diff --git a/.DS_Store b/.DS_Store index 5b433ba..b019a3e 100644 Binary files a/.DS_Store and b/.DS_Store differ diff --git a/CODE/.DS_Store b/CODE/.DS_Store index 38f875f..4394659 100644 Binary files a/CODE/.DS_Store and b/CODE/.DS_Store differ diff --git a/CODE/__pycache__/generate_DISARM_pages.cpython-38.pyc b/CODE/__pycache__/generate_DISARM_pages.cpython-38.pyc index bac3d12..6b0f2a3 100644 Binary files a/CODE/__pycache__/generate_DISARM_pages.cpython-38.pyc and b/CODE/__pycache__/generate_DISARM_pages.cpython-38.pyc differ diff --git a/CODE/generate_DISARM_pages.ipynb b/CODE/generate_DISARM_pages.ipynb index ff25246..025ad31 100644 --- a/CODE/generate_DISARM_pages.ipynb +++ b/CODE/generate_DISARM_pages.ipynb @@ -18,7 +18,7 @@ }, { "cell_type": "code", - "execution_count": 3, + "execution_count": 1, "metadata": { "scrolled": true }, @@ -33,13 +33,10 @@ "updated ../generated_files/disarm_blue_framework_clickable.html\n", "Temp: objecttype phase\n", "updated ../generated_pages/phases_index.md\n", - "Updating ../generated_pages/phases/P04.md\n", "Temp: objecttype tactic\n", "updated ../generated_pages/tactics_index.md\n", "Updating ../generated_pages/tactics/TA01.md\n", "Updating ../generated_pages/tactics/TA02.md\n", - "Updating ../generated_pages/tactics/TA03.md\n", - "Updating ../generated_pages/tactics/TA04.md\n", "Updating ../generated_pages/tactics/TA05.md\n", "Updating ../generated_pages/tactics/TA06.md\n", "Updating ../generated_pages/tactics/TA07.md\n", @@ -52,265 +49,16 @@ "Updating ../generated_pages/tactics/TA14.md\n", "Updating ../generated_pages/tactics/TA15.md\n", "Updating ../generated_pages/tactics/TA16.md\n", + "Updating ../generated_pages/tactics/TA17.md\n", + "Updating ../generated_pages/tactics/TA18.md\n", "Temp: objecttype technique\n", "updated ../generated_pages/techniques_index.md\n", - "Updating ../generated_pages/techniques/T0001.md\n", - "Updating ../generated_pages/techniques/T0002.md\n", - "Updating ../generated_pages/techniques/T0003.md\n", - "Updating ../generated_pages/techniques/T0004.md\n", - "Updating ../generated_pages/techniques/T0005.md\n", - "Updating ../generated_pages/techniques/T0006.md\n", - "Updating ../generated_pages/techniques/T0007.md\n", - "Updating ../generated_pages/techniques/T0008.md\n", - "Updating ../generated_pages/techniques/T0009.md\n", - "Updating ../generated_pages/techniques/T0010.md\n", - "Updating ../generated_pages/techniques/T0011.md\n", - "Updating ../generated_pages/techniques/T0012.md\n", - "Updating ../generated_pages/techniques/T0013.md\n", - "Updating ../generated_pages/techniques/T0014.md\n", - "Updating ../generated_pages/techniques/T0015.md\n", - "Updating ../generated_pages/techniques/T0016.md\n", - "Updating ../generated_pages/techniques/T0017.md\n", - "Updating ../generated_pages/techniques/T0018.md\n", - "Updating ../generated_pages/techniques/T0019.md\n", - "Updating ../generated_pages/techniques/T0020.md\n", - "Updating ../generated_pages/techniques/T0021.md\n", - "Updating ../generated_pages/techniques/T0022.md\n", - "Updating ../generated_pages/techniques/T0023.md\n", - "Updating ../generated_pages/techniques/T0024.md\n", - "Updating ../generated_pages/techniques/T0025.md\n", - "Updating ../generated_pages/techniques/T0026.md\n", - "Updating ../generated_pages/techniques/T0027.md\n", - "Updating ../generated_pages/techniques/T0028.md\n", - "Updating ../generated_pages/techniques/T0029.md\n", - "Updating ../generated_pages/techniques/T0030.md\n", - "Updating ../generated_pages/techniques/T0031.md\n", - "Updating ../generated_pages/techniques/T0032.md\n", - "Updating ../generated_pages/techniques/T0033.md\n", - "Updating ../generated_pages/techniques/T0034.md\n", - "Updating ../generated_pages/techniques/T0035.md\n", - "Updating ../generated_pages/techniques/T0036.md\n", - "Updating ../generated_pages/techniques/T0037.md\n", - "Updating ../generated_pages/techniques/T0038.md\n", - "Updating ../generated_pages/techniques/T0039.md\n", - "Updating ../generated_pages/techniques/T0040.md\n", - "Updating ../generated_pages/techniques/T0041.md\n", - "Updating ../generated_pages/techniques/T0042.md\n", - "Updating ../generated_pages/techniques/T0043.md\n", - "Updating ../generated_pages/techniques/T0044.md\n", - "Updating ../generated_pages/techniques/T0045.md\n", - "Updating ../generated_pages/techniques/T0046.md\n", - "Updating ../generated_pages/techniques/T0047.md\n", - "Updating ../generated_pages/techniques/T0048.md\n", - "Updating ../generated_pages/techniques/T0049.md\n", - "Updating ../generated_pages/techniques/T0050.md\n", - "Updating ../generated_pages/techniques/T0051.md\n", - "Updating ../generated_pages/techniques/T0052.md\n", - "Updating ../generated_pages/techniques/T0053.md\n", - "Updating ../generated_pages/techniques/T0054.md\n", - "Updating ../generated_pages/techniques/T0055.md\n", - "Updating ../generated_pages/techniques/T0056.md\n", - "Updating ../generated_pages/techniques/T0057.md\n", - "Updating ../generated_pages/techniques/T0058.md\n", - "Updating ../generated_pages/techniques/T0059.md\n", - "Updating ../generated_pages/techniques/T0060.md\n", - "Updating ../generated_pages/techniques/T0061.md\n", - "Updating ../generated_pages/techniques/T0062.md\n", - "Updating ../generated_pages/techniques/T0063.md\n", - "Updating ../generated_pages/techniques/T0064.md\n", - "Updating ../generated_pages/techniques/T0065.md\n", - "Updating ../generated_pages/techniques/T0066.md\n", - "Updating ../generated_pages/techniques/T0067.md\n", - "Updating ../generated_pages/techniques/T0068.md\n", - "Updating ../generated_pages/techniques/T0069.md\n", - "Updating ../generated_pages/techniques/T0070.md\n", - "Updating ../generated_pages/techniques/T0071.md\n", - "Updating ../generated_pages/techniques/T0072.md\n", - "Updating ../generated_pages/techniques/T0073.md\n", - "Updating ../generated_pages/techniques/T0074.md\n", - "Updating ../generated_pages/techniques/T0075.md\n", - "Updating ../generated_pages/techniques/T0076.md\n", - "Updating ../generated_pages/techniques/T0077.md\n", - "Updating ../generated_pages/techniques/T0078.md\n", - "Updating ../generated_pages/techniques/T0079.md\n", - "Updating ../generated_pages/techniques/T0080.md\n", - "Updating ../generated_pages/techniques/T0081.md\n", - "Updating ../generated_pages/techniques/T0082.md\n", - "Updating ../generated_pages/techniques/T0083.md\n", - "Updating ../generated_pages/techniques/T0084.md\n", - "Updating ../generated_pages/techniques/T0085.md\n", - "Updating ../generated_pages/techniques/T0086.md\n", - "Updating ../generated_pages/techniques/T0087.md\n", - "Updating ../generated_pages/techniques/T0088.md\n", - "Updating ../generated_pages/techniques/T0089.md\n", - "Updating ../generated_pages/techniques/T0090.md\n", - "Updating ../generated_pages/techniques/T0091.md\n", - "Updating ../generated_pages/techniques/T0092.md\n", - "Updating ../generated_pages/techniques/T0093.md\n", - "Updating ../generated_pages/techniques/T0094.md\n", - "Updating ../generated_pages/techniques/T0095.md\n", - "Updating ../generated_pages/techniques/T0096.md\n", - "Updating ../generated_pages/techniques/T0097.md\n", "Temp: objecttype task\n", "updated ../generated_pages/tasks_index.md\n", "Temp: objecttype incident\n", "updated ../generated_pages/incidents_index.md\n", - "Updating ../generated_pages/incidents/I00002.md\n", - "Updating ../generated_pages/incidents/I00005.md\n", - "Updating ../generated_pages/incidents/I00006.md\n", - "Updating ../generated_pages/incidents/I00007.md\n", - "Updating ../generated_pages/incidents/I00009.md\n", - "Updating ../generated_pages/incidents/I00010.md\n", - "Updating ../generated_pages/incidents/I00015.md\n", - "Updating ../generated_pages/incidents/I00017.md\n", - "Updating ../generated_pages/incidents/I00022.md\n", - "Updating ../generated_pages/incidents/I00029.md\n", - "Updating ../generated_pages/incidents/I00032.md\n", - "Updating ../generated_pages/incidents/I00033.md\n", - "Updating ../generated_pages/incidents/I00034.md\n", - "Updating ../generated_pages/incidents/I00042.md\n", - "Updating ../generated_pages/incidents/I00044.md\n", - "Updating ../generated_pages/incidents/I00047.md\n", - "Updating ../generated_pages/incidents/I00049.md\n", - "Updating ../generated_pages/incidents/I00050.md\n", - "Updating ../generated_pages/incidents/I00051.md\n", - "Updating ../generated_pages/incidents/I00053.md\n", - "Updating ../generated_pages/incidents/I00056.md\n", - "Updating ../generated_pages/incidents/I00063.md\n", "Temp: objecttype counter\n", "updated ../generated_pages/counters_index.md\n", - "Updating ../generated_pages/counters/C00006.md\n", - "Updating ../generated_pages/counters/C00008.md\n", - "Updating ../generated_pages/counters/C00009.md\n", - "Updating ../generated_pages/counters/C00010.md\n", - "Updating ../generated_pages/counters/C00011.md\n", - "Updating ../generated_pages/counters/C00012.md\n", - "Updating ../generated_pages/counters/C00013.md\n", - "Updating ../generated_pages/counters/C00014.md\n", - "Updating ../generated_pages/counters/C00016.md\n", - "Updating ../generated_pages/counters/C00017.md\n", - "Updating ../generated_pages/counters/C00019.md\n", - "Updating ../generated_pages/counters/C00021.md\n", - "Updating ../generated_pages/counters/C00022.md\n", - "Updating ../generated_pages/counters/C00024.md\n", - "Updating ../generated_pages/counters/C00026.md\n", - "Updating ../generated_pages/counters/C00027.md\n", - "Updating ../generated_pages/counters/C00029.md\n", - "Updating ../generated_pages/counters/C00030.md\n", - "Updating ../generated_pages/counters/C00031.md\n", - "Updating ../generated_pages/counters/C00032.md\n", - "Updating ../generated_pages/counters/C00034.md\n", - "Updating ../generated_pages/counters/C00036.md\n", - "Updating ../generated_pages/counters/C00040.md\n", - "Updating ../generated_pages/counters/C00042.md\n", - "Updating ../generated_pages/counters/C00044.md\n", - "Updating ../generated_pages/counters/C00046.md\n", - "Updating ../generated_pages/counters/C00047.md\n", - "Updating ../generated_pages/counters/C00048.md\n", - "Updating ../generated_pages/counters/C00051.md\n", - "Updating ../generated_pages/counters/C00052.md\n", - "Updating ../generated_pages/counters/C00053.md\n" - ] - }, - { - "name": "stdout", - "output_type": "stream", - "text": [ - "Updating ../generated_pages/counters/C00058.md\n", - "Updating ../generated_pages/counters/C00059.md\n", - "Updating ../generated_pages/counters/C00060.md\n", - "Updating ../generated_pages/counters/C00065.md\n", - "Updating ../generated_pages/counters/C00066.md\n", - "Updating ../generated_pages/counters/C00067.md\n", - "Updating ../generated_pages/counters/C00070.md\n", - "Updating ../generated_pages/counters/C00071.md\n", - "Updating ../generated_pages/counters/C00072.md\n", - "Updating ../generated_pages/counters/C00073.md\n", - "Updating ../generated_pages/counters/C00074.md\n", - "Updating ../generated_pages/counters/C00076.md\n", - "Updating ../generated_pages/counters/C00078.md\n", - "Updating ../generated_pages/counters/C00080.md\n", - "Updating ../generated_pages/counters/C00081.md\n", - "Updating ../generated_pages/counters/C00082.md\n", - "Updating ../generated_pages/counters/C00084.md\n", - "Updating ../generated_pages/counters/C00085.md\n", - "Updating ../generated_pages/counters/C00086.md\n", - "Updating ../generated_pages/counters/C00087.md\n", - "Updating ../generated_pages/counters/C00090.md\n", - "Updating ../generated_pages/counters/C00091.md\n", - "Updating ../generated_pages/counters/C00092.md\n", - "Updating ../generated_pages/counters/C00093.md\n", - "Updating ../generated_pages/counters/C00094.md\n", - "Updating ../generated_pages/counters/C00096.md\n", - "Updating ../generated_pages/counters/C00097.md\n", - "Updating ../generated_pages/counters/C00098.md\n", - "Updating ../generated_pages/counters/C00099.md\n", - "Updating ../generated_pages/counters/C00100.md\n", - "Updating ../generated_pages/counters/C00101.md\n", - "Updating ../generated_pages/counters/C00103.md\n", - "Updating ../generated_pages/counters/C00105.md\n", - "Updating ../generated_pages/counters/C00106.md\n", - "Updating ../generated_pages/counters/C00107.md\n", - "Updating ../generated_pages/counters/C00111.md\n", - "Updating ../generated_pages/counters/C00112.md\n", - "Updating ../generated_pages/counters/C00113.md\n", - "Updating ../generated_pages/counters/C00114.md\n", - "Updating ../generated_pages/counters/C00115.md\n", - "Updating ../generated_pages/counters/C00116.md\n", - "Updating ../generated_pages/counters/C00117.md\n", - "Updating ../generated_pages/counters/C00118.md\n", - "Updating ../generated_pages/counters/C00119.md\n", - "Updating ../generated_pages/counters/C00120.md\n", - "Updating ../generated_pages/counters/C00121.md\n", - "Updating ../generated_pages/counters/C00122.md\n", - "Updating ../generated_pages/counters/C00123.md\n", - "Updating ../generated_pages/counters/C00124.md\n", - "Updating ../generated_pages/counters/C00125.md\n", - "Updating ../generated_pages/counters/C00126.md\n", - "Updating ../generated_pages/counters/C00128.md\n", - "Updating ../generated_pages/counters/C00129.md\n", - "Updating ../generated_pages/counters/C00130.md\n", - "Updating ../generated_pages/counters/C00131.md\n", - "Updating ../generated_pages/counters/C00133.md\n", - "Updating ../generated_pages/counters/C00135.md\n", - "Updating ../generated_pages/counters/C00136.md\n", - "Updating ../generated_pages/counters/C00138.md\n", - "Updating ../generated_pages/counters/C00142.md\n", - "Updating ../generated_pages/counters/C00143.md\n", - "Updating ../generated_pages/counters/C00144.md\n", - "Updating ../generated_pages/counters/C00147.md\n", - "Updating ../generated_pages/counters/C00148.md\n", - "Updating ../generated_pages/counters/C00149.md\n", - "Updating ../generated_pages/counters/C00153.md\n", - "Updating ../generated_pages/counters/C00154.md\n", - "Updating ../generated_pages/counters/C00155.md\n", - "Updating ../generated_pages/counters/C00156.md\n", - "Updating ../generated_pages/counters/C00160.md\n", - "Updating ../generated_pages/counters/C00161.md\n", - "Updating ../generated_pages/counters/C00162.md\n", - "Updating ../generated_pages/counters/C00164.md\n", - "Updating ../generated_pages/counters/C00165.md\n", - "Updating ../generated_pages/counters/C00169.md\n", - "Updating ../generated_pages/counters/C00172.md\n", - "Updating ../generated_pages/counters/C00174.md\n", - "Updating ../generated_pages/counters/C00176.md\n", - "Updating ../generated_pages/counters/C00178.md\n", - "Updating ../generated_pages/counters/C00182.md\n", - "Updating ../generated_pages/counters/C00184.md\n", - "Updating ../generated_pages/counters/C00188.md\n", - "Updating ../generated_pages/counters/C00189.md\n", - "Updating ../generated_pages/counters/C00190.md\n", - "Updating ../generated_pages/counters/C00195.md\n", - "Updating ../generated_pages/counters/C00197.md\n", - "Updating ../generated_pages/counters/C00200.md\n", - "Updating ../generated_pages/counters/C00202.md\n", - "Updating ../generated_pages/counters/C00203.md\n", - "Updating ../generated_pages/counters/C00205.md\n", - "Updating ../generated_pages/counters/C00207.md\n", - "Updating ../generated_pages/counters/C00211.md\n", - "Updating ../generated_pages/counters/C00212.md\n", - "Updating ../generated_pages/counters/C00216.md\n", - "Updating ../generated_pages/counters/C00219.md\n", "Temp: objecttype metatechnique\n", "updated ../generated_pages/metatechniques_index.md\n", "Temp: objecttype actortype\n", diff --git a/CODE/generate_DISARM_pages.py b/CODE/generate_DISARM_pages.py index 13ead1c..34fabb0 100644 --- a/CODE/generate_DISARM_pages.py +++ b/CODE/generate_DISARM_pages.py @@ -241,7 +241,7 @@ class Disarm: tactic_techniques = self.df_techniques[self.df_techniques['tactic_id']==tactic_id] row_string = '| [{0} {1}]({2}techniques/{0}.md) |\n' for index, row in tactic_techniques.sort_values('disarm_id').iterrows(): - table_string += row_string.format(row['disarm_id'], row['name'], GENERATED_PAGES_DIR) + table_string += row_string.format(row['disarm_id'], row['name'], '') return table_string diff --git a/generated_files/disarm_red_framework_clickable.html b/generated_files/disarm_red_framework_clickable.html index 5f6e84e..9ba5766 100644 --- a/generated_files/disarm_red_framework_clickable.html +++ b/generated_files/disarm_red_framework_clickable.html @@ -62,161 +62,125 @@ function handleTechniqueClick(box) { T0073 Determine Target Audiences T0002 Facilitate State Propaganda -T0016 Create Clickbait -T0015 Create hashtags and search artifacts -T0029 Online polls -T0020 Trial content +T0101 Create Localized Content +T0084 Reuse Existing Content +T0103 Livestream +T0113 Employ Commercial Analytic Firms T0114 Deliver Ads -T0017 Conduct fundraising -T0059 Play the long game +T0126 Encourage Attendance at Events +T0131 Exploit TOS/Content Moderation T0132 Measure Performance -T0072 Segment Audiences -T0003 Leverage Existing Narratives -T0007 Create Inauthentic Social Media Pages and Groups -T0009 Create fake experts -T0049 Flooding the Information Space -T0047 Censor social media as a political force +T0080 Map Target Audience Information Environment +T0082 Develop New Narratives +T0090 Create Inauthentic Accounts +T0097 Create personas +T0118 Amplify Existing Narrative +T0123 Control Information Environment through Offensive Cyberspace Operations T0074 Determine Strategic Ends T0066 Degrade Adversary -T0018 Purchase Targeted Advertisements -T0019 Generate information pollution -T0043 Chat apps -T0039 Bait legitimate influencers +T0102 Leverage Echo Chambers/Filter Bubbles +T0085 Develop Text-based Content +T0104 Social Networks +T0020 Trial content T0115 Post Content -T0057 Organize Events -T0060 Continue to Amplify +T0127 Physical Violence +T0059 Play the long game T0133 Measure Effectiveness -T0080 Map Target Audience Information Environment -T0004 Develop Competing Narratives -T0010 Cultivate ignorant agents -T0011 Compromise legitimate accounts -T0118 Amplify Existing Narrative -T0048 Harass +T0081 Identify Social and Technical Vulnerabilities +T0083 Integrate Target Audience Vulnerabilities into Narrative +T0091 Recruit bad actors +T0098 Establish Inauthentic News Sites +T0119 Cross-Posting +T0124 Suppress Opposition T0075 Dismiss -T0101 Create Localized Content -T0023 Distort facts -T0103 Livestream -T0042 Seed Kernel of truth +T0016 Create Clickbait +T0086 Develop Image-based Content +T0105 Media Sharing Networks +T0039 Bait legitimate influencers T0116 Comment or Reply on Content -T0061 Sell Merchandise -T0128 Conceal People +T0017 Conduct fundraising +T0060 Continue to Amplify T0134 Measure Effectiveness Indicators (or KPIs) -T0081 Identify Social and Technical Vulnerabilities -T0022 Leverage Conspiracy Theory Narratives -T0013 Create inauthentic websites -T0097 Create personas -T0119 Cross-Posting -T0123 Control Information Environment through Offensive Cyberspace Operations +T0072 Segment Audiences +T0003 Leverage Existing Narratives +T0092 Build Network +T0099 Prepare Assets Impersonating Legitimate Entities +T0120 Incentivize Sharing +T0125 Platform Filtering T0076 Distort -T0102 Leverage Echo Chambers/Filter Bubbles -T0084 Reuse Existing Content -T0104 Social Networks -T0044 Seed distortions +T0018 Purchase Targeted Advertisements +T0087 Develop Video-based Content +T0106 Discussion Forums +T0042 Seed Kernel of truth