diff --git a/CODE/DISARM-STIX2/__pycache__/main.cpython-38.pyc b/CODE/DISARM-STIX2/__pycache__/main.cpython-38.pyc
index 59c4417..e815d0f 100644
Binary files a/CODE/DISARM-STIX2/__pycache__/main.cpython-38.pyc and b/CODE/DISARM-STIX2/__pycache__/main.cpython-38.pyc differ
diff --git a/CODE/DISARM-STIX2/helpers/__pycache__/file.cpython-38.pyc b/CODE/DISARM-STIX2/helpers/__pycache__/file.cpython-38.pyc
index 67d31c4..cc66595 100644
Binary files a/CODE/DISARM-STIX2/helpers/__pycache__/file.cpython-38.pyc and b/CODE/DISARM-STIX2/helpers/__pycache__/file.cpython-38.pyc differ
diff --git a/CODE/DISARM-STIX2/helpers/__pycache__/xlsx.cpython-38.pyc b/CODE/DISARM-STIX2/helpers/__pycache__/xlsx.cpython-38.pyc
index e4b3c44..d3f4c53 100644
Binary files a/CODE/DISARM-STIX2/helpers/__pycache__/xlsx.cpython-38.pyc and b/CODE/DISARM-STIX2/helpers/__pycache__/xlsx.cpython-38.pyc differ
diff --git a/CODE/DISARM-STIX2/objects/__pycache__/bundle.cpython-38.pyc b/CODE/DISARM-STIX2/objects/__pycache__/bundle.cpython-38.pyc
index da9562a..8e669ef 100644
Binary files a/CODE/DISARM-STIX2/objects/__pycache__/bundle.cpython-38.pyc and b/CODE/DISARM-STIX2/objects/__pycache__/bundle.cpython-38.pyc differ
diff --git a/CODE/DISARM-STIX2/objects/__pycache__/identity.cpython-38.pyc b/CODE/DISARM-STIX2/objects/__pycache__/identity.cpython-38.pyc
index d1a7551..4d550af 100644
Binary files a/CODE/DISARM-STIX2/objects/__pycache__/identity.cpython-38.pyc and b/CODE/DISARM-STIX2/objects/__pycache__/identity.cpython-38.pyc differ
diff --git a/CODE/DISARM-STIX2/objects/__pycache__/marking_definition.cpython-38.pyc b/CODE/DISARM-STIX2/objects/__pycache__/marking_definition.cpython-38.pyc
index d306ec0..6f9f86a 100644
Binary files a/CODE/DISARM-STIX2/objects/__pycache__/marking_definition.cpython-38.pyc and b/CODE/DISARM-STIX2/objects/__pycache__/marking_definition.cpython-38.pyc differ
diff --git a/CODE/DISARM-STIX2/objects/__pycache__/matrix.cpython-38.pyc b/CODE/DISARM-STIX2/objects/__pycache__/matrix.cpython-38.pyc
index b13f775..4b9db55 100644
Binary files a/CODE/DISARM-STIX2/objects/__pycache__/matrix.cpython-38.pyc and b/CODE/DISARM-STIX2/objects/__pycache__/matrix.cpython-38.pyc differ
diff --git a/CODE/DISARM-STIX2/objects/__pycache__/relationship.cpython-38.pyc b/CODE/DISARM-STIX2/objects/__pycache__/relationship.cpython-38.pyc
new file mode 100644
index 0000000..780d1f9
Binary files /dev/null and b/CODE/DISARM-STIX2/objects/__pycache__/relationship.cpython-38.pyc differ
diff --git a/CODE/DISARM-STIX2/objects/__pycache__/tactic.cpython-38.pyc b/CODE/DISARM-STIX2/objects/__pycache__/tactic.cpython-38.pyc
index 5719c9b..67b1fc5 100644
Binary files a/CODE/DISARM-STIX2/objects/__pycache__/tactic.cpython-38.pyc and b/CODE/DISARM-STIX2/objects/__pycache__/tactic.cpython-38.pyc differ
diff --git a/CODE/DISARM-STIX2/objects/__pycache__/technique.cpython-38.pyc b/CODE/DISARM-STIX2/objects/__pycache__/technique.cpython-38.pyc
index 17e82fd..f02be8b 100644
Binary files a/CODE/DISARM-STIX2/objects/__pycache__/technique.cpython-38.pyc and b/CODE/DISARM-STIX2/objects/__pycache__/technique.cpython-38.pyc differ
diff --git a/CODE/DISARM-STIX2/objects/technique.py b/CODE/DISARM-STIX2/objects/technique.py
