2022-02-20 15:37:38 -05:00
{
"type" : "bundle" ,
2022-06-30 14:50:22 -04:00
"id" : "bundle--a2bcc7f6-d52b-4227-a7f1-1cdd84161c9e" ,
2022-02-20 15:37:38 -05:00
"objects" : [
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "x-mitre-tactic--45968fd4-4fdb-4ba2-82e1-f5e5c148e325" ,
"created_by_ref" : "identity--125833cb-53bf-4bae-b876-1f1380db32f9" ,
"created" : "2022-06-29T15:07:39.598443Z" ,
"modified" : "2022-06-29T15:07:39.598443Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Strategic Planning" ,
"description" : "Define the desired end state, i.e. the set of required conditions that defines achievement of all objectives." ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA01.md" ,
"external_id" : "TA01"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--57742fd1-338e-4321-9899-e3d5dca7b965"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_shortname" : "strategic-planning"
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "x-mitre-tactic--2f02c1ff-9e62-469c-a8bf-d9a6b1cc7917" ,
"created_by_ref" : "identity--1bb5fb95-92d8-4177-bd6f-69d39102c166" ,
"created" : "2022-06-29T15:07:39.59933Z" ,
"modified" : "2022-06-29T15:07:39.59933Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Objective Planning" ,
"description" : "Set clearly defined, measurable, and achievable objectives. Achieving objectives ties execution of tactical tasks to reaching the desired end state. There are four primary considerations:\n- Each desired effect should link directly to one or more objectives\n- The effect should be measurable\n- The objective statement should not specify the way and means of accomplishment\n- The effect should be distinguishable from the objective it supports as a condition for success, not as another objective or task." ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA02.md" ,
"external_id" : "TA02"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--2ec6f56d-d375-41a5-8130-9b6ebf4a86dc"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_shortname" : "objective-planning"
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "x-mitre-tactic--49b9b288-58bb-41b8-b2b7-570e10025264" ,
"created_by_ref" : "identity--0b41447d-bea6-40d3-9ac8-8a04b664b04c" ,
"created" : "2022-06-29T15:07:39.600239Z" ,
"modified" : "2022-06-29T15:07:39.600239Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Conduct Center of Gravity Analysis" ,
"description" : "Recon/research to identify \"the source of power that provides moral or physical strength, freedom of action, or will to act.\" Thus, the center of gravity is usually seen as the \"source of strength\". Includes demographic and network analysis of communities" ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA13.md" ,
"external_id" : "TA13"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--f4e8ae1c-deab-4507-80fd-fecc81a150cc"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_shortname" : "conduct-center-of-gravity-analysis"
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "x-mitre-tactic--f2d0efbf-0f86-419b-917b-2f3dc904094d" ,
"created_by_ref" : "identity--6099b19d-e04a-4c37-bda2-98d74fb89c39" ,
"created" : "2022-06-29T15:07:39.601668Z" ,
"modified" : "2022-06-29T15:07:39.601668Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Develop People" ,
"description" : "Develop online and offline users and agents, including automated personas" ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA03.md" ,
"external_id" : "TA03"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--1114b012-3734-403b-b0b5-cd9b05671a62"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_shortname" : "develop-people"
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "x-mitre-tactic--a9cc9713-f33b-44a8-868b-c59950406f76" ,
"created_by_ref" : "identity--6dae4715-664b-454e-82fb-96d8bfcc300e" ,
"created" : "2022-06-29T15:07:39.602545Z" ,
"modified" : "2022-06-29T15:07:39.602545Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Develop Networks" ,
"description" : "Develop online and offline communities and transmission methods and cultivate assets and unwitting agents" ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA04.md" ,
"external_id" : "TA04"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--61f73ca8-1f50-4cd2-8950-14b91614578a"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_shortname" : "develop-networks"
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "x-mitre-tactic--6c6c13f5-aa72-42e5-a9d2-4700306c353e" ,
"created_by_ref" : "identity--5ed012d0-1601-486c-8d8d-7ed4484b5b3f" ,
"created" : "2022-06-29T15:07:39.60333Z" ,
"modified" : "2022-06-29T15:07:39.60333Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Microtargeting" ,
"description" : "Target very specific populations of people" ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA05.md" ,
"external_id" : "TA05"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--4bce6287-e6b3-4eb3-9f72-c517e91fa686"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_shortname" : "microtargeting"
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "x-mitre-tactic--5c04a4d3-dd32-458b-952e-1e05f2861cbd" ,
"created_by_ref" : "identity--d9d725ce-a097-4c35-a468-04828dfdfd3a" ,
"created" : "2022-06-29T15:07:39.604105Z" ,
"modified" : "2022-06-29T15:07:39.604105Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Develop Content" ,
"description" : "Create and acquire content used in incident" ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA06.md" ,
"external_id" : "TA06"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--6c534bfb-7b1b-4af3-be06-6855f71c8d0a"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_shortname" : "develop-content"
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "x-mitre-tactic--ddb9dd2f-6a39-46e8-9b3c-a25c12cef614" ,
"created_by_ref" : "identity--afcafb94-dc2c-45da-b40a-6afdbf8e536f" ,
"created" : "2022-06-29T15:07:39.604873Z" ,
"modified" : "2022-06-29T15:07:39.604873Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Channel Selection" ,
"description" : "Set up specific delivery, amplification and manipulation channels for incident, including channels to attack. Each channel serves as an atomic surface (test bed) location/site for adversary to hide/conceal the work/content that goes into setting up for this channel and/or other specific platforms. Contributes to building out a connected ecosystem where this channel can operate as part of a whole campaign/incident" ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA07.md" ,
"external_id" : "TA07"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--19f570c1-18da-4e67-a25d-2dfebe78f672"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_shortname" : "channel-selection"
