DISARMframeworks/generated_pages/counters/C00197.md

# Counter C00197: remove suspicious accounts

* **Summary**: Standard reporting for false profiles (identity issues).  Includes detecting hijacked accounts and reallocating them - if possible, back to original owners. 

* **Playbooks**: 

* **Metatechnique**: M005 - removal

* **Resources needed:** R003 - money

* **Belongs to tactic stage**: TA15


| Actor types | Sectors |
| ----------- | ------- |
| [A004 activist](../../generated_pages/actortypes/A004.md) | S002 |
| [A031 social media platform adminstrator](../../generated_pages/actortypes/A031.md) | S007 |


| Counters these Tactics |
| ---------------------- |


| Counters these Techniques |
| ------------------------- |
| [T0009 Create fake experts](../../generated_pages/techniques/T0009.md) |
| [T0007 Create Inauthentic Social Media Pages and Groups](../../generated_pages/techniques/T0007.md) |
| [T0011 Compromise legitimate accounts](../../generated_pages/techniques/T0011.md) |


| Seen in incidents |
| ----------------- |


DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW
Copy AMITT repository, clean up and rebrand Took a copy of the current AMITT github repository - we'll be updating this and merging the SPICE branch back in Rebranded to DISARM Moved generated pages to their own folder, to make looking at the repository less confusing 2022-01-29 16:34:46 +00:00			`# Counter C00197: remove suspicious accounts`

			`* Summary: Standard reporting for false profiles (identity issues). Includes detecting hijacked accounts and reallocating them - if possible, back to original owners.`

			`* Playbooks:`

			`* Metatechnique: M005 - removal`

			`* Resources needed: R003 - money`

Revisions to DISARM Framework 2022-07-01 03:30:18 +00:00			`* Belongs to tactic stage: TA15`
Copy AMITT repository, clean up and rebrand Took a copy of the current AMITT github repository - we'll be updating this and merging the SPICE branch back in Rebranded to DISARM Moved generated pages to their own folder, to make looking at the repository less confusing 2022-01-29 16:34:46 +00:00

			`\| Actor types \| Sectors \|`
			`\| ----------- \| ------- \|`
apply generated_pages_fudge to all the object markdown pages 2022-07-01 16:24:47 +00:00			`\| [A004 activist](../../generated_pages/actortypes/A004.md) \| S002 \|`
			`\| [A031 social media platform adminstrator](../../generated_pages/actortypes/A031.md) \| S007 \|`
Copy AMITT repository, clean up and rebrand Took a copy of the current AMITT github repository - we'll be updating this and merging the SPICE branch back in Rebranded to DISARM Moved generated pages to their own folder, to make looking at the repository less confusing 2022-01-29 16:34:46 +00:00


			`\| Counters these Tactics \|`
			`\| ---------------------- \|`



			`\| Counters these Techniques \|`
			`\| ------------------------- \|`
apply generated_pages_fudge to all the object markdown pages 2022-07-01 16:24:47 +00:00			`\| [T0009 Create fake experts](../../generated_pages/techniques/T0009.md) \|`
			`\| [T0007 Create Inauthentic Social Media Pages and Groups](../../generated_pages/techniques/T0007.md) \|`
			`\| [T0011 Compromise legitimate accounts](../../generated_pages/techniques/T0011.md) \|`
Copy AMITT repository, clean up and rebrand Took a copy of the current AMITT github repository - we'll be updating this and merging the SPICE branch back in Rebranded to DISARM Moved generated pages to their own folder, to make looking at the repository less confusing 2022-01-29 16:34:46 +00:00


			`\| Seen in incidents \|`
			`\| ----------------- \|`


			`DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW`