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--4ccec7a7-945f-40c2-8b51-a5701ae8aa14",
"created_by_ref": "identity--799d635e-d062-4488-aaa4-ab32cd1763da",
"created": "2022-07-01T03:29:17.125607Z",
"modified": "2022-07-01T03:29:17.125607Z",
"name": "Infiltrate Existing Networks",
"description": "TA15",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "establish-social-assets"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0094.md",
"external_id": "T0094"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--7200a735-ad5b-4c08-ad3e-07d725a7faac"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--ab0f7411-ff09-4897-b55c-301fdd6276b8",
"created_by_ref": "identity--3b10ff39-a4f1-461b-9b82-26e85d98d99d",
"created": "2022-07-01T03:29:17.126065Z",
"modified": "2022-07-01T03:29:17.126065Z",
"name": "Develop Owned Media Assets",
"description": "TA15",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "establish-social-assets"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0095.md",
"external_id": "T0095"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--2c194b27-329e-41fb-98ed-df4f06db3141"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--5db1d9a2-52a4-4b43-bca4-cdb387335a3b",
"created_by_ref": "identity--5f39833d-3706-4af3-b5db-9f00bdc5e02c",
"created": "2022-07-01T03:29:17.126517Z",
"modified": "2022-07-01T03:29:17.126517Z",
"name": "Leverage Content Farm",
"description": "TA15",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "establish-social-assets"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0096.md",
"external_id": "T0096"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--f7ea534a-bb6f-4ea3-a4f2-24a05bcc6a32"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--e00abc7f-5f53-487a-8562-e3ba4c6ca0b6",
"created_by_ref": "identity--7a62d925-cec9-4cde-a5b4-e4eb5ee97b73",
"created": "2022-07-01T03:29:17.126973Z",
"modified": "2022-07-01T03:29:17.126973Z",
"name": "Create personas",
"description": "TA16",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "establish-legitimacy"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0097.md",
"external_id": "T0097"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--aa05a95c-e43f-490a-ac96-f7f0c5fe3fef"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--ecfdb2b2-5841-4c61-ae57-1bfa1dd50a87",
"created_by_ref": "identity--22a4d897-ac44-41d7-9761-d1c23a31ce28",
"created": "2022-07-01T03:29:17.127428Z",
"modified": "2022-07-01T03:29:17.127428Z",
"name": "Establish Inauthentic News Sites",
"description": "TA16",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "establish-legitimacy"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0098.md",
"external_id": "T0098"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--d684d1f9-7edd-412e-a730-e5cf08509bbf"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--69e703e0-990f-45cf-a4eb-9eb2193ee58d",
"created_by_ref": "identity--81d31ff3-891e-4a34-b094-297d877e070a",
"created": "2022-07-01T03:29:17.12789Z",
"modified": "2022-07-01T03:29:17.12789Z",
"name": "Prepare Assets Impersonating Legitimate Entities",
"description": "TA16",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "establish-legitimacy"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0099.md",
"external_id": "T0099"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--7238cf38-fabd-46b9-a27d-325688c423fe"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--ed11f144-9907-4dda-8d51-f9084227b41c",
"created_by_ref": "identity--1fdd359e-d9eb-42ef-851f-e8f7e907a990",
"created": "2022-07-01T03:29:17.128344Z",
"modified": "2022-07-01T03:29:17.128344Z",
"name": "Co-opt Trusted Sources",
"description": "TA16",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "establish-legitimacy"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0100.md",
"external_id": "T0100"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--06d3e445-3c4b-4a34-8641-98f8469a880c"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--7283861d-801a-40d3-8e63-fb2d9951fee6",
"created_by_ref": "identity--6d431156-2568-4a98-a905-75b4dc2ec0b8",
"created": "2022-07-01T03:29:17.12891Z",
"modified": "2022-07-01T03:29:17.12891Z",
"name": "Create Localized Content",
"description": "TA05",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "microtarget"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0101.md",
"external_id": "T0101"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--4e4ef88f-e70b-4a42-99b7-9d6114c92124"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--fef87440-2f0d-4623-b952-04f8f6712938",
"created_by_ref": "identity--5c1d10e0-6bff-4f50-8d47-2ef9197c061c",
"created": "2022-07-01T03:29:17.129378Z",
"modified": "2022-07-01T03:29:17.129378Z",
"name": "Leverage Echo Chambers/Filter Bubbles",