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "x-mitre-tactic--ede1dc9b-6afa-46d1-a42c-6b3e791bc1eb" ,
"created_by_ref" : "identity--5db0a7c4-6a1b-4bf4-96fe-903e83aeffa8" ,
"created" : "2022-06-29T15:07:39.60579Z" ,
"modified" : "2022-06-29T15:07:39.60579Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Pump Priming" ,
"description" : "Release content on a targetted small scale, prior to general release, including releasing seed. Used for preparation before broader release, and as message honing. Used for preparation before broader release, and as message honing. " ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA08.md" ,
"external_id" : "TA08"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--d2c8701a-10d8-44ed-813f-816287d4338e"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_shortname" : "pump-priming"
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "x-mitre-tactic--66b91148-79b6-472f-b48b-5c74113088dc" ,
"created_by_ref" : "identity--fa3bc483-b617-451e-9d4b-0319b384e007" ,
"created" : "2022-06-29T15:07:39.606564Z" ,
"modified" : "2022-06-29T15:07:39.606564Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Exposure" ,
"description" : "Release content to general public or push to larger population" ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA09.md" ,
"external_id" : "TA09"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--18be7d67-99d2-445e-82e4-cb2a2d2001c5"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_shortname" : "exposure"
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "x-mitre-tactic--81feb109-6d02-468e-bd47-006ce9d9aafa" ,
"created_by_ref" : "identity--38b488f5-bebd-4549-b299-b48a025ab7a7" ,
"created" : "2022-06-29T15:07:39.607327Z" ,
"modified" : "2022-06-29T15:07:39.607327Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Drive Offline Activity" ,
"description" : "Move incident into offline world" ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA10.md" ,
"external_id" : "TA10"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--c71c8982-494c-4f13-b20c-5ed4357852f0"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_shortname" : "drive-offline-activity"
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "x-mitre-tactic--898251e6-a030-4ff1-8037-2c4b49e85ed3" ,
"created_by_ref" : "identity--4372f1ab-ec3d-4c3c-9c9f-2388733f6690" ,
"created" : "2022-06-29T15:07:39.60849Z" ,
"modified" : "2022-06-29T15:07:39.60849Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Persistence" ,
"description" : "Keep incident 'alive', beyond the incident creators' efforts" ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA11.md" ,
"external_id" : "TA11"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--674862c3-7265-4282-bd8c-3a0d22c4c4c0"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_shortname" : "persistence"
} ,
{
"type" : "x-mitre-tactic" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "x-mitre-tactic--6a8a5578-8e24-4599-b5ce-556f207927c7" ,
"created_by_ref" : "identity--a8fe2534-40b8-415a-b4fb-b11fdda48cc9" ,
"created" : "2022-06-29T15:07:39.60928Z" ,
"modified" : "2022-06-29T15:07:39.60928Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Measure Effectiveness" ,
"description" : "Measure effectiveness of incident, for use in planning future events" ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA12.md" ,
"external_id" : "TA12"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--dc36d4e3-df17-435b-a9eb-edaabf732e61"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_shortname" : "measure-effectiveness"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--84a2d44a-8820-41ed-ac79-c5aa7a8f8309" ,
"created_by_ref" : "identity--36185e59-28d9-4668-bc6f-e1ee4a79cf41" ,
"created" : "2022-06-29T15:07:39.610695Z" ,
"modified" : "2022-06-29T15:07:39.610695Z" ,
2022-02-20 15:37:38 -05:00
"name" : "5Ds (dismiss, distort, distract, dismay, divide)" ,
"description" : "TA01" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "strategic-planning"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0001.md" ,
"external_id" : "T0001"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--1733e05c-8340-4ffe-a371-0816092f6ace"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--b7d38923-ba1b-4510-b82e-be675c8ea67f" ,
"created_by_ref" : "identity--d2aea7f2-2399-42fa-966c-7965cccd334f" ,
"created" : "2022-06-29T15:07:39.611653Z" ,
"modified" : "2022-06-29T15:07:39.611653Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Facilitate State Propaganda" ,
"description" : "TA01" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "strategic-planning"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0002.md" ,
"external_id" : "T0002"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--8e92cb65-7303-4b12-9378-48449e853d08"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--a0e45e50-f5c8-4a62-99f8-ac66d384c8dc" ,
"created_by_ref" : "identity--0fd268e7-8d8f-43de-b2bf-0fc25740704e" ,
"created" : "2022-06-29T15:07:39.6125Z" ,
"modified" : "2022-06-29T15:07:39.6125Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Leverage Existing Narratives" ,
"description" : "TA01" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "strategic-planning"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0003.md" ,
"external_id" : "T0003"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--86ff77e1-75f8-4c01-80cb-de61dcbcf86a"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--fac68697-f3ca-4638-b00f-fecc56636459" ,
"created_by_ref" : "identity--85232727-a150-4760-aa83-3b1bd115b3e6" ,
"created" : "2022-06-29T15:07:39.61337Z" ,
"modified" : "2022-06-29T15:07:39.61337Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Devise Competing Narratives" ,
"description" : "TA01" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "strategic-planning"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0004.md" ,
"external_id" : "T0004"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--25a3d95a-aa85-45cd-b06e-6ecade362f98"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--f00125d7-2219-4a89-8219-69e4c76b085b" ,
"created_by_ref" : "identity--1ae777f7-6354-4a8e-8809-44380eb3ec9f" ,
"created" : "2022-06-29T15:07:39.614322Z" ,
"modified" : "2022-06-29T15:07:39.614322Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Develop Narrative Concepts" ,
"description" : "TA02" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "objective-planning"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0006.md" ,
"external_id" : "T0006"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--7d2a1f26-30e1-42a1-8d6c-19bdeb0a012b"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--3075bb6b-39fc-4320-8bd9-1b2a1429928a" ,
