2022-07-02 00:28:52 -04:00
{
"type" : "bundle" ,
2022-07-03 19:59:09 -04:00
"id" : "bundle--ef177071-6d4d-4be2-901c-27078683007f" ,
2022-07-02 00:28:52 -04:00
"objects" : [
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-07-03 19:59:09 -04:00
"id" : "attack-pattern--3845d1f0-db88-41bb-95bf-8741ff9e72ea" ,
"created_by_ref" : "identity--f1a0f560-2d9e-4c5d-bf47-7e96e805de82" ,
"created" : "2022-07-03T23:52:02.9131Z" ,
"modified" : "2022-07-03T23:52:02.9131Z" ,
2022-07-02 15:40:09 -04:00
"name" : "Alter Authentic Documents" ,
2022-07-02 16:01:17 -04:00
"description" : "Alter authentic documents (public or non-public) to achieve campaign goals. The altered documents are intended to appear as if they are authentic can be \"leaked\" during later stages in the operation." ,
2022-07-02 00:28:52 -04:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
2022-07-03 19:59:09 -04:00
"source_name" : "mitre-attack" ,
2022-07-02 00:28:52 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0089.003.md" ,
"external_id" : "T0089.003"
}
] ,
"object_marking_refs" : [
2022-07-03 19:59:09 -04:00
"marking-definition--f79f25d2-8b96-4580-b169-eb7b613a7c31"
2022-07-02 00:28:52 -04:00
] ,
"x_mitre_is_subtechnique" : true ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
2022-07-03 19:59:09 -04:00
"x_mitre_version" : "2.1"
2022-07-02 00:28:52 -04:00
}
]
}