T0117 Attract Traditional Media -T0126 Encourage Attendance at Events -T0129 Conceal Operational Activity +T0057 Organize Events +T0128 Conceal People -T0040 Demand insurmountable proof -T0014 Prepare fundraising campaigns -T0098 Establish Inauthentic News Sites -T0120 Incentivize Sharing -T0124 Suppress Opposition +T0004 Develop Competing Narratives +T0093 Acquire/ recruit Network +T0100 Co-opt Trusted Sources +T0121 Manipulate Platform Algorithm +T0047 Censor social media as a political force T0077 Distract -T0085 Develop Text-based Content -T0105 Media Sharing Networks -T0045 Use fake experts +T0088 Develop Audio-based Content +T0107 Bookmarking and Content Curation +T0044 Seed distortions -T0127 Physical Violence -T0130 Conceal Infrastructure +T0061 Sell Merchandise +T0129 Conceal Operational Activity -T0068 Respond to Breaking News Event or Active Crisis -T0065 Prepare Physical Broadcast Capabilities -T0099 Prepare Assets Impersonating Legitimate Entities -T0121 Manipulate Platform Algorithm -T0125 Platform Filtering +T0022 Leverage Conspiracy Theory Narratives +T0094 Infiltrate Existing Networks +T0009 Create fake experts +T0122 Direct Users to Alternative Platforms +T0048 Harass T0078 Dismay -T0086 Develop Image-based Content -T0106 Discussion Forums -T0046 Use Search Engine Optimization +T0089 Obtain Private Documents +T0108 Blogging and Publishing Networks +T0045 Use fake experts -T0131 Exploit TOS/Content Moderation +T0130 Conceal Infrastructure -T0082 Develop New Narratives -T0090 Create Inauthentic Accounts -T0100 Co-opt Trusted Sources -T0122 Direct Users to Alternative Platforms +T0040 Demand insurmountable proof +T0095 Develop Owned Media Assets +T0011 Compromise legitimate accounts +T0049 Flooding the Information Space T0079 Divide -T0087 Develop Video-based Content -T0107 Bookmarking and Content Curation -T0113 Employ Commercial Analytic Firms - - - - - -T0083 Integrate Target Audience Vulnerabilities into Narrative -T0091 Recruit bad actors - - - - - - - - -T0088 Develop Audio-based Content -T0108 Blogging and Publishing Networks - - - - - - - -T0092 Build Network - - - - - - - - -T0089 Obtain Private Documents +T0015 Create hashtags and search artifacts T0109 Consumer Review Networks +T0046 Use Search Engine Optimization - - -T0093 Acquire/ recruit Network +T0068 Respond to Breaking News Event or Active Crisis +T0096 Leverage Content Farm @@ -225,7 +189,7 @@ function handleTechniqueClick(box) { - +T0019 Generate information pollution T0110 Formal Diplomatic Channels @@ -234,7 +198,7 @@ function handleTechniqueClick(box) { -T0094 Infiltrate Existing Networks +T0007 Create Inauthentic Social Media Pages and Groups @@ -243,7 +207,7 @@ function handleTechniqueClick(box) { - +T0023 Distort facts T0111 Traditional Media @@ -252,7 +216,7 @@ function handleTechniqueClick(box) { -T0095 Develop Owned Media Assets +T0010 Cultivate ignorant agents @@ -270,7 +234,43 @@ function handleTechniqueClick(box) { -T0096 Leverage Content Farm +T0013 Create inauthentic websites + + + + + + + + + +T0029 Online polls + + + + + + + +T0014 Prepare fundraising campaigns + + + + + + + + + +T0043 Chat apps + + + + + + + +T0065 Prepare Physical Broadcast Capabilities @@ -282,102 +282,102 @@ function handleTechniqueClick(box) { diff --git a/generated_files/red_framework_ids.csv b/generated_files/red_framework_ids.csv index f231c3c..b58f7a9 100644 --- a/generated_files/red_framework_ids.csv +++ b/generated_files/red_framework_ids.csv @@ -1,14 +1,14 @@ P01,P01,P02,P02,P02,P03,P03,P03,P03,P04,P01,P02,P02,P02,P03,P03 TA01,TA02,TA05,TA06,TA07,TA08,TA09,TA10,TA11,TA12,TA13,TA14,TA15,TA16,TA17,TA18 -T0073,T0002,T0016,T0015,T0029,T0020,T0114,T0017,T0059,T0132,T0072,T0003,T0007,T0009,T0049,T0047 -T0074,T0066,T0018,T0019,T0043,T0039 ,T0115,T0057,T0060,T0133,T0080,T0004,T0010,T0011,T0118,T0048 -,T0075,T0101,T0023,T0103,T0042,T0116,T0061,T0128,T0134,T0081,T0022,T0013,T0097,T0119,T0123 -,T0076,T0102,T0084,T0104,T0044,T0117,T0126,T0129,,,T0040,T0014,T0098,T0120,T0124 -,T0077,,T0085,T0105,T0045,,T0127,T0130,,,T0068,T0065,T0099,T0121,T0125 -,T0078,,T0086,T0106,T0046,,,T0131,,,T0082,T0090,T0100,T0122, -,T0079,,T0087,T0107,T0113,,,,,,T0083,T0091,,, -,,,T0088,T0108,,,,,,,,T0092,,, -,,,T0089,T0109,,,,,,,,T0093,,, -,,,,T0110,,,,,,,,T0094,,, -,,,,T0111,,,,,,,,T0095,,, -,,,,T0112,,,,,,,,T0096,,, +T0073,T0002,T0101,T0084,T0103,T0113,T0114,T0126,T0131,T0132,T0080,T0082,T0090,T0097,T0118,T0123 +T0074,T0066,T0102,T0085,T0104,T0020,T0115,T0127,T0059,T0133,T0081,T0083,T0091,T0098,T0119,T0124 +,T0075,T0016,T0086,T0105,T0039 ,T0116,T0017,T0060,T0134,T0072,T0003,T0092,T0099,T0120,T0125 +,T0076,T0018,T0087,T0106,T0042,T0117,T0057,T0128,,,T0004,T0093,T0100,T0121,T0047 +,T0077,,T0088,T0107,T0044,,T0061,T0129,,,T0022,T0094,T0009,T0122,T0048 +,T0078,,T0089,T0108,T0045,,,T0130,,,T0040,T0095,T0011,T0049, +,T0079,,T0015,T0109,T0046,,,,,,T0068,T0096,,, +,,,T0019,T0110,,,,,,,,T0007,,, +,,,T0023,T0111,,,,,,,,T0010,,, +,,,,T0112,,,,,,,,T0013,,, +,,,,T0029,,,,,,,,T0014,,, +,,,,T0043,,,,,,,,T0065,,, diff --git a/generated_pages/.DS_Store b/generated_pages/.DS_Store new file mode 100644 index 0000000..26e3671 Binary files /dev/null and b/generated_pages/.DS_Store differ diff --git a/generated_pages/disarm_red_framework.md b/generated_pages/disarm_red_framework.md index 99075aa..cd72947 100644 --- a/generated_pages/disarm_red_framework.md +++ b/generated_pages/disarm_red_framework.md @@ -23,161 +23,125 @@ T0073 Determine Target Audiences T0002 Facilitate State Propaganda -T0016 Create Clickbait -T0015 Create hashtags and search artifacts -T0029 Online polls -T0020 Trial content +T0101 Create Localized Content +T0084 Reuse Existing Content +T0103 Livestream +T0113 Employ Commercial Analytic Firms T0114 Deliver Ads -T0017 Conduct fundraising -T0059 Play the long game +T0126 Encourage Attendance at Events +T0131 Exploit TOS/Content Moderation T0132 Measure Performance -T0072 Segment Audiences -T0003 Leverage Existing Narratives -T0007 Create Inauthentic Social Media Pages and Groups -T0009 Create fake experts -T0049 Flooding the Information Space -T0047 Censor social media as a political force +T0080 Map Target Audience Information Environment +T0082 Develop New Narratives +T0090 Create Inauthentic Accounts +T0097 Create personas +T0118 Amplify Existing Narrative +T0123 Control Information Environment through Offensive Cyberspace Operations T0074 Determine Strategic Ends T0066 Degrade Adversary -T0018 Purchase Targeted Advertisements -T0019 Generate information pollution -T0043 Chat apps -T0039 Bait legitimate influencers +T0102 Leverage Echo Chambers/Filter Bubbles +T0085 Develop Text-based Content +T0104 Social Networks +T0020 Trial content T0115 Post Content -T0057 Organize Events -T0060 Continue to Amplify +T0127 Physical Violence +T0059 Play the long game T0133 Measure Effectiveness -T0080 Map Target Audience Information Environment -T0004 Develop Competing Narratives -T0010 Cultivate ignorant agents -T0011 Compromise legitimate accounts -T0118 Amplify Existing Narrative -T0048 Harass +T0081 Identify Social and Technical Vulnerabilities +T0083 Integrate Target Audience Vulnerabilities into Narrative +T0091 Recruit bad actors +T0098 Establish Inauthentic News Sites +T0119 Cross-Posting +T0124 Suppress Opposition T0075 Dismiss -T0101 Create Localized Content -T0023 Distort facts -T0103 Livestream -T0042 Seed Kernel of truth +T0016 Create Clickbait +T0086 Develop Image-based Content +T0105 Media Sharing Networks +T0039 Bait legitimate influencers T0116 Comment or Reply on Content -T0061 Sell Merchandise -T0128 Conceal People +T0017 Conduct fundraising +T0060 Continue to Amplify T0134 Measure Effectiveness Indicators (or KPIs) -T0081 Identify Social and Technical Vulnerabilities -T0022 Leverage Conspiracy Theory Narratives -T0013 Create inauthentic websites -T0097 Create personas -T0119 Cross-Posting -T0123 Control Information Environment through Offensive Cyberspace Operations +T0072 Segment Audiences +T0003 Leverage Existing Narratives +T0092 Build Network +T0099 Prepare Assets Impersonating Legitimate Entities +T0120 Incentivize Sharing +T0125 Platform Filtering T0076 Distort -T0102 Leverage Echo Chambers/Filter Bubbles -T0084 Reuse Existing Content -T0104 Social Networks -T0044 Seed distortions +T0018 Purchase Targeted Advertisements +T0087 Develop Video-based Content +T0106 Discussion Forums +T0042 Seed Kernel of truth T0117 Attract Traditional Media -T0126 Encourage Attendance at Events -T0129 Conceal Operational Activity +T0057 Organize Events +T0128 Conceal People -T0040 Demand insurmountable proof -T0014 Prepare fundraising campaigns -T0098 Establish Inauthentic News Sites -T0120 Incentivize Sharing -T0124 Suppress Opposition +T0004 Develop Competing Narratives +T0093 Acquire/ recruit Network +T0100 Co-opt Trusted Sources +T0121 Manipulate Platform Algorithm +T0047 Censor social media as a political force T0077 Distract -T0085 Develop Text-based Content -T0105 Media Sharing Networks -T0045 Use fake experts +T0088 Develop Audio-based Content +T0107 Bookmarking and Content Curation +T0044 Seed distortions -T0127 Physical Violence -T0130 Conceal Infrastructure +T0061 Sell Merchandise +T0129 Conceal Operational Activity -T0068 Respond to Breaking News Event or Active Crisis -T0065 Prepare Physical Broadcast Capabilities -T0099 Prepare Assets Impersonating Legitimate Entities -T0121 Manipulate Platform Algorithm -T0125 Platform Filtering +T0022 Leverage Conspiracy Theory Narratives +T0094 Infiltrate Existing Networks +T0009 Create fake experts +T0122 Direct Users to Alternative Platforms +T0048 Harass T0078 Dismay -T0086 Develop Image-based Content -T0106 Discussion Forums -T0046 Use Search Engine Optimization +T0089 Obtain Private