"created_by_ref" : "identity--46595ce7-1bfe-4523-8102-88996c6e005a" ,
"created" : "2022-06-29T15:07:39.615253Z" ,
"modified" : "2022-06-29T15:07:39.615253Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Create fake Social Media Profiles / Pages / Groups" ,
"description" : "TA03" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-people"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0007.md" ,
"external_id" : "T0007"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--26898b49-7e32-471b-8ffa-1e01b3060d44"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--f3d091e2-e76c-4512-a0fd-04522c0e4519" ,
"created_by_ref" : "identity--874dbe85-12c8-46ef-b7d6-64f01e032269" ,
"created" : "2022-06-29T15:07:39.616083Z" ,
"modified" : "2022-06-29T15:07:39.616083Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Create fake or imposter news sites" ,
"description" : "TA03" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-people"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0008.md" ,
"external_id" : "T0008"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--9ce37768-60f5-4ce8-afa9-5c5b12af93e0"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--e7bf113f-c6a4-4e72-ba77-bc654347ec2d" ,
"created_by_ref" : "identity--b481df8f-c7e0-4bfa-97fb-15363803de41" ,
"created" : "2022-06-29T15:07:39.617032Z" ,
"modified" : "2022-06-29T15:07:39.617032Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Create fake experts" ,
"description" : "TA03" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-people"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0009.md" ,
"external_id" : "T0009"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--b5a12b0e-1562-4288-b8ae-43eb18200bf1"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--55a9a479-b834-4c81-9239-f75a4324b22f" ,
"created_by_ref" : "identity--2b7d9f37-5747-43df-a1b2-043d15d716f6" ,
"created" : "2022-06-29T15:07:39.617863Z" ,
"modified" : "2022-06-29T15:07:39.617863Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Cultivate ignorant agents" ,
"description" : "TA04" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-networks"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0010.md" ,
"external_id" : "T0010"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--7a6c579f-0f76-4993-8822-c68202c1cb19"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--d8f9fdb1-cdf0-48b3-842b-67a7f8e8c1c7" ,
"created_by_ref" : "identity--e9fbc051-1c09-4c86-a61e-8c0d2a4bad77" ,
"created" : "2022-06-29T15:07:39.618689Z" ,
"modified" : "2022-06-29T15:07:39.618689Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Compromise legitimate account" ,
"description" : "TA04" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-networks"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0011.md" ,
"external_id" : "T0011"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--0d732177-3798-4fa8-92c8-20eae733bdce"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--841e1310-50ac-44c6-b5b8-53e1a66b6347" ,
"created_by_ref" : "identity--7dce5432-6435-4489-ad71-88841216f4f4" ,
"created" : "2022-06-29T15:07:39.619506Z" ,
"modified" : "2022-06-29T15:07:39.619506Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Use concealment" ,
"description" : "TA04" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-networks"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0012.md" ,
"external_id" : "T0012"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--f124dc4e-34a1-4178-8675-6fb7dba683ce"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--cde7dc89-06fc-4b39-8f28-953ca75817b6" ,
"created_by_ref" : "identity--819423c4-fd86-4ade-b7ce-0ddc03fc43e9" ,
"created" : "2022-06-29T15:07:39.620326Z" ,
"modified" : "2022-06-29T15:07:39.620326Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Create fake websites" ,
"description" : "TA04" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-networks"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0013.md" ,
"external_id" : "T0013"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--8b11efad-8eb5-4f7b-95d4-462fb516d4e5"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--9c13610c-f066-478e-b8e8-013133e12b90" ,
"created_by_ref" : "identity--f440cf48-92fb-4282-a1dd-537fbffd6c24" ,
"created" : "2022-06-29T15:07:39.62148Z" ,
"modified" : "2022-06-29T15:07:39.62148Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Prepare fundraising campaigns" ,
"description" : "TA04" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-networks"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0014.md" ,
"external_id" : "T0014"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--0d0758c5-7c67-4b99-a691-161650d220c7"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--3359ff9e-860e-46e0-9d87-11f47b2ae40d" ,
"created_by_ref" : "identity--aceeab73-113b-4587-bf35-2795fa74fdc9" ,
"created" : "2022-06-29T15:07:39.622326Z" ,
"modified" : "2022-06-29T15:07:39.622326Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Create hashtags" ,
"description" : "TA04" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-networks"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0015.md" ,
"external_id" : "T0015"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--85e1c7bf-fe4a-4c4e-bd0c-08cae90a8e47"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--789aae94-1312-4aab-b415-3320bf01b20c" ,
"created_by_ref" : "identity--3f37ec47-1cf2-46c9-bc9a-335f456ebd73" ,
"created" : "2022-06-29T15:07:39.62325Z" ,
"modified" : "2022-06-29T15:07:39.62325Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Clickbait" ,
"description" : "TA05" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "microtargeting"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0016.md" ,
"external_id" : "T0016"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--75a460d4-730b-480f-8945-2a756876c5a5"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--cd48ce8e-e0e4-4c95-ab9d-13389b50b039" ,
"created_by_ref" : "identity--223a5089-a1c2-4ad6-9043-a8f21293c430" ,
"created" : "2022-06-29T15:07:39.624076Z" ,
"modified" : "2022-06-29T15:07:39.624076Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Conduct Fundraising Campaigns" ,
"description" : "TA05" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "microtargeting"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0017.md" ,
"external_id" : "T0017"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--bbc7ec0c-6dfc-4981-b955-6bbfa5d84dae"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--9f7a1615-b64e-4598-8d4b-325b5cd885e7" ,
"created_by_ref" : "identity--19d68843-3bfb-43e5-9181-da54e704d1f1" ,
"created" : "2022-06-29T15:07:39.625256Z" ,