"description": "TA05",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "microtarget"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0102.md",
"external_id": "T0102"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--7996c25b-9633-4fa2-b7c0-1afd4aa59123"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--f7eb387d-dc29-4961-9aa5-2ef707ef4d4e",
"created_by_ref": "identity--02600a7a-9c21-4d6a-91bd-65d45451d843",
"created": "2022-07-01T03:29:17.129843Z",
"modified": "2022-07-01T03:29:17.129843Z",
"name": "Livestream",
"description": "TA07",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0103.md",
"external_id": "T0103"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--bf0180fb-de93-494f-805a-f3fceab6d48f"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--966328aa-86fd-4f90-85da-0685b146c1ac",
"created_by_ref": "identity--d103d1d9-e3c8-4796-903e-067a5d929aff",
"created": "2022-07-01T03:29:17.130301Z",
"modified": "2022-07-01T03:29:17.130301Z",
"name": "Social Networks",
"description": "TA07",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0104.md",
"external_id": "T0104"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--ad51d9d0-5a1c-4bd2-8bac-ccc2d5f01161"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--df56db91-8883-40b5-88d3-a144c2093f27",
"created_by_ref": "identity--350a4915-af5e-4bd0-a737-a79d6d5d527f",
"created": "2022-07-01T03:29:17.130762Z",
"modified": "2022-07-01T03:29:17.130762Z",
"name": "Media Sharing Networks",
"description": "TA07",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0105.md",
"external_id": "T0105"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--ad61e09c-a1f4-40b5-877c-2c9933937e24"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--fdd2573d-3ad7-4ae0-a0ff-7542978aa448",
"created_by_ref": "identity--86080875-4c7c-4777-bda0-b3493e0c2d02",
"created": "2022-07-01T03:29:17.13122Z",
"modified": "2022-07-01T03:29:17.13122Z",
"name": "Discussion Forums",
"description": "TA07",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0106.md",
"external_id": "T0106"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--c4cd66f6-9714-4a00-9007-5f5b13e547e2"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--99eb03c9-985f-4c62-9c07-d20939f7beb6",
"created_by_ref": "identity--c98c629f-8200-4d6c-bd09-efb9809fafd9",
"created": "2022-07-01T03:29:17.131683Z",
"modified": "2022-07-01T03:29:17.131683Z",
"name": "Bookmarking and Content Curation",
"description": "TA07",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0107.md",
"external_id": "T0107"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--b2249aa7-99b9-4ff6-8491-e806868349e5"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--06cfef07-9214-4df2-a401-84c040d3e062",
"created_by_ref": "identity--635e6fde-dc4a-4c1e-8423-251d86d1716e",
"created": "2022-07-01T03:29:17.132138Z",
"modified": "2022-07-01T03:29:17.132138Z",
"name": "Blogging and Publishing Networks",
"description": "TA07",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0108.md",
"external_id": "T0108"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--331b217d-fcf4-4a64-b4af-eb0f06c33825"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--970f3833-768b-4789-b6f3-8158c240e6c1",
"created_by_ref": "identity--4cae941b-6bdd-41bd-8c00-1231cf53eaef",
"created": "2022-07-01T03:29:17.132595Z",
"modified": "2022-07-01T03:29:17.132595Z",
"name": "Consumer Review Networks",
"description": "TA07",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0109.md",
"external_id": "T0109"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--19909584-6abf-42d1-985b-231aa5609359"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--89c58eaa-2973-4ce4-81b2-bc644d8dff02",
"created_by_ref": "identity--771e28f4-3218-4abb-b6bb-a27c787bdbfa",
"created": "2022-07-01T03:29:17.133055Z",
"modified": "2022-07-01T03:29:17.133055Z",
"name": "Formal Diplomatic Channels",
"description": "TA07",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0110.md",
"external_id": "T0110"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--871acae2-78f0-4ead-8a9e-b10689e07906"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--470a1d29-5132-4744-b5ed-fa2ab50973a3",
"created_by_ref": "identity--da0bc2f8-12e6-4ec3-9794-58ce6c5d2550",
"created": "2022-07-01T03:29:17.133515Z",
"modified": "2022-07-01T03:29:17.133515Z",
"name": "Traditional Media",
"description": "TA07",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0111.md",
"external_id": "T0111"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--4db91436-2db3-4a1e-89c6-80b0be3fcadb"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--2f468380-3519-45f0-b377-050df5af0316",
"created_by_ref": "identity--68496637-a6d4-4740-a8c6-4d9b0b688ad0",
"created": "2022-07-01T03:29:17.13397Z",
"modified": "2022-07-01T03:29:17.13397Z",