Documents +T0108 Blogging and Publishing Networks +T0045 Use fake experts -T0131 Exploit TOS/Content Moderation +T0130 Conceal Infrastructure -T0082 Develop New Narratives -T0090 Create Inauthentic Accounts -T0100 Co-opt Trusted Sources -T0122 Direct Users to Alternative Platforms +T0040 Demand insurmountable proof +T0095 Develop Owned Media Assets +T0011 Compromise legitimate accounts +T0049 Flooding the Information Space T0079 Divide -T0087 Develop Video-based Content -T0107 Bookmarking and Content Curation -T0113 Employ Commercial Analytic Firms - - - - - -T0083 Integrate Target Audience Vulnerabilities into Narrative -T0091 Recruit bad actors - - - - - - - - -T0088 Develop Audio-based Content -T0108 Blogging and Publishing Networks - - - - - - - -T0092 Build Network - - - - - - - - -T0089 Obtain Private Documents +T0015 Create hashtags and search artifacts T0109 Consumer Review Networks +T0046 Use Search Engine Optimization - - -T0093 Acquire/ recruit Network +T0068 Respond to Breaking News Event or Active Crisis +T0096 Leverage Content Farm @@ -186,7 +150,7 @@ - +T0019 Generate information pollution T0110 Formal Diplomatic Channels @@ -195,7 +159,7 @@ -T0094 Infiltrate Existing Networks +T0007 Create Inauthentic Social Media Pages and Groups @@ -204,7 +168,7 @@ - +T0023 Distort facts T0111 Traditional Media @@ -213,7 +177,7 @@ -T0095 Develop Owned Media Assets +T0010 Cultivate ignorant agents @@ -231,7 +195,43 @@ -T0096 Leverage Content Farm +T0013 Create inauthentic websites + + + + + + + + + +T0029 Online polls + + + + + + + +T0014 Prepare fundraising campaigns + + + + + + + + + +T0043 Chat apps + + + + + + + +T0065 Prepare Physical Broadcast Capabilities diff --git a/generated_pages/tactics/TA01.md b/generated_pages/tactics/TA01.md index 31b00d5..a1c4448 100644 --- a/generated_pages/tactics/TA01.md +++ b/generated_pages/tactics/TA01.md @@ -17,8 +17,8 @@ | Techniques | | ---------- | -| [T0073 Determine Target Audiences](../generated_pages/techniques/T0073.md) | -| [T0074 Determine Strategic Ends](../generated_pages/techniques/T0074.md) | +| [T0073 Determine Target Audiences](techniques/T0073.md) | +| [T0074 Determine Strategic Ends](techniques/T0074.md) | diff --git a/generated_pages/tactics/TA02.md b/generated_pages/tactics/TA02.md index 7492f74..f2d5869 100644 --- a/generated_pages/tactics/TA02.md +++ b/generated_pages/tactics/TA02.md @@ -24,13 +24,13 @@ | Techniques | | ---------- | -| [T0002 Facilitate State Propaganda](../generated_pages/techniques/T0002.md) | -| [T0066 Degrade Adversary](../generated_pages/techniques/T0066.md) | -| [T0075 Dismiss](../generated_pages/techniques/T0075.md) | -| [T0076 Distort](../generated_pages/techniques/T0076.md) | -| [T0077 Distract](../generated_pages/techniques/T0077.md) | -| [T0078 Dismay](../generated_pages/techniques/T0078.md) | -| [T0079 Divide](../generated_pages/techniques/T0079.md) | +| [T0002 Facilitate State Propaganda](techniques/T0002.md) | +| [T0066 Degrade Adversary](techniques/T0066.md) | +| [T0075 Dismiss](techniques/T0075.md) | +| [T0076 Distort](techniques/T0076.md) | +| [T0077 Distract](techniques/T0077.md) | +| [T0078 Dismay](techniques/T0078.md) | +| [T0079 Divide](techniques/T0079.md) | diff --git a/generated_pages/tactics/TA05.md b/generated_pages/tactics/TA05.md index cf75451..02bb032 100644 --- a/generated_pages/tactics/TA05.md +++ b/generated_pages/tactics/TA05.md @@ -14,10 +14,10 @@ | Techniques | | ---------- | -| [T0016 Create Clickbait](../generated_pages/techniques/T0016.md) | -| [T0018 Purchase Targeted Advertisements](../generated_pages/techniques/T0018.md) | -| [T0101 Create Localized Content](../generated_pages/techniques/T0101.md) | -| [T0102 Leverage Echo Chambers/Filter Bubbles](../generated_pages/techniques/T0102.md) | +| [T0016 Create Clickbait](techniques/T0016.md) | +| [T0018 Purchase Targeted Advertisements](techniques/T0018.md) | +| [T0101 Create Localized Content](techniques/T0101.md) | +| [T0102 Leverage Echo Chambers/Filter Bubbles](techniques/T0102.md) | diff --git a/generated_pages/tactics/TA06.md b/generated_pages/tactics/TA06.md index d27fc73..e8b52fe 100644 --- a/generated_pages/tactics/TA06.md +++ b/generated_pages/tactics/TA06.md @@ -1,6 +1,6 @@ # Tactic TA06: Develop Content -* **Summary:** TBD +* **Summary:** Create or acquire text, images, and other content * **Belongs to phase:** P02 @@ -16,15 +16,15 @@ | Techniques | | ---------- | -| [T0015 Create hashtags and search artifacts](../generated_pages/techniques/T0015.md) | -| [T0019 Generate information pollution](../generated_pages/techniques/T0019.md) | -| [T0023 Distort facts](../generated_pages/techniques/T0023.md) | -| [T0084 Reuse Existing Content](../generated_pages/techniques/T0084.md) | -| [T0085 Develop Text-based Content](../generated_pages/techniques/T0085.md) | -| [T0086 Develop Image-based Content](../generated_pages/techniques/T0086.md) | -| [T0087 Develop Video-based Content](../generated_pages/techniques/T0087.md) | -| [T0088 Develop Audio-based Content](../generated_pages/techniques/T0088.md) | -| [T0089 Obtain Private Documents](../generated_pages/techniques/T0089.md) | +| [T0015 Create hashtags and search artifacts](techniques/T0015.md) | +| [T0019 Generate information pollution](techniques/T0019.md) | +| [T0023 Distort facts](techniques/T0023.md) | +| [T0084 Reuse Existing Content](techniques/T0084.md) | +| [T0085 Develop Text-based Content](techniques/T0085.md) | +| [T0086 Develop Image-based Content](techniques/T0086.md) | +| [T0087 Develop Video-based Content](techniques/T0087.md) | +| [T0088 Develop Audio-based Content](techniques/T0088.md) | +| [T0089 Obtain Private Documents](techniques/T0089.md) | diff --git a/generated_pages/tactics/TA07.md b/generated_pages/tactics/TA07.md index c9444b4..4577837 100644 --- a/generated_pages/tactics/TA07.md +++ b/generated_pages/tactics/TA07.md @@ -14,18 +14,18 @@ | Techniques | | ---------- | -| [T0029 Online polls](../generated_pages/techniques/T0029.md) | -| [T0043 Chat apps](../generated_pages/techniques/T0043.md) | -| [T0103 Livestream](../generated_pages/techniques/T0103.md) | -| [T0104 Social Networks](../generated_pages/techniques/T0104.md) | -| [T0105 Media Sharing Networks](../generated_pages/techniques/T0105.md) | -| [T0106 Discussion Forums](../generated_pages/techniques/T0106.md) | -| [T0107 Bookmarking and Content Curation](../generated_pages/techniques/T0107.md) | -| [T0108 Blogging and Publishing Networks](../generated_pages/techniques/T0108.md) | -| [T0109 Consumer Review Networks](../generated_pages/techniques/T0109.md) | -| [T0110 Formal Diplomatic Channels](../generated_pages/techniques/T0110.md) | -| [T0111 Traditional Media](../generated_pages/techniques/T0111.md) | -| [T0112 Email](../generated_pages/techniques/T0112.md) | +| [T0029 Online polls](techniques/T0029.md) | +| [T0043 Chat apps](techniques/T0043.md) | +| [T0103 Livestream](techniques/T0103.md) | +| [T0104 Social Networks](techniques/T0104.md) | +| [T0105 Media Sharing Networks](techniques/T0105.md) | +| [T0106 Discussion Forums](techniques/T0106.md) | +| [T0107 Bookmarking and Content Curation](techniques/T0107.md) | +| [T0108 Blogging and Publishing Networks](techniques/T0108.md) | +| [T0109 Consumer Review Networks](techniques/T0109.md) | +| [T0110 Formal Diplomatic Channels](techniques/T0110.md) | +| [T0111 Traditional Media](techniques/T0111.md) | +| [T0112 Email](techniques/T0112.md) | diff --git a/generated_pages/tactics/TA08.md b/generated_pages/tactics/TA08.md index 7ff6aea..4b43e28 100644 --- a/generated_pages/tactics/TA08.md +++ b/generated_pages/tactics/TA08.md @@ -16,13 +16,13 @@ | Techniques | | ---------- | -| [T0020 Trial content](../generated_pages/techniques/T0020.md) | -| [T0039 Bait legitimate influencers](../generated_pages/techniques/T0039 .md) | -| [T0042 Seed Kernel of truth](../generated_pages/techniques/T0042.md) | -| [T0044 Seed distortions](../generated_pages/techniques/T0044.md) | -| [T0045 Use fake experts](../generated_pages/techniques/T0045.md) | -| [T0046 Use Search Engine Optimization](../generated_pages/techniques/T0046.md) | -| [T0113 Employ Commercial Analytic Firms](../generated_pages/techniques/T0113.md) | +| [T0020 Trial content](techniques/T0020.md) | +| [T0039 Bait legitimate influencers](techniques/T0039 .md) | +| [T0042 Seed Kernel of truth](techniques/T0042.md) | +| [T0044 Seed distortions](techniques/T0044.md) | +| [T0045 Use fake experts](techniques/T0045.md) | +| [T0046 Use Search Engine Optimization](techniques/T0046.md) | +| [T0113 Employ Commercial Analytic Firms](techniques/T0113.md) | diff --git a/generated_pages/tactics/TA09.md b/generated_pages/tactics/TA09.md index 5b981b5..c29dbc1 100644 --- a/generated_pages/tactics/TA09.md +++ b/generated_pages/tactics/TA09.md @@ -16,10 +16,10 @@ | Techniques | | ---------- | -| [T0114 Deliver Ads](../generated_pages/techniques/T0114.md) | -| [T0115 Post Content](../generated_pages/techniques/T0115.md) | -| [T0116 Comment or Reply on Content](../generated_pages/techniques/T0116.md) | -| [T0117 Attract Traditional Media](../generated_pages/techniques/T0117.md) | +| [T0114 Deliver Ads](techniques/T0114.md) | +| [T0115 Post Content](techniques/T0115.md) | +| [T0116 Comment or Reply on Content](techniques/T0116.md) | +| [T0117 Attract Traditional Media](techniques/T0117.md) | diff --git a/generated_pages/tactics/TA10.md b/generated_pages/tactics/TA10.md index 5578f9a..077132a 100644 --- a/generated_pages/tactics/TA10.md +++ b/generated_pages/tactics/TA10.md @@ -14,11 +14,11 @@ | Techniques | | ---------- | -| [T0017 Conduct fundraising](../generated_pages/techniques/T0017.md) | -| [T0057 Organize Events](../generated_pages/techniques/T0057.md) | -| [T0061 Sell