DISARMframeworks/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5b0e4950-7343-480f-b585-e6673e65d8c6.json

40 lines
1.6 KiB
JSON
Raw Normal View History

2022-02-20 15:37:38 -05:00
{
"type": "bundle",
2022-07-02 16:01:17 -04:00
"id": "bundle--0a39f450-3655-4c41-ad48-57b850bcdfd0",
2022-02-20 15:37:38 -05:00
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
2022-07-02 16:01:17 -04:00
"id": "attack-pattern--5b0e4950-7343-480f-b585-e6673e65d8c6",
"created_by_ref": "identity--26837773-209a-489a-b31f-1706291e6747",
"created": "2022-07-02T19:59:12.731795Z",
"modified": "2022-07-02T19:59:12.731795Z",
"name": "Change Names of Accounts",
2022-07-02 16:01:17 -04:00
"description": "Changing names of accounts occurs when an operation changes the name of an existing social media account. An operation may change the names of its accounts throughout an operation to avoid detection or alter the names of newly acquired or repurposed accounts to fit operational narratives. ",
2022-02-20 15:37:38 -05:00
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
2022-06-30 23:30:18 -04:00
"phase_name": "persist-in-the-information-environment"
2022-02-20 15:37:38 -05:00
}
],
"external_references": [
{
"source_name": "DISARM",
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0128.005.md",
"external_id": "T0128.005"
2022-02-20 15:37:38 -05:00
}
],
"object_marking_refs": [
2022-07-02 16:01:17 -04:00
"marking-definition--224afd89-3fa7-4484-b27f-6089b1cbc669"
2022-02-20 15:37:38 -05:00
],
"x_mitre_is_subtechnique": true,
2022-02-20 15:37:38 -05:00
"x_mitre_platforms": [
"Windows",
"Linux",
"Mac"
],
"x_mitre_version": "1.0"
2022-02-20 15:37:38 -05:00
}
]
}