"modified" : "2022-06-29T15:07:39.625256Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Purchase advertisements" ,
"description" : "TA05" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "microtargeting"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0018.md" ,
"external_id" : "T0018"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--d3a79065-5187-4ea6-a7b1-b6cbbe4c2c74"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--efb40471-8eff-4649-8809-e590a2662d10" ,
"created_by_ref" : "identity--5898fcca-b1dd-4a89-8fdf-aa85bf426db3" ,
"created" : "2022-06-29T15:07:39.62625Z" ,
"modified" : "2022-06-29T15:07:39.62625Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Generate information pollution" ,
"description" : "TA06" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0019.md" ,
"external_id" : "T0019"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--a608bd3b-cb2c-4b23-8f4c-a9de74e01498"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--30280325-59ca-4e5e-adef-8f5cc26bcdb7" ,
"created_by_ref" : "identity--262785cd-a416-4796-b07f-a370de05f5e1" ,
"created" : "2022-06-29T15:07:39.627103Z" ,
"modified" : "2022-06-29T15:07:39.627103Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Trial content" ,
"description" : "TA06" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0020.md" ,
"external_id" : "T0020"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--bb9d31d5-7bcf-404b-b61c-55a15d828423"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--11c32299-cfec-447f-9f78-935315141c50" ,
"created_by_ref" : "identity--c0bd9b54-2596-4b51-b1be-dd884dec665b" ,
"created" : "2022-06-29T15:07:39.627943Z" ,
"modified" : "2022-06-29T15:07:39.627943Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Memes" ,
"description" : "TA06" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0021.md" ,
"external_id" : "T0021"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--d85a7f9d-b853-4268-8265-e41ce7590c4e"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--e9884739-ea1d-4c73-bf20-4c98709a6f28" ,
"created_by_ref" : "identity--9e3b644d-4304-4922-820b-1b132631811a" ,
"created" : "2022-06-29T15:07:39.629147Z" ,
"modified" : "2022-06-29T15:07:39.629147Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Conspiracy narratives" ,
"description" : "TA06" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0022.md" ,
"external_id" : "T0022"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--f5b9bb2a-3b58-4078-b122-3d8c5e124e0d"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--9c80a414-47c7-4871-8874-8f8ea4584f3d" ,
"created_by_ref" : "identity--5e9bd661-f645-4170-b4c3-f554f1fe5856" ,
"created" : "2022-06-29T15:07:39.630148Z" ,
"modified" : "2022-06-29T15:07:39.630148Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Distort facts" ,
"description" : "TA06" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0023.md" ,
"external_id" : "T0023"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--d9a09fda-4b37-4fcd-91ab-b684c3fa55cd"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--fb3dae2e-a565-4774-8471-fca6fed9d430" ,
"created_by_ref" : "identity--dc984f43-985c-47fc-8c77-9aea0e6aa070" ,
"created" : "2022-06-29T15:07:39.631008Z" ,
"modified" : "2022-06-29T15:07:39.631008Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Create fake videos and images" ,
"description" : "TA06" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0024.md" ,
"external_id" : "T0024"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--1586c8a4-d65b-4610-bdb5-9b325222311f"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--f458d4eb-87c9-4c24-bfa1-f4a9467edf61" ,
"created_by_ref" : "identity--66685a31-cdb4-4d34-8bbb-4a47ca520901" ,
"created" : "2022-06-29T15:07:39.631864Z" ,
"modified" : "2022-06-29T15:07:39.631864Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Leak altered documents" ,
"description" : "TA06" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0025.md" ,
"external_id" : "T0025"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--1f0dd35c-a866-49e4-828b-1b0e8ce8f4d5"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--cf006959-4d30-4dad-a7fa-22daadc54815" ,
"created_by_ref" : "identity--a1ff5fb1-dbfe-4a40-b1cf-66e724081929" ,
"created" : "2022-06-29T15:07:39.632662Z" ,
"modified" : "2022-06-29T15:07:39.632662Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Create pseudoscientific or disingenuous research" ,
"description" : "TA06" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0026.md" ,
"external_id" : "T0026"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--a700a9ee-fadb-47dd-a8b7-cef31d7bf29f"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--4692326b-924e-4b2f-9eca-3ecd9d7ec1be" ,
"created_by_ref" : "identity--a1c6522c-1e7e-4772-928e-a3320546fbd7" ,
"created" : "2022-06-29T15:07:39.633485Z" ,
"modified" : "2022-06-29T15:07:39.633485Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Adapt existing narratives" ,
"description" : "TA06" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0027.md" ,
"external_id" : "T0027"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--01a4145b-c9f6-46e4-bdb9-4978f47b8868"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--bd05490e-2878-4429-8733-11ba701979d3" ,
"created_by_ref" : "identity--1ee45a95-6500-45a3-8ef1-0f02c522e97b" ,
"created" : "2022-06-29T15:07:39.634308Z" ,
"modified" : "2022-06-29T15:07:39.634308Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Create competing narratives" ,
"description" : "TA06" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-content"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0028.md" ,
"external_id" : "T0028"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--2b2ce021-2309-4394-9096-87853a7c8294"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--413bb66c-1ecf-4e9d-bb68-3ea2161d449b" ,
"created_by_ref" : "identity--6d959eae-cd5a-4520-9323-608b5f4794c8" ,
"created" : "2022-06-29T15:07:39.635202Z" ,
"modified" : "2022-06-29T15:07:39.635202Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Manipulate online polls" ,
"description" : "TA07" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "channel-selection"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0029.md" ,
"external_id" : "T0029"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--946301e5-d900-4e74-89ec-2686d4b7718d"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--d1d9fbc5-1a0d-4c54-9284-b4254b2aedcb" ,
"created_by_ref" : "identity--e26ac50e-fe21-4258-acc0-c5fd2fb2c003" ,
"created" : "2022-06-29T15:07:39.636177Z" ,
"modified" : "2022-06-29T15:07:39.636177Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Backstop personas" ,