Merchandise](../generated_pages/techniques/T0061.md) | -| [T0126 Encourage Attendance at Events](../generated_pages/techniques/T0126.md) | -| [T0127 Physical Violence](../generated_pages/techniques/T0127.md) | +| [T0017 Conduct fundraising](techniques/T0017.md) | +| [T0057 Organize Events](techniques/T0057.md) | +| [T0061 Sell Merchandise](techniques/T0061.md) | +| [T0126 Encourage Attendance at Events](techniques/T0126.md) | +| [T0127 Physical Violence](techniques/T0127.md) | diff --git a/generated_pages/tactics/TA11.md b/generated_pages/tactics/TA11.md index 1999bbe..a0026d9 100644 --- a/generated_pages/tactics/TA11.md +++ b/generated_pages/tactics/TA11.md @@ -19,12 +19,12 @@ | Techniques | | ---------- | -| [T0059 Play the long game](../generated_pages/techniques/T0059.md) | -| [T0060 Continue to Amplify](../generated_pages/techniques/T0060.md) | -| [T0128 Conceal People](../generated_pages/techniques/T0128.md) | -| [T0129 Conceal Operational Activity](../generated_pages/techniques/T0129.md) | -| [T0130 Conceal Infrastructure](../generated_pages/techniques/T0130.md) | -| [T0131 Exploit TOS/Content Moderation](../generated_pages/techniques/T0131.md) | +| [T0059 Play the long game](techniques/T0059.md) | +| [T0060 Continue to Amplify](techniques/T0060.md) | +| [T0128 Conceal People](techniques/T0128.md) | +| [T0129 Conceal Operational Activity](techniques/T0129.md) | +| [T0130 Conceal Infrastructure](techniques/T0130.md) | +| [T0131 Exploit TOS/Content Moderation](techniques/T0131.md) | diff --git a/generated_pages/tactics/TA12.md b/generated_pages/tactics/TA12.md index 42c5f3e..1cf333e 100644 --- a/generated_pages/tactics/TA12.md +++ b/generated_pages/tactics/TA12.md @@ -17,9 +17,9 @@ | Techniques | | ---------- | -| [T0132 Measure Performance](../generated_pages/techniques/T0132.md) | -| [T0133 Measure Effectiveness](../generated_pages/techniques/T0133.md) | -| [T0134 Measure Effectiveness Indicators (or KPIs)](../generated_pages/techniques/T0134.md) | +| [T0132 Measure Performance](techniques/T0132.md) | +| [T0133 Measure Effectiveness](techniques/T0133.md) | +| [T0134 Measure Effectiveness Indicators (or KPIs)](techniques/T0134.md) | diff --git a/generated_pages/tactics/TA13.md b/generated_pages/tactics/TA13.md index 50fe2a2..1e56761 100644 --- a/generated_pages/tactics/TA13.md +++ b/generated_pages/tactics/TA13.md @@ -13,9 +13,9 @@ | Techniques | | ---------- | -| [T0072 Segment Audiences](../generated_pages/techniques/T0072.md) | -| [T0080 Map Target Audience Information Environment](../generated_pages/techniques/T0080.md) | -| [T0081 Identify Social and Technical Vulnerabilities](../generated_pages/techniques/T0081.md) | +| [T0072 Segment Audiences](techniques/T0072.md) | +| [T0080 Map Target Audience Information Environment](techniques/T0080.md) | +| [T0081 Identify Social and Technical Vulnerabilities](techniques/T0081.md) | diff --git a/generated_pages/tactics/TA14.md b/generated_pages/tactics/TA14.md index f34d97a..09b21a8 100644 --- a/generated_pages/tactics/TA14.md +++ b/generated_pages/tactics/TA14.md @@ -13,13 +13,13 @@ | Techniques | | ---------- | -| [T0003 Leverage Existing Narratives](../generated_pages/techniques/T0003.md) | -| [T0004 Develop Competing Narratives](../generated_pages/techniques/T0004.md) | -| [T0022 Leverage Conspiracy Theory Narratives](../generated_pages/techniques/T0022.md) | -| [T0040 Demand insurmountable proof](../generated_pages/techniques/T0040.md) | -| [T0068 Respond to Breaking News Event or Active Crisis](../generated_pages/techniques/T0068.md) | -| [T0082 Develop New Narratives](../generated_pages/techniques/T0082.md) | -| [T0083 Integrate Target Audience Vulnerabilities into Narrative](../generated_pages/techniques/T0083.md) | +| [T0003 Leverage Existing Narratives](techniques/T0003.md) | +| [T0004 Develop Competing Narratives](techniques/T0004.md) | +| [T0022 Leverage Conspiracy Theory Narratives](techniques/T0022.md) | +| [T0040 Demand insurmountable proof](techniques/T0040.md) | +| [T0068 Respond to Breaking News Event or Active Crisis](techniques/T0068.md) | +| [T0082 Develop New Narratives](techniques/T0082.md) | +| [T0083 Integrate Target Audience Vulnerabilities into Narrative](techniques/T0083.md) | diff --git a/generated_pages/tactics/TA15.md b/generated_pages/tactics/TA15.md index 700bf6f..2a01710 100644 --- a/generated_pages/tactics/TA15.md +++ b/generated_pages/tactics/TA15.md @@ -23,18 +23,18 @@ Establishing information assets allows an influence operation to promote messagi | Techniques | | ---------- | -| [T0007 Create Inauthentic Social Media Pages and Groups](../generated_pages/techniques/T0007.md) | -| [T0010 Cultivate ignorant agents](../generated_pages/techniques/T0010.md) | -| [T0013 Create inauthentic websites](../generated_pages/techniques/T0013.md) | -| [T0014 Prepare fundraising campaigns](../generated_pages/techniques/T0014.md) | -| [T0065 Prepare Physical Broadcast Capabilities](../generated_pages/techniques/T0065.md) | -| [T0090 Create Inauthentic Accounts](../generated_pages/techniques/T0090.md) | -| [T0091 Recruit bad actors](../generated_pages/techniques/T0091.md) | -| [T0092 Build Network](../generated_pages/techniques/T0092.md) | -| [T0093 Acquire/ recruit Network](../generated_pages/techniques/T0093.md) | -| [T0094 Infiltrate Existing Networks](../generated_pages/techniques/T0094.md) | -| [T0095 Develop Owned Media Assets](../generated_pages/techniques/T0095.md) | -| [T0096 Leverage Content Farm](../generated_pages/techniques/T0096.md) | +| [T0007 Create Inauthentic Social Media Pages and Groups](techniques/T0007.md) | +| [T0010 Cultivate ignorant agents](techniques/T0010.md) | +| [T0013 Create inauthentic websites](techniques/T0013.md) | +| [T0014 Prepare fundraising campaigns](techniques/T0014.md) | +| [T0065 Prepare Physical Broadcast Capabilities](techniques/T0065.md) | +| [T0090 Create Inauthentic Accounts](techniques/T0090.md) | +| [T0091 Recruit bad actors](techniques/T0091.md) | +| [T0092 Build Network](techniques/T0092.md) | +| [T0093 Acquire/ recruit Network](techniques/T0093.md) | +| [T0094 Infiltrate Existing Networks](techniques/T0094.md) | +| [T0095 Develop Owned Media Assets](techniques/T0095.md) | +| [T0096 Leverage Content Farm](techniques/T0096.md) | diff --git a/generated_pages/tactics/TA16.md b/generated_pages/tactics/TA16.md index a78bbe2..1fb7779 100644 --- a/generated_pages/tactics/TA16.md +++ b/generated_pages/tactics/TA16.md @@ -1,6 +1,6 @@ # Tactic TA16: Establish Legitimacy -* **Summary:** TBD +* **Summary:** Establish assets that create trust * **Belongs to phase:** P02 @@ -13,12 +13,12 @@ | Techniques | | ---------- | -| [T0009 Create fake experts](../generated_pages/techniques/T0009.md) | -| [T0011 Compromise legitimate accounts](../generated_pages/techniques/T0011.md) | -| [T0097 Create personas](../generated_pages/techniques/T0097.md) | -| [T0098 Establish Inauthentic News Sites](../generated_pages/techniques/T0098.md) | -| [T0099 Prepare Assets Impersonating Legitimate Entities](../generated_pages/techniques/T0099.md) | -| [T0100 Co-opt Trusted Sources](../generated_pages/techniques/T0100.md) | +| [T0009 Create fake experts](techniques/T0009.md) | +| [T0011 Compromise legitimate accounts](techniques/T0011.md) | +| [T0097 Create personas](techniques/T0097.md) | +| [T0098 Establish Inauthentic News Sites](techniques/T0098.md) | +| [T0099 Prepare Assets Impersonating Legitimate Entities](techniques/T0099.md) | +| [T0100 Co-opt Trusted Sources](techniques/T0100.md) | diff --git a/generated_pages/tactics/TA17.md b/generated_pages/tactics/TA17.md index 5b9fd91..02b9a48 100644 --- a/generated_pages/tactics/TA17.md +++ b/generated_pages/tactics/TA17.md @@ -13,12 +13,12 @@ | Techniques | | ---------- | -| [T0049 Flooding the Information Space](../generated_pages/techniques/T0049.md) | -| [T0118 Amplify Existing Narrative](../generated_pages/techniques/T0118.md) | -| [T0119 Cross-Posting](../generated_pages/techniques/T0119.md) | -| [T0120 Incentivize Sharing](../generated_pages/techniques/T0120.md) | -| [T0121 Manipulate Platform Algorithm](../generated_pages/techniques/T0121.md) | -| [T0122 Direct Users to Alternative Platforms](../generated_pages/techniques/T0122.md) | +| [T0049 Flooding the Information Space](techniques/T0049.md) | +| [T0118 Amplify Existing Narrative](techniques/T0118.md) | +| [T0119 Cross-Posting](techniques/T0119.md) | +| [T0120 Incentivize Sharing](techniques/T0120.md) | +| [T0121 Manipulate Platform Algorithm](techniques/T0121.md) | +| [T0122 Direct Users to Alternative Platforms](techniques/T0122.md) | diff --git a/generated_pages/tactics/TA18.md b/generated_pages/tactics/TA18.md index 3731932..b72e7c4 100644 --- a/generated_pages/tactics/TA18.md +++ b/generated_pages/tactics/TA18.md @@ -13,11 +13,11 @@ | Techniques | | ---------- | -| [T0047 Censor social media as a political force](../generated_pages/techniques/T0047.md) | -| [T0048 Harass](../generated_pages/techniques/T0048.md) | -| [T0123 Control Information Environment through Offensive Cyberspace Operations](../generated_pages/techniques/T0123.md) | -| [T0124 Suppress Opposition](../generated_pages/techniques/T0124.md) | -| [T0125 Platform Filtering](../generated_pages/techniques/T0125.md) | +| [T0047 Censor social media as a political force](techniques/T0047.md) | +| [T0048 Harass](techniques/T0048.md) | +| [T0123 Control Information Environment through Offensive Cyberspace Operations](techniques/T0123.md) | +| [T0124 Suppress Opposition](techniques/T0124.md) | +| [T0125 Platform Filtering](techniques/T0125.md) | diff --git a/generated_pages/tactics_index.md b/generated_pages/tactics_index.md index b0ecab7..46d8ebe 100644 --- a/generated_pages/tactics_index.md +++ b/generated_pages/tactics_index.md @@ -32,7 +32,7 @@ TA06 Develop Content -TBD +Create or acquire text, images, and other content P02 @@ -93,7 +93,7 @@ Establishing information assets allows an influence operation to promote messagi TA16 Establish Legitimacy -TBD +Establish assets that create trust P02 diff --git a/generated_pages/techniques_index.md b/generated_pages/techniques_index.md index 3741a92..bd7e894 100644 --- a/generated_pages/techniques_index.md +++ b/generated_pages/techniques_index.md @@ -8,222 +8,6 @@ tactic_id -T0002 -Facilitate State Propaganda -Organize citizens around pro-state messaging. Coordinate paid or volunteer groups to push state propaganda. -TA02 - - -T0003 -Leverage Existing Narratives -Use or adapt existing narrative themes, where narratives are the baseline stories of a target audience. Narratives form the bedrock of our worldviews. New information is understood through a process firmly grounded in this bedrock. If new information is not consitent with the prevailing narratives of an audience, it will be ignored. Effective campaigns will frame their misinformation in the context of these narratives. Highly effective campaigns will make extensive use of audience-appropriate archetypes and meta-narratives throughout their content creation and amplifiction practices. -TA14 - - -T0004 -Develop Competing Narratives -Advance competing narratives connected to same issue ie: on one hand deny incident while at same time expresses dismiss. Suppressing or discouraging narratives already spreading requires an alternative. The most simple set of narrative techniques in response would be the construction and promotion of contradictory alternatives centered on denial, deflection, dismissal, counter-charges, excessive standards of proof, bias in prohibition or enforcement, and so on. These competing narratives allow loyalists cover, but are less compelling to opponents and fence-sitters than campaigns built around existing narratives or highly explanatory master narratives. Competing narratives, as such, are especially useful in the "firehose of misinformation" approach. -TA14 - - -T0007 -Create Inauthentic Social Media Pages and Groups -Create key social engineering assets needed to amplify content, manipulate algorithms, fool public and/or specific incident/campaign targets. Computational propaganda depends substantially on false perceptions of credibility and acceptance. By creating fake users and groups with a variety of interests and commitments, attackers can ensure that their messages both come from trusted sources and appear more widely adopted than they actually are. -TA15 - - -T0009 -Create fake experts -Stories planted or promoted in computational propaganda operations often make use of experts fabricated from whole cloth, sometimes specifically for the story itself. -TA16 - - -T0010 -Cultivate ignorant agents -Cultivate propagandists for a cause, the goals of which are not fully comprehended, and who are used cynically by the leaders of the cause. Independent actors use social media and specialised web sites to strategically reinforce and spread messages compatible with their own. Their networks are infiltrated and used by state media disinformation organisations to amplify the state’s own disinformation strategies against target populations. Many are traffickers in conspiracy theories or hoaxes, unified by a suspicion of Western governments and mainstream media. Their narratives, which appeal to leftists hostile to globalism and military intervention and nationalists against immigration, are frequently infiltrated and shaped by state-controlled trolls and altered news items from agencies such as RT and Sputnik. Also know as "useful idiots" or "unwitting agents". -TA15 - - -T0011 -Compromise legitimate accounts -Hack or take over legimate accounts to distribute misinformation or damaging content. -TA16 - - -T0013 -Create inauthentic websites -Create media assets to support inauthentic organizations (e.g. think tank), people (e.g. experts) and/or serve as sites to distribute malware/launch phishing operations. -TA15 - - -T0014 -Prepare fundraising campaigns -Fundraising campaigns refer to an influence operation’s systematic effort to seek financial support for a charity, cause, or other enterprise using online activities that further promote operation information pathways while raising a profit. Many influence operations have engaged in crowdfunding services on platforms including Tipee, Patreon, and GoFundMe. An operation may use its previously prepared fundraising campaigns (see: Develop Information Pathways) to promote operation messaging while raising money to support its activities. -TA15 - - -T0015 -Create hashtags and search artifacts -Create one or more hashtags and/or hashtag groups. Many incident-based campaigns will create hashtags to promote their fabricated event. Creating a hashtag for an incident can have two important effects: 1. Create a perception of reality around an event. Certainly only "real" events would be discussed in a hashtag. After all, the event has a name!, and 2. Publicize the story more widely through trending lists and search behavior. Asset needed to direct/control/manage "conversation" connected to launching new incident/campaign with new hashtag for applicable social media sites). -TA06 - - -T0016 -Create Clickbait -Create attention grabbing headlines (outrage, doubt, humor) required to drive traffic & engagement. This is a key asset. -TA05 - - -T0017 -Conduct fundraising -Fundraising campaigns refer to an influence operation’s systematic effort to seek financial support for a charity, cause, or other enterprise using online activities that further promote operation information pathways while raising a profit. Many influence operations have engaged in crowdfunding services166 on platforms including Tipee, Patreon, and GoFundMe. An operation may use its previously prepared fundraising campaigns to promote operation messaging while raising money to support its activities. -TA10 - - -T0018 -Purchase Targeted Advertisements -Create or fund advertisements targeted at specific populations -TA05 - - -T0019 -Generate information pollution -Flood social channels; drive traffic/engagement to all assets; create aura/sense/perception of pervasiveness/consensus (for or against or both simultaneously) of an issue or topic. "Nothing is true, but everything is possible." Akin to astroturfing campaign. -TA06 - - -T0020 -Trial content -Iteratively test incident performance (messages, content etc), e.g. A/B test headline/content enagagement metrics; website and/or funding campaign conversion rates -TA08 - - -T0022 -Leverage Conspiracy Theory Narratives -"Conspiracy narratives" appeal to the human desire for explanatory order, by invoking the participation of poweful (often sinister) actors in pursuit of their own political goals. These narratives are especially appealing when an audience is low-information, marginalized or otherwise inclined to reject the prevailing explanation. Conspiracy narratives are an important component of the "firehose of falsehoods" model. -TA14 - - -T0023 -Distort facts -Change, twist, or exaggerate existing facts to construct a narrative that differs from reality. Examples: images and ideas can be distorted by being placed in an improper content -TA06 - - -T0029 -Online polls -Create fake online polls, or manipulate existing online polls. Data gathering tactic to target those who engage, and potentially their networks of friends/followers as well -TA07 - - -T0039 -Bait legitimate influencers -Credibility in a social media environment is often a function of the size of a user's network. "Influencers" are so-called because of their reach, typically understood as: 1) the size of their network (i.e. the number of followers, perhaps weighted by their own influence); and 2) The rate at which their comments are re-circulated (these two metrics are related). Add traditional media players at all levels of credibility and professionalism to this, and the number of potential influencial carriers available for unwitting amplification becomes substantial. By targeting high-influence people and organizations in all types of media with narratives and content engineered to appeal their emotional or ideological drivers, influence campaigns are able to add perceived credibility to their messaging via saturation and adoption by trusted agents such as celebrities, journalists and local leaders. -TA08 - - -T0040 -Demand insurmountable proof -Campaigns often leverage tactical and informational asymmetries on the threat surface, as seen in the Distort and Deny strategies, and the "firehose of misinformation". Specifically, conspiracy theorists can be repeatedly wrong, but advocates of the truth need to be perfect. By constantly escalating demands for proof, propagandists can effectively leverage this asymmetry while also priming its future use, often with an even greater asymmetric advantage. The conspiracist is offered freer rein for a broader range of "questions" while the truth teller is burdened with higher and higher standards of proof. -TA14 - - -T0042 -Seed Kernel of truth -Wrap lies or altered context/facts around truths. Influence campaigns pursue a variety of objectives with respect to target audiences, prominent among them: 1. undermine a narrative commonly referenced in the target audience; or 2. promote a narrative less common in the target audience, but preferred by the attacker. In both cases, the attacker is presented with a heavy lift. They must change the relative importance of various narratives in the interpretation of events, despite contrary tendencies. When messaging makes use of factual reporting to promote these adjustments in the narrative