mirror of
https://github.com/DISARMFoundation/DISARMframeworks.git
synced 2024-12-13 01:44:23 -05:00
37 lines
794 B
Markdown
37 lines
794 B
Markdown
|
# Counter C00131: Seize and analyse botnet servers
|
||
|
|
|
||
|
|
* **Summary**: Take botnet servers offline by seizing them.
|
||
|
|
|
||
|
|
* **Playbooks**:
|
||
|
|
|
||
|
|
* **Metatechnique**: M005 - removal
|
||
|
|
|
||
|
|
* **Resources needed:**
|
||
|
|
|
||
|
|
* **Belongs to tactic stage**: TA11
|
||
|
|
|
||
|
|
|
||
|
|
| Actor types | Sectors |
|
||
|
|
| ----------- | ------- |
|
||
|
|
| [A029 server admininistrator ](../generated_pages/actortypes/A029.md) | S008 |
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
| Counters these Tactics |
|
||
|
|
| ---------------------- |
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
| Counters these Techniques |
|
||
|
|
| ------------------------- |
|
||
|
|
| [T0049 Flooding](../generated_pages/techniques/T0049.md) |
|
||
|
|
| [T0054 Twitter bots amplify](../generated_pages/techniques/T0054.md) |
|
||
|
|
| [T0060 Continue to amplify](../generated_pages/techniques/T0060.md) |
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
| Seen in incidents |
|
||
|
|
| ----------------- |
|
||
|
|
|
||
|
|
|
||
|
|
DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW
|