"description" : "TA07" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "channel-selection"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0030.md" ,
"external_id" : "T0030"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--3ec1d89b-ac1c-4390-ad55-c105b4086200"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--955864ba-e10a-4456-8349-2bc7858bc990" ,
"created_by_ref" : "identity--bf9e05c5-5314-49db-b2e1-8f22fd1ffe9e" ,
"created" : "2022-06-29T15:07:39.637017Z" ,
"modified" : "2022-06-29T15:07:39.637017Z" ,
2022-02-20 15:37:38 -05:00
"name" : "YouTube" ,
"description" : "TA07" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "channel-selection"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0031.md" ,
"external_id" : "T0031"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--9888dac6-7b56-436b-b276-ea7774d33d22"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--90cf47b9-d7a8-4305-b5d2-43c96a27033a" ,
"created_by_ref" : "identity--e89f1e4c-34c5-488b-b2f8-ef37beb05b7a" ,
"created" : "2022-06-29T15:07:39.637902Z" ,
"modified" : "2022-06-29T15:07:39.637902Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Reddit" ,
"description" : "TA07" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "channel-selection"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0032.md" ,
"external_id" : "T0032"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--42473975-0d38-41eb-82c1-0b8c7a87bd2f"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--82e41ffb-af93-4beb-b45e-32ad1c2172ff" ,
"created_by_ref" : "identity--1ea15f55-3cfb-4a5b-904d-1ba50bc281dc" ,
"created" : "2022-06-29T15:07:39.63883Z" ,
"modified" : "2022-06-29T15:07:39.63883Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Instagram" ,
"description" : "TA07" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "channel-selection"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0033.md" ,
"external_id" : "T0033"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--5447d252-3be0-4121-9f30-86470453af86"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--44fb71ec-858f-4392-aa7e-308876d787ca" ,
"created_by_ref" : "identity--fc7750ea-d603-4def-b797-c2a1ce6ecd39" ,
"created" : "2022-06-29T15:07:39.639769Z" ,
"modified" : "2022-06-29T15:07:39.639769Z" ,
2022-02-20 15:37:38 -05:00
"name" : "LinkedIn" ,
"description" : "TA07" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "channel-selection"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0034.md" ,
"external_id" : "T0034"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--fdae8056-6642-4a17-9fe0-6cfaa22621b9"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--fd760a8e-d115-45ee-9399-6fb9d98eabba" ,
"created_by_ref" : "identity--ed36f4ba-651d-41f6-b60e-4a341b7ce4e3" ,
"created" : "2022-06-29T15:07:39.640692Z" ,
"modified" : "2022-06-29T15:07:39.640692Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Pinterest" ,
"description" : "TA07" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "channel-selection"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0035.md" ,
"external_id" : "T0035"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--b3423c1e-00b2-46bd-8b74-902ddfe3b405"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--e871e99b-abc1-4b1c-b00d-51c247d7d259" ,
"created_by_ref" : "identity--4131f25c-10a7-4492-b1dd-b0170979fcdc" ,
"created" : "2022-06-29T15:07:39.641583Z" ,
"modified" : "2022-06-29T15:07:39.641583Z" ,
2022-02-20 15:37:38 -05:00
"name" : "WhatsApp" ,
"description" : "TA07" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "channel-selection"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0036.md" ,
"external_id" : "T0036"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--b6ccac56-44ae-4198-8096-386ddd276815"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--7b39572f-5feb-4cb5-87f0-acfce31b5628" ,
"created_by_ref" : "identity--e7ec42e4-3697-4b94-a995-56ffa9abd4a5" ,
"created" : "2022-06-29T15:07:39.642437Z" ,
"modified" : "2022-06-29T15:07:39.642437Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Facebook" ,
"description" : "TA07" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "channel-selection"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0037.md" ,
"external_id" : "T0037"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--c3d60b27-9ab5-4502-a47e-81c7dec8d054"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--96852c01-94f7-465f-9d58-acc33148b15c" ,
"created_by_ref" : "identity--e5ac1460-477f-4765-be1e-40f8e6882e5c" ,
"created" : "2022-06-29T15:07:39.643889Z" ,
"modified" : "2022-06-29T15:07:39.643889Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Twitter" ,
"description" : "TA07" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "channel-selection"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0038.md" ,
"external_id" : "T0038"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--1cc171db-ad4b-4ebf-8b4a-0299906b7d09"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--81201f8f-d4af-43d2-b871-1452b99ec7ea" ,
"created_by_ref" : "identity--2f672425-274a-4338-8cf9-836a758e7d3d" ,
"created" : "2022-06-29T15:07:39.64475Z" ,
"modified" : "2022-06-29T15:07:39.64475Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Bait legitimate influencers" ,
"description" : "TA08" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "pump-priming"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0039.md" ,
"external_id" : "T0039"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--8bfd8806-fd70-4654-a97a-bbdf36f0c3c0"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--00aabe3c-19ef-4658-aec6-0bbf2fc9a675" ,
"created_by_ref" : "identity--04f085f5-9ea4-4cf2-a187-57431fe27396" ,
"created" : "2022-06-29T15:07:39.6456Z" ,
"modified" : "2022-06-29T15:07:39.6456Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Demand unsurmountable proof" ,
"description" : "TA08" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "pump-priming"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0040.md" ,
"external_id" : "T0040"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--2e6feaa4-0c79-4474-b380-c16ffdd4799e"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--f8a959f9-b687-4c31-9deb-5a06e63cd875" ,
"created_by_ref" : "identity--283d6581-1c8a-458b-af6a-50dd0e9b8863" ,
"created" : "2022-06-29T15:07:39.646459Z" ,
"modified" : "2022-06-29T15:07:39.646459Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Deny involvement" ,
"description" : "TA08" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "pump-priming"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0041.md" ,
"external_id" : "T0041"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--07ac7a54-b81f-4437-9ec9-9265e903bb6a"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--15befb69-cd3a-436d-aacb-65d4a31233d9" ,
