2022-02-20 15:37:38 -05:00
{
"type" : "bundle" ,
2022-07-02 16:01:17 -04:00
"id" : "bundle--2fe4c475-753e-42d5-9e97-1dbd89a157cf" ,
2022-02-20 15:37:38 -05:00
"objects" : [
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-07-02 16:01:17 -04:00
"id" : "attack-pattern--8799f5ac-c50d-4e5f-8117-fb242b7617be" ,
"created_by_ref" : "identity--080e3d42-dad2-4a56-8d55-b3d6228c96b7" ,
"created" : "2022-07-02T19:59:12.636932Z" ,
"modified" : "2022-07-02T19:59:12.636932Z" ,
2022-07-02 13:29:40 -04:00
"name" : "Conduct Symbolic Action" ,
2022-07-02 16:01:17 -04:00
"description" : "Symbolic action refers to activities specifically intended to advance an operation\u2019s narrative by signaling something to the audience, for example, a military parade supporting a state\u2019s narrative of military superiority. An influence operation may use symbolic action to create falsified evidence supporting operation narratives in the physical information space. " ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "drive-offline-activity"
}
] ,
"external_references" : [
{
"source_name" : "DISARM" ,
2022-07-02 13:29:40 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0057.002.md" ,
"external_id" : "T0057.002"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-07-02 16:01:17 -04:00
"marking-definition--d3281f0d-4fa2-4407-8baa-5564a411274c"
2022-02-20 15:37:38 -05:00
] ,
2022-07-02 00:28:52 -04:00
"x_mitre_is_subtechnique" : true ,
2022-02-20 15:37:38 -05:00
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
2022-07-02 00:28:52 -04:00
"x_mitre_version" : "1.0"
2022-02-20 15:37:38 -05:00
}
]
}