space, they are less likely to be dismissed out of hand; when messaging can juxtapose a (factual) truth about current affairs with the (abstract) truth explicated in these narratives, propagandists can undermine or promote them selectively. Context matters. -TA08 - - -T0043 -Chat apps -Direct messaging via chat app is an increasing method of delivery. These messages are often automated and new delivery and storage methods make them anonymous, viral, and ephemeral. This is a difficult space to monitor, but also a difficult space to build acclaim or notoriety. -TA07 - - -T0044 -Seed distortions -Try a wide variety of messages in the early hours surrounding an incident or event, to give a misleading account or impression. -TA08 - - -T0045 -Use fake experts -Use the fake experts that were set up during Establish Legitimacy. Pseudo-experts are disposable assets that often appear once and then disappear. Give "credility" to misinformation. Take advantage of credential bias -TA08 - - -T0046 -Use Search Engine Optimization -Manipulate content engagement metrics (ie: Reddit & Twitter) to influence/impact news search results (e.g. Google), also elevates RT & Sputnik headline into Google news alert emails. aka "Black-hat SEO" -TA08 - - -T0047 -Censor social media as a political force -Use political influence or the power of state to stop critical social media comments. Government requested/driven content take downs (see Google Transperancy reports). -TA18 - - -T0048 -Harass -Threatening or harassing believers of opposing narratives refers to the use of intimidation techniques, including cyberbullying and doxing, to discourage opponents from voicing their dissent. An influence operation may threaten or harass believers of the opposing narratives to deter individuals from posting or proliferating conflicting content. -TA18 - - -T0049 -Flooding the Information Space -Flooding and/or mobbing social media channels feeds and/or hashtag with excessive volume of content to control/shape online conversations and/or drown out opposing points of view. Bots and/or patriotic trolls are effective tools to acheive this effect. -TA17 - - -T0057 -Organize Events -Coordinate and promote real-world events across media platforms, e.g. rallies, protests, gatherings in support of incident narratives. -TA10 - - -T0059 -Play the long game -Play the long game refers to two phenomena: 1. To plan messaging and allow it to grow organically without conducting your own amplification. This is methodical and slow and requires years for the message to take hold 2. To develop a series of seemingly disconnected messaging narratives that eventually combine into a new narrative. -TA11 - - -T0060 -Continue to Amplify -continue narrative or message amplification after the main incident work has finished -TA11 - - -T0061 -Sell Merchandise -Sell mechandise refers to getting the message or narrative into physical space in the offline world while making money -TA10 - - -T0065 -Prepare Physical Broadcast Capabilities -Create or coopt broadcast capabilities (e.g. TV, radio etc). -TA15 - - -T0066 -Degrade Adversary -Plan to degrade an adversary’s image or ability to act. This could include preparation and use of harmful information about the adversary’s actions or reputation. -TA02 - - -T0068 -Respond to Breaking News Event or Active Crisis -Media attention on a story or event is heightened during a breaking news event, where unclear facts and incomplete information increase speculation, rumors, and conspiracy theories, which are all vulnerable to manipulation. -TA14 - - -T0072 -Segment Audiences -Create audience segmentations by features of interest to the influence campaign, including political affiliation, geographic location, income, demographics, and psychographics. -TA13 - - T0073 Determine Target Audiences tbd @@ -236,36 +20,6 @@ TA01 -T0075 -Dismiss -Push back against criticism by dismissing your critics. This might be arguing that the critics use a different standard for you than with other actors or themselves; or arguing that their criticism is biased. -TA02 - - -T0076 -Distort -Twist the narrative. Take information, or artifacts like images, and change the framing around them. -TA02 - - -T0077 -Distract -Shift attention to a different narrative or actor, for instance by accusing critics of the same activity that they’ve accused you of (e.g. police brutality). -TA02 - - -T0078 -Dismay -Threaten the critic or narrator of events. For instance, threaten journalists or news outlets reporting on a story. -TA02 - - -T0079 -Divide -Create conflict between subgroups, to widen divisions in a community -TA02 - - T0080 Map Target Audience Information Environment Mapping the target audience information environment analyzes the information space itself, including social media analytics, web traffic, and media surveys. Mapping the information environment may help the influence operation determine the most realistic and popular information channels to reach its target audience. @@ -560,24 +314,6 @@ An influence operation may use a wide variety of cyber techniques to impersonate TA10 -T0128 -Conceal People -Conceal the identity or provenance of the account and people assets. -TA11 - - -T0129 -Conceal Operational Activity -tbd -TA11 - - -T0130 -Conceal Infrastructure -tbd -TA11 - - T0131 Exploit TOS/Content Moderation tbd @@ -601,4 +337,268 @@ An influence operation may use a wide variety of cyber techniques to impersonate tbd TA12 + +T0002 +Facilitate State Propaganda +Organize citizens around pro-state messaging. Coordinate paid or volunteer groups to push state propaganda. +TA02 + + +T0003 +Leverage Existing Narratives +Use or adapt existing narrative themes, where narratives are the baseline stories of a target audience. Narratives form the bedrock of our worldviews. New information is understood through a process firmly grounded in this bedrock. If new information is not consitent with the prevailing narratives of an audience, it will be ignored. Effective campaigns will frame their misinformation in the context of these narratives. Highly effective campaigns will make extensive use of audience-appropriate archetypes and meta-narratives throughout their content creation and amplifiction practices. +TA14 + + +T0004 +Develop Competing Narratives +Advance competing narratives connected to same issue ie: on one hand deny incident while at same time expresses dismiss. Suppressing or discouraging narratives already spreading requires an alternative. The most simple set of narrative techniques in response would be the construction and promotion of contradictory alternatives centered on denial, deflection, dismissal, counter-charges, excessive standards of proof, bias in prohibition or enforcement, and so on. These competing narratives allow loyalists cover, but are less compelling to opponents and fence-sitters than campaigns built around existing narratives or highly explanatory master narratives. Competing narratives, as such, are especially useful in the "firehose of misinformation" approach. +TA14 + + +T0007 +Create Inauthentic Social Media Pages and Groups +Create key social engineering assets needed to amplify content, manipulate algorithms, fool public and/or specific incident/campaign targets. Computational propaganda depends substantially on false perceptions of credibility and acceptance. By creating fake users and groups with a variety of interests and commitments, attackers can ensure that their messages both come from trusted sources and appear more widely adopted than they actually are. +TA15 + + +T0009 +Create fake experts +Stories planted or promoted in computational propaganda operations often make use of experts fabricated from whole cloth, sometimes specifically for the story itself. +TA16 + + +T0010 +Cultivate ignorant agents +Cultivate propagandists for a cause, the goals of which are not fully comprehended, and who are used cynically by the leaders of the cause. Independent actors use social media and specialised web sites to strategically reinforce and spread messages compatible with their own. Their networks are infiltrated and used by state media disinformation organisations to amplify the state’s own disinformation strategies against target populations. Many are traffickers in conspiracy theories or hoaxes, unified by a suspicion of Western governments and mainstream media. Their narratives, which appeal to leftists hostile to globalism and military intervention and nationalists against immigration, are frequently infiltrated and shaped by state-controlled trolls and altered news items from agencies such as RT and Sputnik. Also know as "useful idiots" or "unwitting agents". +TA15 + + +T0011 +Compromise legitimate accounts +Hack or take over legimate accounts to distribute misinformation or damaging content. +TA16 + + +T0013 +Create inauthentic websites +Create media assets to support inauthentic organizations (e.g. think tank), people (e.g. experts) and/or serve as sites to distribute malware/launch phishing operations. +TA15 + + +T0014 +Prepare fundraising campaigns +Fundraising campaigns refer to an influence operation’s systematic effort to seek financial support for a charity, cause, or other enterprise using online activities that further promote operation information pathways while raising a profit. Many influence operations have engaged in crowdfunding services on platforms including Tipee, Patreon, and GoFundMe. An operation may use its previously prepared fundraising campaigns (see: Develop Information Pathways) to promote operation messaging while raising money to support its activities. +TA15 + + +T0015 +Create hashtags and search artifacts +Create one or more hashtags and/or hashtag groups. Many