index 008327e..c4f2125 100644
--- a/CODE/DISARM-STIX2/objects/technique.py
+++ b/CODE/DISARM-STIX2/objects/technique.py
@@ -43,7 +43,7 @@ def make_disarm_techniques(data):
technique = AttackPattern(
name=f"{t[1]}",
- description=f"{t[3]}",
+ description=f"{t[4]}",
external_references=external_references,
object_marking_refs=objects.marking_definition.make_disarm_marking_definition(),
created_by_ref=objects.identity.make_disarm_identity(),
diff --git a/CODE/__pycache__/generate_DISARM_pages.cpython-38.pyc b/CODE/__pycache__/generate_DISARM_pages.cpython-38.pyc
index ac9216a..9f62f15 100644
Binary files a/CODE/__pycache__/generate_DISARM_pages.cpython-38.pyc and b/CODE/__pycache__/generate_DISARM_pages.cpython-38.pyc differ
diff --git a/CODE/generate_DISARM_pages.ipynb b/CODE/generate_DISARM_pages.ipynb
index 1e44d3d..8300374 100644
--- a/CODE/generate_DISARM_pages.ipynb
+++ b/CODE/generate_DISARM_pages.ipynb
@@ -18,7 +18,7 @@
},
{
"cell_type": "code",
- "execution_count": 3,
+ "execution_count": 2,
"metadata": {
"scrolled": true
},
@@ -35,182 +35,8 @@
"updated ../generated_pages/phases_index.md\n",
"Temp: objecttype tactic\n",
"updated ../generated_pages/tactics_index.md\n",
- "Updating ../generated_pages/tactics/TA02.md\n",
- "Updating ../generated_pages/tactics/TA05.md\n",
- "Updating ../generated_pages/tactics/TA06.md\n",
- "Updating ../generated_pages/tactics/TA07.md\n",
- "Updating ../generated_pages/tactics/TA09.md\n",
- "Updating ../generated_pages/tactics/TA10.md\n",
- "Updating ../generated_pages/tactics/TA11.md\n",
- "Updating ../generated_pages/tactics/TA12.md\n",
- "Updating ../generated_pages/tactics/TA13.md\n",
- "Updating ../generated_pages/tactics/TA14.md\n",
- "Updating ../generated_pages/tactics/TA15.md\n",
- "Updating ../generated_pages/tactics/TA16.md\n",
- "Updating ../generated_pages/tactics/TA17.md\n",
- "Updating ../generated_pages/tactics/TA18.md\n",
"Temp: objecttype technique\n",
"updated ../generated_pages/techniques_index.md\n",
- "Updating ../generated_pages/techniques/T0009.001.md\n",
- "Updating ../generated_pages/techniques/T0014.001.md\n",
- "Updating ../generated_pages/techniques/T0014.002.md\n",
- "Updating ../generated_pages/techniques/T0017.001.md\n",
- "Updating ../generated_pages/techniques/T0019.001.md\n",
- "Updating ../generated_pages/techniques/T0019.002.md\n",
- "Updating ../generated_pages/techniques/T0022.001.md\n",
- "Updating ../generated_pages/techniques/T0022.002.md\n",
- "Updating ../generated_pages/techniques/T0023.001.md\n",
- "Updating ../generated_pages/techniques/T0023.002.md\n",
- "Updating ../generated_pages/techniques/T0043.001.md\n",
- "Updating ../generated_pages/techniques/T0043.002.md\n",
- "Updating ../generated_pages/techniques/T0048.001.md\n",
- "Updating ../generated_pages/techniques/T0048.002.md\n",
- "Updating ../generated_pages/techniques/T0048.003.md\n",
- "Updating ../generated_pages/techniques/T0048.004.md\n",
- "Updating ../generated_pages/techniques/T0049.001.md\n",
- "Updating ../generated_pages/techniques/T0049.002.md\n",
- "Updating ../generated_pages/techniques/T0049.003.md\n",