"created_by_ref" : "identity--afc71eb6-14b5-44fd-a7a1-35f88f2fbb79" ,
"created" : "2022-06-29T15:07:39.647547Z" ,
"modified" : "2022-06-29T15:07:39.647547Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Kernel of Truth" ,
"description" : "TA08" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "pump-priming"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0042.md" ,
"external_id" : "T0042"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--fc4be82a-c933-4783-9df4-b5b0c7d80a91"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--b26a909a-26cf-475a-9073-cd1c05a6666e" ,
"created_by_ref" : "identity--fcd733c4-48df-46d7-ae37-faa74290cd9b" ,
"created" : "2022-06-29T15:07:39.648402Z" ,
"modified" : "2022-06-29T15:07:39.648402Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Use SMS/ WhatsApp/ Chat apps" ,
"description" : "TA08" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "pump-priming"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0043.md" ,
"external_id" : "T0043"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--11403d9c-d1ed-4ef4-add4-f556a75e91db"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--fc64a9ea-e918-4234-a887-197783cf1b24" ,
"created_by_ref" : "identity--4c0cfcee-6771-424a-9949-048a1eb143ec" ,
"created" : "2022-06-29T15:07:39.649313Z" ,
"modified" : "2022-06-29T15:07:39.649313Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Seed distortions" ,
"description" : "TA08" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "pump-priming"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0044.md" ,
"external_id" : "T0044"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--da4bb9c7-d6f4-477d-80a7-e5770ec4e3fa"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--b00e5ddc-d058-4c95-bbeb-e319c45c4209" ,
"created_by_ref" : "identity--233e6a79-d4b8-47ff-8069-a7b3ba016fe5" ,
"created" : "2022-06-29T15:07:39.650266Z" ,
"modified" : "2022-06-29T15:07:39.650266Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Use fake experts" ,
"description" : "TA08" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "pump-priming"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0045.md" ,
"external_id" : "T0045"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--03fa1f90-ecd1-4c5f-8250-f0342df68267"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--bc283648-febe-4abc-b09f-9f57e4778c2e" ,
"created_by_ref" : "identity--2b8570fe-aece-4178-9c33-138d0019412e" ,
"created" : "2022-06-29T15:07:39.651502Z" ,
"modified" : "2022-06-29T15:07:39.651502Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Search Engine Optimization" ,
"description" : "TA08" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "pump-priming"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0046.md" ,
"external_id" : "T0046"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--b4c34737-3f47-4665-ab2d-1e7fde67bfae"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--0527b90a-1628-48ee-9a63-b9fa8af1f05e" ,
"created_by_ref" : "identity--8a2b8d9d-b740-4810-aabd-16072cdf0f97" ,
"created" : "2022-06-29T15:07:39.652346Z" ,
"modified" : "2022-06-29T15:07:39.652346Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Muzzle social media as a political force" ,
"description" : "TA09" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "exposure"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0047.md" ,
"external_id" : "T0047"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--42cb73d0-14c4-44e2-a722-466ca266ee78"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--bc725cb5-9c6a-42da-880b-b6e0eacaf546" ,
"created_by_ref" : "identity--9bc3e2bc-a39d-46e5-bc80-83c740de79f1" ,
"created" : "2022-06-29T15:07:39.65319Z" ,
"modified" : "2022-06-29T15:07:39.65319Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Cow online opinion leaders" ,
"description" : "TA09" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "exposure"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0048.md" ,
"external_id" : "T0048"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--e68b79a3-2136-4a07-80bb-7b4b50e17f29"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--aac86bd2-8f32-4177-9bfe-26ab811b3a58" ,
"created_by_ref" : "identity--cde3ccc9-4f7e-4dde-9c25-912f897161ca" ,
"created" : "2022-06-29T15:07:39.65403Z" ,
"modified" : "2022-06-29T15:07:39.65403Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Flooding" ,
"description" : "TA09" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "exposure"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0049.md" ,
"external_id" : "T0049"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--0f2d59a5-d16b-41d9-b7b9-5e89aedb76c6"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--a85945cc-b898-433a-be92-eca07ec1aa91" ,
"created_by_ref" : "identity--575dfd43-182b-4124-a79d-46cf773eb1d6" ,
"created" : "2022-06-29T15:07:39.654957Z" ,
"modified" : "2022-06-29T15:07:39.654957Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Cheerleading domestic social media ops" ,
"description" : "TA09" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "exposure"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0050.md" ,
"external_id" : "T0050"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--2baad641-b04a-493e-9bf1-5eb7e5b2cbf5"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--1c8f05cf-413d-49a3-94b6-58a7a98d7ef8" ,
"created_by_ref" : "identity--63b90850-3d52-40de-829f-b0a109696675" ,
"created" : "2022-06-29T15:07:39.655847Z" ,
"modified" : "2022-06-29T15:07:39.655847Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Fabricate social media comment" ,
"description" : "TA09" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "exposure"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0051.md" ,
"external_id" : "T0051"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--9dbb9ca6-8a99-4387-b8c1-0612364eba1d"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--0d1dcc47-dbd5-4b4d-bedf-e6b5321086a9" ,
"created_by_ref" : "identity--edc70461-aee4-45d2-af9b-a7bfd245f83a" ,
"created" : "2022-06-29T15:07:39.656664Z" ,
"modified" : "2022-06-29T15:07:39.656664Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Tertiary sites amplify news" ,
"description" : "TA09" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "exposure"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0052.md" ,
"external_id" : "T0052"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--29dfd462-e316-4667-b832-6fd1045344e2"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--40e9751b-4af7-4433-936f-ba4c04c03a0a" ,
"created_by_ref" : "identity--dd806483-fcc5-4f59-bbf3-f93289e01791" ,
