2022-02-20 15:37:38 -05:00
{
"type" : "bundle" ,
2022-07-03 19:59:09 -04:00
"id" : "bundle--30c7cb3a-74c8-4a87-bd4f-6f6d82375457" ,
2022-02-20 15:37:38 -05:00
"objects" : [
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-07-03 19:59:09 -04:00
"id" : "attack-pattern--11352e9a-a52b-4ade-ad4f-ec64a15fa1d5" ,
"created_by_ref" : "identity--f1a0f560-2d9e-4c5d-bf47-7e96e805de82" ,
"created" : "2022-07-03T23:52:02.917496Z" ,
"modified" : "2022-07-03T23:52:02.917496Z" ,
2022-06-30 23:30:18 -04:00
"name" : "Create Localized Content" ,
2022-07-02 16:01:17 -04:00
"description" : "Localized content refers to content that appeals to a specific community of individuals, often in defined geographic areas. An operation may create localized content using local language and dialects to resonate with its target audience and blend in with other local news and social media. Localized content may help an operation increase legitimacy, avoid detection, and complicate external attribution." ,
2022-02-20 15:37:38 -05:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"phase_name" : "microtarget"
2022-02-20 15:37:38 -05:00
}
] ,
"external_references" : [
{
2022-07-03 19:59:09 -04:00
"source_name" : "mitre-attack" ,
2022-06-30 23:30:18 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0101.md" ,
"external_id" : "T0101"
2022-02-20 15:37:38 -05:00
}
] ,
"object_marking_refs" : [
2022-07-03 19:59:09 -04:00
"marking-definition--f79f25d2-8b96-4580-b169-eb7b613a7c31"
2022-02-20 15:37:38 -05:00
] ,
"x_mitre_is_subtechnique" : false ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
2022-07-03 19:59:09 -04:00
"x_mitre_version" : "2.1"
2022-02-20 15:37:38 -05:00
}
]
}