"name": "Email",
"description": "TA07",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "select-channels-and-affordances"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0112.md",
"external_id": "T0112"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--048a31b3-4103-4c59-b29e-26adf227909c"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--5b44f922-66c0-4241-b933-4781edcbd457",
"created_by_ref": "identity--24d24d03-1356-4aee-a3da-4653eb081889",
"created": "2022-07-01T03:29:17.134421Z",
"modified": "2022-07-01T03:29:17.134421Z",
"name": "Employ Commercial Analytic Firms",
"description": "TA08",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "conduct-pump-priming"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0113.md",
"external_id": "T0113"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--7cd3c8f4-122d-4262-9f63-a6e646f96fb5"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--501730c4-a597-4dfe-8487-688befb42b10",
"created_by_ref": "identity--e785f97d-e66a-4e3b-9d3d-dcb75ab307d8",
"created": "2022-07-01T03:29:17.134957Z",
"modified": "2022-07-01T03:29:17.134957Z",
"name": "Deliver Ads",
2022-02-20 15:37:38 -05:00
"description": "TA09",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "deliver-content"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0114.md",
"external_id": "T0114"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--6206fbd9-5b7d-4101-9869-4a031afbe4df"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--bc6b823b-8a40-4ba3-99ab-0092341f2cc6",
"created_by_ref": "identity--147a00a2-3f5b-49ce-9d1e-78a6780d7d81",
"created": "2022-07-01T03:29:17.135439Z",
"modified": "2022-07-01T03:29:17.135439Z",
"name": "Post Content",
2022-02-20 15:37:38 -05:00
"description": "TA09",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "deliver-content"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0115.md",
"external_id": "T0115"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--87fb19be-2eab-4cb0-92c0-950b415b07d2"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--55e306db-023f-4634-8e7a-d9f1753f1403",
"created_by_ref": "identity--4e65dc6d-3f43-4ea2-a633-6ea513b65471",
"created": "2022-07-01T03:29:17.1359Z",
"modified": "2022-07-01T03:29:17.1359Z",
"name": "Comment or Reply on Content",
2022-02-20 15:37:38 -05:00
"description": "TA09",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "deliver-content"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0116.md",
"external_id": "T0116"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--1d1032b7-2302-4980-b4fa-0ddaca3c1fe8"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--c9156db4-b6b2-485b-bac1-a31516bea444",
"created_by_ref": "identity--2bef3f55-6ce0-44da-acde-3a7855a38291",
"created": "2022-07-01T03:29:17.136363Z",
"modified": "2022-07-01T03:29:17.136363Z",
"name": "Attract Traditional Media",
2022-02-20 15:37:38 -05:00
"description": "TA09",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "deliver-content"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0117.md",
"external_id": "T0117"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--96aa2ed8-9c51-4307-88fc-441d79e72b72"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--37aed67a-9d72-4f4f-a44b-3dfb06995535",
"created_by_ref": "identity--00a115b8-decc-4ece-a2b4-752003ba4683",
"created": "2022-07-01T03:29:17.136819Z",
"modified": "2022-07-01T03:29:17.136819Z",
"name": "Amplify Existing Narrative",
"description": "TA17",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "maximize-exposure"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0118.md",
"external_id": "T0118"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--00bcdef4-19d7-4556-ad99-237f7161a01f"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--0ab43e92-4882-457c-8ca6-c354ac48b294",
"created_by_ref": "identity--e6d8a95b-9b10-48ca-b8e1-b077500ec588",
"created": "2022-07-01T03:29:17.137316Z",
"modified": "2022-07-01T03:29:17.137316Z",
"name": "Cross-Posting",
"description": "TA17",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "maximize-exposure"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0119.md",
"external_id": "T0119"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--16a6d36f-a149-4ed5-b05e-63ac6aaa928a"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--fb0fe94e-7214-4aed-a3b8-d8e21fe0f934",
"created_by_ref": "identity--9a50eaed-346d-429b-ab68-36d9d1883d71",
"created": "2022-07-01T03:29:17.137779Z",
"modified": "2022-07-01T03:29:17.137779Z",
"name": "Incentivize Sharing",
"description": "TA17",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "maximize-exposure"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0120.md",
"external_id": "T0120"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--aac40058-3121-4869-9029-566b754482ea"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--0281663e-716f-41b1-be93-08f7bad1ddef",
"created_by_ref": "identity--c520075b-a92a-4f85-96fe-b724de95492a",
"created": "2022-07-01T03:29:17.138235Z",
"modified": "2022-07-01T03:29:17.138235Z",
"name": "Manipulate Platform Algorithm",
"description": "TA17",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "maximize-exposure"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0121.md",
"external_id": "T0121"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--7a0da991-8525-4cd7-9707-546159b1d1c3"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--fb56da5b-2a04-4d5d-8399-97b7ac04525f",
"created_by_ref": "identity--01935b3a-243c-4232-8366-767df5ba5d9d",
"created": "2022-07-01T03:29:17.138696Z",
"modified": "2022-07-01T03:29:17.138696Z",
"name": "Direct Users to Alternative Platforms",
"description": "TA17",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "maximize-exposure"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0122.md",
"external_id": "T0122"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--98150158-c209-40ef-8f67-8b0e068283dd"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--bd436c13-0ab4-4b4b-a845-ae87918a04e8",
"created_by_ref": "identity--dd4a264b-4dc5-4e7f-9cb1-41d62ff84fe4",
"created": "2022-07-01T03:29:17.139152Z",
"modified": "2022-07-01T03:29:17.139152Z",
"name": "Control Information Environment through Offensive Cyberspace Operations",
"description": "TA18",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "drive-online-harms"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0123.md",
"external_id": "T0123"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--7ad306b6-8013-4090-b62a-ddad48b77c66"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--93c39fc5-412f-44b7-a1a1-badc8a1bca3a",
"created_by_ref": "identity--ff3177e1-cb74-49f6-92d9-9760994d1245",
"created": "2022-07-01T03:29:17.139611Z",
"modified": "2022-07-01T03:29:17.139611Z",
"name": "Suppress Opposition",
"description": "TA18",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "drive-online-harms"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0124.md",
"external_id": "T0124"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--374994be-2311-4e29-91b4-8e46d3a733d6"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--eedcc7f8-edec-4edb-9b08-a890cf55c907",
"created_by_ref": "identity--7f51c314-3c76-4bb9-b1e9-c43a441088a9",
"created": "2022-07-01T03:29:17.140068Z",
"modified": "2022-07-01T03:29:17.140068Z",
"name": "Platform Filtering",
"description": "TA18",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "drive-online-harms"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0125.md",
"external_id": "T0125"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--aec46781-a9af-4956-ac97-90805bdd57a2"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--5f3b98bc-bb23-495b-bb5f-d374cb552333",
"created_by_ref": "identity--04a2369c-c174-45ec-8f6c-bd86d4615e94",
"created": "2022-07-01T03:29:17.140525Z",
"modified": "2022-07-01T03:29:17.140525Z",
"name": "Encourage Attendance at Events",
"description": "TA10",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "drive-offline-activity"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0126.md",
"external_id": "T0126"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--75b6f15e-0ebc-4023-8401-c77c43cad473"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--d529115b-3c95-42c2-bd2c-ca9f33aac00c",
"created_by_ref": "identity--b75c115a-736d-4f7e-b16e-2c77681d4355",
"created": "2022-07-01T03:29:17.140979Z",
"modified": "2022-07-01T03:29:17.140979Z",
"name": "Physical Violence",
"description": "TA10",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "drive-offline-activity"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0127.md",
"external_id": "T0127"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--93c68e3b-9c3d-4734-8bc3-f5f15d277b97"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--055b0bf8-8474-488f-8e3d-52d947132649",
"created_by_ref": "identity--6754c7de-f65b-4c7a-ab0e-2f6898e78b9b",
"created": "2022-07-01T03:29:17.141434Z",
"modified": "2022-07-01T03:29:17.141434Z",
"name": "Conceal People",
"description": "TA11",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "persist-in-the-information-environment"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0128.md",
"external_id": "T0128"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--ce3102d0-e888-457e-978c-080e0d170683"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--61f9d9e8-83c8-4eaa-b7c2-b7bba16b948b",
"created_by_ref": "identity--bddd29bc-196d-40b4-8c68-be85f2f68e35",
"created": "2022-07-01T03:29:17.14189Z",
"modified": "2022-07-01T03:29:17.14189Z",