incident-based campaigns will create hashtags to promote their fabricated event. Creating a hashtag for an incident can have two important effects: 1. Create a perception of reality around an event. Certainly only "real" events would be discussed in a hashtag. After all, the event has a name!, and 2. Publicize the story more widely through trending lists and search behavior. Asset needed to direct/control/manage "conversation" connected to launching new incident/campaign with new hashtag for applicable social media sites). +TA06 + + +T0016 +Create Clickbait +Create attention grabbing headlines (outrage, doubt, humor) required to drive traffic & engagement. This is a key asset. +TA05 + + +T0017 +Conduct fundraising +Fundraising campaigns refer to an influence operation’s systematic effort to seek financial support for a charity, cause, or other enterprise using online activities that further promote operation information pathways while raising a profit. Many influence operations have engaged in crowdfunding services166 on platforms including Tipee, Patreon, and GoFundMe. An operation may use its previously prepared fundraising campaigns to promote operation messaging while raising money to support its activities. +TA10 + + +T0018 +Purchase Targeted Advertisements +Create or fund advertisements targeted at specific populations +TA05 + + +T0019 +Generate information pollution +Flood social channels; drive traffic/engagement to all assets; create aura/sense/perception of pervasiveness/consensus (for or against or both simultaneously) of an issue or topic. "Nothing is true, but everything is possible." Akin to astroturfing campaign. +TA06 + + +T0020 +Trial content +Iteratively test incident performance (messages, content etc), e.g. A/B test headline/content enagagement metrics; website and/or funding campaign conversion rates +TA08 + + +T0022 +Leverage Conspiracy Theory Narratives +"Conspiracy narratives" appeal to the human desire for explanatory order, by invoking the participation of poweful (often sinister) actors in pursuit of their own political goals. These narratives are especially appealing when an audience is low-information, marginalized or otherwise inclined to reject the prevailing explanation. Conspiracy narratives are an important component of the "firehose of falsehoods" model. +TA14 + + +T0023 +Distort facts +Change, twist, or exaggerate existing facts to construct a narrative that differs from reality. Examples: images and ideas can be distorted by being placed in an improper content +TA06 + + +T0029 +Online polls +Create fake online polls, or manipulate existing online polls. Data gathering tactic to target those who engage, and potentially their networks of friends/followers as well +TA07 + + +T0039 +Bait legitimate influencers +Credibility in a social media environment is often a function of the size of a user's network. "Influencers" are so-called because of their reach, typically understood as: 1) the size of their network (i.e. the number of followers, perhaps weighted by their own influence); and 2) The rate at which their comments are re-circulated (these two metrics are related). Add traditional media players at all levels of credibility and professionalism to this, and the number of potential influencial carriers available for unwitting amplification becomes substantial. By targeting high-influence people and organizations in all types of media with narratives and content engineered to appeal their emotional or ideological drivers, influence campaigns are able to add perceived credibility to their messaging via saturation and adoption by trusted agents such as celebrities, journalists and local leaders. +TA08 + + +T0040 +Demand insurmountable proof +Campaigns often leverage tactical and informational asymmetries on the threat surface, as seen in the Distort and Deny strategies, and the "firehose of misinformation". Specifically, conspiracy theorists can be repeatedly wrong, but advocates of the truth need to be perfect. By constantly escalating demands for proof, propagandists can effectively leverage this asymmetry while also priming its future use, often with an even greater asymmetric advantage. The conspiracist is offered freer rein for a broader range of "questions" while the truth teller is burdened with higher and higher standards of proof. +TA14 + + +T0042 +Seed Kernel of truth +Wrap lies or altered context/facts around truths. Influence campaigns pursue a variety of objectives with respect to target audiences, prominent among them: 1. undermine a narrative commonly referenced in the target audience; or 2. promote a narrative less common in the target audience, but preferred by the attacker. In both cases, the attacker is presented with a heavy lift. They must change the relative importance of various narratives in the interpretation of events, despite contrary tendencies. When messaging makes use of factual reporting to promote these adjustments in the narrative space, they are less likely to be dismissed out of hand; when messaging can juxtapose a (factual) truth about current affairs with the (abstract) truth explicated in these narratives, propagandists can undermine or promote them selectively. Context matters. +TA08 + + +T0043 +Chat apps +Direct messaging via chat app is an increasing method of delivery. These messages are often automated and new delivery and storage methods make them anonymous, viral, and ephemeral. This is a difficult space to monitor, but also a difficult space to build acclaim or notoriety. +TA07 + + +T0044 +Seed distortions +Try a wide variety of messages in the early hours surrounding an incident or event, to give a misleading account or impression. +TA08 + + +T0045 +Use fake experts +Use the fake experts that were set up during Establish Legitimacy. Pseudo-experts are disposable assets that often appear once and then disappear. Give "credility" to misinformation. Take advantage of credential bias +TA08 + + +T0046 +Use Search Engine Optimization +Manipulate content engagement metrics (ie: Reddit & Twitter) to influence/impact news search results (e.g. Google), also elevates RT & Sputnik headline into Google news alert emails. aka "Black-hat SEO" +TA08 + + +T0047 +Censor social media as a political force +Use political influence or the power of state to stop critical social media comments. Government requested/driven content take downs (see Google Transperancy reports). +TA18 + + +T0048 +Harass +Threatening or harassing believers of opposing narratives refers to the use of intimidation techniques, including cyberbullying and doxing, to discourage opponents from voicing their dissent. An influence operation may threaten or harass believers of the opposing narratives to deter individuals from posting or proliferating conflicting content. +TA18 + + +T0049 +Flooding the Information Space +Flooding and/or mobbing social media channels feeds and/or hashtag with excessive volume of content to control/shape online conversations and/or drown out opposing points of view. Bots and/or patriotic trolls are effective tools to acheive this effect. +TA17 + + +T0057 +Organize Events +Coordinate and promote real-world events across media platforms, e.g. rallies, protests, gatherings in support of incident narratives. +TA10 + + +T0059 +Play the long game +Play the long game refers to two phenomena: 1. To plan messaging and allow it to grow organically without conducting your own amplification. This is methodical and slow and requires years for the message to take hold 2. To develop a series of seemingly disconnected messaging narratives that eventually combine into a new narrative. +TA11 + + +T0060 +Continue to Amplify +continue narrative or message amplification after the main incident work has finished +TA11 + + +T0061 +Sell Merchandise +Sell mechandise refers to getting the message or narrative into physical space in the offline world while making money +TA10 + + +T0065 +Prepare Physical Broadcast Capabilities +Create or coopt broadcast capabilities (e.g. TV, radio etc). +TA15 + + +T0066 +Degrade Adversary +Plan to degrade an adversary’s image or ability to act. This could include preparation and use of harmful information about the adversary’s actions or reputation. +TA02 + + +T0068 +Respond to Breaking News Event or Active Crisis +Media attention on a story or event is heightened during a breaking news event, where unclear facts and incomplete information increase speculation, rumors, and conspiracy theories, which are all vulnerable to manipulation. +TA14 + + +T0072 +Segment Audiences +Create audience segmentations by features of interest to the influence campaign, including political affiliation, geographic location, income, demographics, and psychographics. +TA13 + + +T0075 +Dismiss +Push back against criticism by dismissing your critics. This might be arguing that the critics use a different standard for you than with other actors or themselves; or arguing that their criticism is biased. +TA02 + + +T0076 +Distort +Twist the narrative. Take information, or artifacts like images, and change the framing around them. +TA02 + + +T0077 +Distract +Shift attention to a different narrative or actor, for instance by accusing critics of the same activity that they’ve accused you of (e.g. police brutality). +TA02 + + +T0078 +Dismay +Threaten the critic or narrator of events. For instance, threaten journalists or news outlets reporting on a story. +TA02 + + +T0079 +Divide +Create conflict between subgroups, to widen divisions in a community +TA02 + + +T0128 +Conceal People +Conceal the identity or provenance of the account and people assets. +TA11 + + +T0129 +Conceal Operational Activity +tbd +TA11 + + +T0130 +Conceal Infrastructure +tbd +TA11 +