- "Updating ../generated_pages/techniques/T0049.004.md\n",
- "Updating ../generated_pages/techniques/T0049.005.md\n",
- "Updating ../generated_pages/techniques/T0049.006.md\n",
- "Updating ../generated_pages/techniques/T0049.007.md\n",
- "Updating ../generated_pages/techniques/T0057.001.md\n",
- "Updating ../generated_pages/techniques/T0057.002.md\n",
- "Updating ../generated_pages/techniques/T0061.001.md\n",
- "Updating ../generated_pages/techniques/T0072.001.md\n",
- "Updating ../generated_pages/techniques/T0072.002.md\n",
- "Updating ../generated_pages/techniques/T0072.003.md\n",
- "Updating ../generated_pages/techniques/T0072.004.md\n",
- "Updating ../generated_pages/techniques/T0072.005.md\n",
- "Updating ../generated_pages/techniques/T0075.001.md\n",
- "Updating ../generated_pages/techniques/T0080.001.md\n",
- "Updating ../generated_pages/techniques/T0080.002.md\n",
- "Updating ../generated_pages/techniques/T0080.003.md\n",
- "Updating ../generated_pages/techniques/T0080.004.md\n",
- "Updating ../generated_pages/techniques/T0080.005.md\n",
- "Updating ../generated_pages/techniques/T0081.001.md\n",
- "Updating ../generated_pages/techniques/T0081.002.md\n",
- "Updating ../generated_pages/techniques/T0081.003.md\n",
- "Updating ../generated_pages/techniques/T0081.004.md\n",
- "Updating ../generated_pages/techniques/T0081.005.md\n",
- "Updating ../generated_pages/techniques/T0081.006.md\n",
- "Updating ../generated_pages/techniques/T0081.007.md\n",
- "Updating ../generated_pages/techniques/T0081.008.md\n",
- "Updating ../generated_pages/techniques/T0084.001.md\n",
- "Updating ../generated_pages/techniques/T0084.002.md\n",
- "Updating ../generated_pages/techniques/T0084.003.md\n",
- "Updating ../generated_pages/techniques/T0084.004.md\n",
- "Updating ../generated_pages/techniques/T0085.001.md\n",
- "Updating ../generated_pages/techniques/T0085.002.md\n",
- "Updating ../generated_pages/techniques/T0085.003.md\n",
- "Updating ../generated_pages/techniques/T0086.001.md\n",
- "Updating ../generated_pages/techniques/T0086.002.md\n",
- "Updating ../generated_pages/techniques/T0086.003.md\n",
- "Updating ../generated_pages/techniques/T0086.004.md\n",
- "Updating ../generated_pages/techniques/T0087.001.md\n",
- "Updating ../generated_pages/techniques/T0087.002.md\n",
- "Updating ../generated_pages/techniques/T0088.001.md\n",
- "Updating ../generated_pages/techniques/T0088.002.md\n",
- "Updating ../generated_pages/techniques/T0089.001.md\n",
- "Updating ../generated_pages/techniques/T0089.002.md\n",
- "Updating ../generated_pages/techniques/T0089.003.md\n",
- "Updating ../generated_pages/techniques/T0090.001.md\n",
- "Updating ../generated_pages/techniques/T0090.002.md\n",
- "Updating ../generated_pages/techniques/T0090.003.md\n",
- "Updating ../generated_pages/techniques/T0090.004.md\n",
- "Updating ../generated_pages/techniques/T0091.001.md\n",
- "Updating ../generated_pages/techniques/T0091.002.md\n",
- "Updating ../generated_pages/techniques/T0091.003.md\n",
- "Updating ../generated_pages/techniques/T0092.001.md\n",
- "Updating ../generated_pages/techniques/T0092.002.md\n",
- "Updating ../generated_pages/techniques/T0092.003.md\n",