"name": "Conceal Operational Activity",
"description": "TA11",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "persist-in-the-information-environment"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0129.md",
"external_id": "T0129"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--4bfa250f-3859-47a6-b2aa-0a0feab550b8"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--e5ca8c74-3a97-449f-b2fd-a6c68001022e",
"created_by_ref": "identity--74764361-a0ca-4a61-b7c3-07f5589c908c",
"created": "2022-07-01T03:29:17.142343Z",
"modified": "2022-07-01T03:29:17.142343Z",
"name": "Conceal Infrastructure",
"description": "TA11",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "persist-in-the-information-environment"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0130.md",
"external_id": "T0130"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--0732f928-a6d2-46c4-983f-f385a18d9c30"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--f8c2e933-a4ba-410a-8689-d6882b92e28c",
"created_by_ref": "identity--6d8fd8d9-aa56-4ae4-80fc-4a0ca136f567",
"created": "2022-07-01T03:29:17.1428Z",
"modified": "2022-07-01T03:29:17.1428Z",
"name": "Exploit TOS/Content Moderation",
"description": "TA11",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "persist-in-the-information-environment"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0131.md",
"external_id": "T0131"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--3e99c627-a96e-4eef-9a2e-ce23c1e3895f"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--a0c6c1cb-b4b6-4f91-ba68-489a7fcf2b9b",
"created_by_ref": "identity--5bf5359f-d86d-462a-9231-ec13db821278",
"created": "2022-07-01T03:29:17.143249Z",
"modified": "2022-07-01T03:29:17.143249Z",
"name": "Measure Performance",
"description": "TA12",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "assess-effectiveness"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0132.md",
"external_id": "T0132"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--7006fd01-2469-4378-8f80-02f3b2632f4d"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--0503f142-a258-45ee-8c51-4ec589ec4d26",
"created_by_ref": "identity--f26d6354-06a8-49af-a6ab-35b84e3aaafa",
"created": "2022-07-01T03:29:17.143701Z",
"modified": "2022-07-01T03:29:17.143701Z",
"name": "Measure Effectiveness",
"description": "TA12",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "assess-effectiveness"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0133.md",
"external_id": "T0133"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--9a5ed9b1-4394-4791-be2a-8ee409828b58"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "attack-pattern--7cb970a6-d4bb-43be-ac7f-92a1b3eb24ef",
"created_by_ref": "identity--34d1bc62-7da2-4c56-b1c5-320c7cd9f44f",
"created": "2022-07-01T03:29:17.144152Z",
"modified": "2022-07-01T03:29:17.144152Z",
"name": "Measure Effectiveness Indicators (or KPIs)",
"description": "TA12",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "assess-effectiveness"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
2022-06-30 23:30:18 -04:00
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0134.md",
"external_id": "T0134"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-06-30 23:30:18 -04:00
"marking-definition--4f5f5cd0-90a6-4338-beaf-441168ca9303"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1,0"
},
{
"type": "x-mitre-matrix",
"spec_version": "2.1",
2022-06-30 23:30:18 -04:00
"id": "x-mitre-matrix--4592a0a9-b821-47ad-b0c6-5ce63c628719",
"created": "2022-07-01T03:29:17.144346Z",
"modified": "2022-07-01T03:29:17.144346Z",
2022-02-20 15:37:38 -05:00
"name": "DISARM Framework",
"description": "DISARM is a framework designed for describing and understanding disinformation incidents.",
"tactic_refs": [
2022-06-30 23:30:18 -04:00
"x-mitre-tactic--ca848c76-3e2e-4059-a61f-dce4180b4710",
"x-mitre-tactic--eec7c49a-35c0-4ed2-9161-f7dba316a609",
"x-mitre-tactic--e749a24c-8362-4fed-ba26-51e56b37b439",
"x-mitre-tactic--4348a49d-d21a-4915-a512-ba1accaa8cd9",
"x-mitre-tactic--7c9b3fa5-50f8-4fab-acc3-f984b7290cd7",
"x-mitre-tactic--f59414c8-2d4d-4d9e-8d88-fe8a339270d1",
"x-mitre-tactic--717ccb01-df67-48a8-b6ec-9551272a4ff4",
"x-mitre-tactic--b2ad03fa-b162-4161-b864-344f9cb69ad3",
"x-mitre-tactic--efddae0c-df65-48be-a7a4-067237d8a528",
"x-mitre-tactic--96ec7676-22a8-40f8-91f9-2b770fec3a78",
"x-mitre-tactic--10b904db-7568-4a50-bf6f-9541f3b01924",
"x-mitre-tactic--977b0d14-c42a-4f3e-badb-fdabb9781544",
"x-mitre-tactic--5d068e30-413a-4465-b51b-8e9fc1e18b1e",
"x-mitre-tactic--60087ffe-9390-4baf-8e93-20b3f075da8e",
"x-mitre-tactic--c4e65fa5-4f02-4075-b26f-07c0d07badaa",
"x-mitre-tactic--2fad8829-108a-4d6a-8135-6bc3bf74a770"
2022-02-20 15:37:38 -05:00
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation",
"external_id": "DISARM"
}
]
}
]
}