"created" : "2022-06-29T15:07:39.657442Z" ,
"modified" : "2022-06-29T15:07:39.657442Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Twitter trolls amplify and manipulate" ,
"description" : "TA09" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "exposure"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0053.md" ,
"external_id" : "T0053"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--f93162c6-e04b-4252-82e6-d663c85d0d1a"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--0a778eec-5cdd-4a35-a178-6453d9295c71" ,
"created_by_ref" : "identity--36599099-8622-4849-bda0-6f36fe4420e5" ,
"created" : "2022-06-29T15:07:39.658726Z" ,
"modified" : "2022-06-29T15:07:39.658726Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Twitter bots amplify" ,
"description" : "TA09" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "exposure"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0054.md" ,
"external_id" : "T0054"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--e14b09fe-550c-4303-8560-679ebd896b10"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--6bb89169-af6e-41d7-8ee6-5e6ca0778b23" ,
"created_by_ref" : "identity--b7adce0d-6fd8-4d25-8254-f34ce9721b28" ,
"created" : "2022-06-29T15:07:39.659606Z" ,
"modified" : "2022-06-29T15:07:39.659606Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Use hashtag" ,
"description" : "TA09" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "exposure"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0055.md" ,
"external_id" : "T0055"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--a16dbe3d-b808-4942-a563-13e088a7dc1a"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--08061315-22ae-4838-8413-6909586a0356" ,
"created_by_ref" : "identity--2580ddb8-9b92-4654-97dd-19ded33583ee" ,
"created" : "2022-06-29T15:07:39.660319Z" ,
"modified" : "2022-06-29T15:07:39.660319Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Dedicated channels disseminate information pollution" ,
"description" : "TA09" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "exposure"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0056.md" ,
"external_id" : "T0056"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--630ff03e-fbcf-4d93-baf7-d06661fb65db"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--7b3dd190-7a38-4944-aeb0-e1d7592c8c3b" ,
"created_by_ref" : "identity--6a5453fb-9ad6-45d7-ada3-7d8e65ea41ad" ,
"created" : "2022-06-29T15:07:39.66129Z" ,
"modified" : "2022-06-29T15:07:39.66129Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Organise remote rallies and events" ,
"description" : "TA10" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "drive-offline-activity"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0057.md" ,
"external_id" : "T0057"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--6ff67578-a4a0-4353-844b-2d86bb87e4a0"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--b87a6150-0913-4161-b6f2-190881a12058" ,
"created_by_ref" : "identity--7d23cd01-4491-4667-99c8-e48e5fda3a57" ,
"created" : "2022-06-29T15:07:39.662167Z" ,
"modified" : "2022-06-29T15:07:39.662167Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Legacy web content" ,
"description" : "TA11" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "persistence"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0058.md" ,
"external_id" : "T0058"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--c00b8748-a8cb-49d9-aa00-ce0d55d185a4"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--ee02b052-755c-4e8a-ad6d-7bab7ec88a84" ,
"created_by_ref" : "identity--bc243e05-9718-4edf-bbca-4af2b8b29971" ,
"created" : "2022-06-29T15:07:39.662962Z" ,
"modified" : "2022-06-29T15:07:39.662962Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Play the long game" ,
"description" : "TA11" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "persistence"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0059.md" ,
"external_id" : "T0059"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--16114ef5-a787-4b4a-8736-5198f48011c4"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--b463d063-b47b-42ad-ae6c-63ddf738b509" ,
"created_by_ref" : "identity--81ae2c07-7ef0-40ef-b13e-3c693905a251" ,
"created" : "2022-06-29T15:07:39.66387Z" ,
"modified" : "2022-06-29T15:07:39.66387Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Continue to amplify" ,
"description" : "TA11" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "persistence"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0060.md" ,
"external_id" : "T0060"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--25772063-9811-4713-a2d4-6136c3dd1a84"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--4ccf7878-ca79-443a-bc53-dbc5a32cdca5" ,
"created_by_ref" : "identity--081e355e-4913-403b-b5b0-2decfe75acb2" ,
"created" : "2022-06-29T15:07:39.664619Z" ,
"modified" : "2022-06-29T15:07:39.664619Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Sell merchandising" ,
"description" : "TA10" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "drive-offline-activity"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0061.md" ,
"external_id" : "T0061"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--985e7b21-f851-4d00-a243-81ae85893185"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--3491ca2c-d41c-441e-8f25-6b095b045eec" ,
"created_by_ref" : "identity--64060b20-48ea-4363-93c4-b0595d45008b" ,
"created" : "2022-06-29T15:07:39.665912Z" ,
"modified" : "2022-06-29T15:07:39.665912Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Behaviour changes" ,
"description" : "TA12" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "measure-effectiveness"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0062.md" ,
"external_id" : "T0062"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--7b816be9-3a03-4d91-b131-4da2f4a392c4"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--18f72131-588a-45b9-9c27-e98d8afc3894" ,
"created_by_ref" : "identity--beb9c87a-7b02-47ee-9bdc-fcc81dbefc06" ,
"created" : "2022-06-29T15:07:39.666666Z" ,
"modified" : "2022-06-29T15:07:39.666666Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Message reach" ,
"description" : "TA12" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "measure-effectiveness"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0063.md" ,
"external_id" : "T0063"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--eef2db77-ca5e-45b6-b527-8621c5ee7fe8"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--ecefdcdc-b3f2-4ab4-a68f-e0d3eb1f1e93" ,
"created_by_ref" : "identity--1c32f480-43ff-465e-ae3f-27a5c26492fd" ,
"created" : "2022-06-29T15:07:39.667406Z" ,