- "Updating ../generated_pages/techniques/T0093.001.md\n",
- "Updating ../generated_pages/techniques/T0093.002.md\n",
- "Updating ../generated_pages/techniques/T0094.001.md\n",
- "Updating ../generated_pages/techniques/T0094.002.md\n",
- "Updating ../generated_pages/techniques/T0096.001.md\n",
- "Updating ../generated_pages/techniques/T0096.002.md\n",
- "Updating ../generated_pages/techniques/T0097.001.md\n",
- "Updating ../generated_pages/techniques/T0098.001.md\n",
- "Updating ../generated_pages/techniques/T0098.002.md\n",
- "Updating ../generated_pages/techniques/T0099.001.md\n",
- "Updating ../generated_pages/techniques/T0099.002.md\n",
- "Updating ../generated_pages/techniques/T0100.001.md\n",
- "Updating ../generated_pages/techniques/T0100.002.md\n",
- "Updating ../generated_pages/techniques/T0100.003.md\n",
- "Updating ../generated_pages/techniques/T0102.001.md\n",
- "Updating ../generated_pages/techniques/T0102.002.md\n",
- "Updating ../generated_pages/techniques/T0102.003.md\n",
- "Updating ../generated_pages/techniques/T0103.001.md\n",
- "Updating ../generated_pages/techniques/T0103.002.md\n",
- "Updating ../generated_pages/techniques/T0104.001.md\n",
- "Updating ../generated_pages/techniques/T0104.002.md\n",
- "Updating ../generated_pages/techniques/T0104.003.md\n",
- "Updating ../generated_pages/techniques/T0104.004.md\n",
- "Updating ../generated_pages/techniques/T0104.005.md\n",
- "Updating ../generated_pages/techniques/T0104.006.md\n",
- "Updating ../generated_pages/techniques/T0105.001.md\n",
- "Updating ../generated_pages/techniques/T0105.002.md\n",
- "Updating ../generated_pages/techniques/T0105.003.md\n",
- "Updating ../generated_pages/techniques/T0106.001.md\n",
- "Updating ../generated_pages/techniques/T0111.001.md\n",
- "Updating ../generated_pages/techniques/T0111.002.md\n",
- "Updating ../generated_pages/techniques/T0111.003.md\n",
- "Updating ../generated_pages/techniques/T0114.001.md\n",
- "Updating ../generated_pages/techniques/T0114.002.md\n",
- "Updating ../generated_pages/techniques/T0115.001.md\n",
- "Updating ../generated_pages/techniques/T0115.002.md\n",
- "Updating ../generated_pages/techniques/T0115.003.md\n",
- "Updating ../generated_pages/techniques/T0116.001.md\n",
- "Updating ../generated_pages/techniques/T0119.001.md\n",
- "Updating ../generated_pages/techniques/T0119.002.md\n",
- "Updating ../generated_pages/techniques/T0119.003.md\n",
- "Updating ../generated_pages/techniques/T0120.001.md\n",
- "Updating ../generated_pages/techniques/T0120.002.md\n",
- "Updating ../generated_pages/techniques/T0121.001.md\n",
- "Updating ../generated_pages/techniques/T0123.001.md\n",
- "Updating ../generated_pages/techniques/T0123.002.md\n",
- "Updating ../generated_pages/techniques/T0123.003.md\n",
- "Updating ../generated_pages/techniques/T0123.004.md\n",
- "Updating ../generated_pages/techniques/T0124.001.md\n",
- "Updating ../generated_pages/techniques/T0124.002.md\n",
- "Updating ../generated_pages/techniques/T0124.003.md\n",
- "Updating ../generated_pages/techniques/T0126.001.md\n",
- "Updating ../generated_pages/techniques/T0126.002.md\n",
- "Updating ../generated_pages/techniques/T0127.001.md\n",