"modified" : "2022-06-29T15:07:39.667406Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Social media engagement" ,
"description" : "TA12" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "measure-effectiveness"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0064.md" ,
"external_id" : "T0064"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--56fb8dbc-d520-4738-a907-b2c8268fe0e3"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--bc94c49f-2121-4e3b-8f1a-8a72d9df4f8d" ,
"created_by_ref" : "identity--1649545c-f9ba-40d6-8819-527b358f0320" ,
"created" : "2022-06-29T15:07:39.668156Z" ,
"modified" : "2022-06-29T15:07:39.668156Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Use physical broadcast capabilities" ,
"description" : "TA04" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "develop-networks"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0065.md" ,
"external_id" : "T0065"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--b37e3f6b-8488-45e6-acaf-35add129b24c"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--f2292557-c4d2-49c8-bac5-2bdb9ff43165" ,
"created_by_ref" : "identity--3d83a869-9099-4861-af28-bcfcd5bd09a1" ,
"created" : "2022-06-29T15:07:39.668922Z" ,
"modified" : "2022-06-29T15:07:39.668922Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Degrade adversary" ,
"description" : "TA02" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "objective-planning"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0066.md" ,
"external_id" : "T0066"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--7f0968ff-b34a-4453-a8eb-cdabb7a5f0e2"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--ee320afa-9925-4609-ba01-1b345aba7abd" ,
"created_by_ref" : "identity--12032cf4-860c-4ce5-b3ed-79fe470d0691" ,
"created" : "2022-06-29T15:07:39.669754Z" ,
"modified" : "2022-06-29T15:07:39.669754Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Plan to discredit credible sources" ,
"description" : "TA02" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "objective-planning"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0067.md" ,
"external_id" : "T0067"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--054c9054-713c-4d33-b64a-782762b19697"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--ce6626db-4c1a-4b99-bc4c-bc2d5898c186" ,
"created_by_ref" : "identity--41a22faf-481a-479c-ab75-a891814eb827" ,
"created" : "2022-06-29T15:07:39.670552Z" ,
"modified" : "2022-06-29T15:07:39.670552Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Respond to breaking news event" ,
"description" : "TA02" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "objective-planning"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0068.md" ,
"external_id" : "T0068"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--0f810227-bdc9-41fe-9306-5d7458763f2d"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--40c5fb5f-3b61-44ed-9f9d-206b26fda76c" ,
"created_by_ref" : "identity--b9e7689b-2823-42f4-9d4e-87e719780725" ,
"created" : "2022-06-29T15:07:39.671351Z" ,
"modified" : "2022-06-29T15:07:39.671351Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Respond to active crisis" ,
"description" : "TA02" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "objective-planning"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0069.md" ,
"external_id" : "T0069"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--f54a004d-60a8-4869-8458-0eea4167d0d2"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--5661a6e3-4eef-4983-bf67-ade655c61b41" ,
"created_by_ref" : "identity--1edf1f3b-897f-4983-b2e9-ada3f05908bf" ,
"created" : "2022-06-29T15:07:39.672282Z" ,
"modified" : "2022-06-29T15:07:39.672282Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Analyze existing communities" ,
"description" : "TA02" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "objective-planning"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0070.md" ,
"external_id" : "T0070"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--2f71a7e8-5ad1-4d6e-9ec5-4e1b5b764f2e"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--58e8704d-e76c-4b1d-8255-a980403e2ec5" ,
"created_by_ref" : "identity--2851616b-dd3e-43b3-88f8-007a7f6a1532" ,
"created" : "2022-06-29T15:07:39.673166Z" ,
"modified" : "2022-06-29T15:07:39.673166Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Find echo chambers" ,
"description" : "TA13" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "conduct-center-of-gravity-analysis"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0071.md" ,
"external_id" : "T0071"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--46bba0a9-84c1-436e-abed-baaa07827448"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "attack-pattern--1bd1d867-a9bc-46ee-8b3b-d8907ecb4986" ,
"created_by_ref" : "identity--eb576670-0d92-489f-8bb8-ca4af90bc1ff" ,
"created" : "2022-06-29T15:07:39.674013Z" ,
"modified" : "2022-06-29T15:07:39.674013Z" ,
2022-02-20 15:37:38 -05:00
"name" : "Segment audiences" ,
"description" : "TA13" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "conduct-center-of-gravity-analysis"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0072.md" ,
"external_id" : "T0072"
}
] ,
"object_marking_refs" : [
2022-06-30 14:50:22 -04:00
"marking-definition--9d95da9e-41d5-4ca6-9230-3afda70cca8f"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
"x_mitre_version" : "1,0"
} ,
{
"type" : "x-mitre-matrix" ,
"spec_version" : "2.1" ,
2022-06-30 14:50:22 -04:00
"id" : "x-mitre-matrix--efa3ff0a-9e96-44ba-9a87-f46cc11a01c4" ,
"created" : "2022-06-29T15:07:39.674372Z" ,
"modified" : "2022-06-29T15:07:39.674372Z" ,
2022-02-20 15:37:38 -05:00
"name" : "DISARM Framework" ,
"description" : "DISARM is a framework designed for describing and understanding disinformation incidents." ,
"tactic_refs" : [
2022-06-30 14:50:22 -04:00
"x-mitre-tactic--45968fd4-4fdb-4ba2-82e1-f5e5c148e325" ,
"x-mitre-tactic--2f02c1ff-9e62-469c-a8bf-d9a6b1cc7917" ,
"x-mitre-tactic--49b9b288-58bb-41b8-b2b7-570e10025264" ,
"x-mitre-tactic--f2d0efbf-0f86-419b-917b-2f3dc904094d" ,
"x-mitre-tactic--a9cc9713-f33b-44a8-868b-c59950406f76" ,
"x-mitre-tactic--6c6c13f5-aa72-42e5-a9d2-4700306c353e" ,
"x-mitre-tactic--5c04a4d3-dd32-458b-952e-1e05f2861cbd" ,
"x-mitre-tactic--ddb9dd2f-6a39-46e8-9b3c-a25c12cef614" ,
"x-mitre-tactic--ede1dc9b-6afa-46d1-a42c-6b3e791bc1eb" ,
"x-mitre-tactic--66b91148-79b6-472f-b48b-5c74113088dc" ,
"x-mitre-tactic--81feb109-6d02-468e-bd47-006ce9d9aafa" ,
"x-mitre-tactic--898251e6-a030-4ff1-8037-2c4b49e85ed3" ,
"x-mitre-tactic--6a8a5578-8e24-4599-b5ce-556f207927c7"
2022-02-20 15:37:38 -05:00
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
"url" : "https://github.com/DISARMFoundation" ,
"external_id" : "DISARM"
}
]
}
]
}