- "Updating ../generated_pages/techniques/T0127.002.md\n",
- "Updating ../generated_pages/techniques/T0128.001.md\n",
- "Updating ../generated_pages/techniques/T0128.002.md\n",
- "Updating ../generated_pages/techniques/T0128.003.md\n",
- "Updating ../generated_pages/techniques/T0128.004.md\n",
- "Updating ../generated_pages/techniques/T0128.005.md\n",
- "Updating ../generated_pages/techniques/T0129.001.md\n",
- "Updating ../generated_pages/techniques/T0129.002.md\n",
- "Updating ../generated_pages/techniques/T0129.003.md\n",
- "Updating ../generated_pages/techniques/T0129.004.md\n",
- "Updating ../generated_pages/techniques/T0129.005.md\n",
- "Updating ../generated_pages/techniques/T0129.006.md\n",
- "Updating ../generated_pages/techniques/T0129.007.md\n",
- "Updating ../generated_pages/techniques/T0129.008.md\n",
- "Updating ../generated_pages/techniques/T0129.009.md\n",
- "Updating ../generated_pages/techniques/T0129.010.md\n",
- "Updating ../generated_pages/techniques/T0130.001.md\n",
- "Updating ../generated_pages/techniques/T0130.002.md\n",
- "Updating ../generated_pages/techniques/T0130.003.md\n",
- "Updating ../generated_pages/techniques/T0130.004.md\n",
- "Updating ../generated_pages/techniques/T0130.005.md\n",
- "Updating ../generated_pages/techniques/T0131.001.md\n",
- "Updating ../generated_pages/techniques/T0131.002.md\n",
- "Updating ../generated_pages/techniques/T0132.001.md\n",
- "Updating ../generated_pages/techniques/T0132.002.md\n",
- "Updating ../generated_pages/techniques/T0132.003.md\n",
- "Updating ../generated_pages/techniques/T0133.001.md\n",
- "Updating ../generated_pages/techniques/T0133.002.md\n",
- "Updating ../generated_pages/techniques/T0133.003.md\n",
- "Updating ../generated_pages/techniques/T0133.004.md\n",
- "Updating ../generated_pages/techniques/T0133.005.md\n",
- "Updating ../generated_pages/techniques/T0134.001.md\n",
- "Updating ../generated_pages/techniques/T0134.002.md\n",
"Temp: objecttype task\n",
"updated ../generated_pages/tasks_index.md\n",
"Temp: objecttype incident\n",
@@ -244,7 +70,7 @@
},
{
"cell_type": "code",
- "execution_count": 5,
+ "execution_count": 3,
"metadata": {},
"outputs": [],
"source": [
diff --git a/DISARM_MASTER_DATA/DISARM_FRAMEWORKS_MASTER.xlsx b/DISARM_MASTER_DATA/DISARM_FRAMEWORKS_MASTER.xlsx
index 1cf51fa..bd3be16 100644
Binary files a/DISARM_MASTER_DATA/DISARM_FRAMEWORKS_MASTER.xlsx and b/DISARM_MASTER_DATA/DISARM_FRAMEWORKS_MASTER.xlsx differ
diff --git a/generated_files/DISARM_STIX/DISARM.json b/generated_files/DISARM_STIX/DISARM.json
index 3a26b53..2206878 100644
--- a/generated_files/DISARM_STIX/DISARM.json
+++ b/generated_files/DISARM_STIX/DISARM.json
@@ -1,14 +1,14 @@
{
"type": "bundle",
- "id": "bundle--a7fa6802-b7c8-40a7-b8b3-53188250dfb9",
+ "id": "bundle--631da13a-9ca9-46bc-883b-cdb9ccf9c1b7",
"objects": [
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--c4ac8ab7-ea56-43fe-8f26-83ee065d078e",
- "created_by_ref": "identity--a34190ba-0c2c-4436-b0d3-4c973958f322",
- "created": "2022-07-02T17:28:36.927901Z",
- "modified": "2022-07-02T17:28:36.927901Z",
+ "id": "x-mitre-tactic--5d65f4a0-b48a-4c8b-b2d6-a7bba81d1d36",
+ "created_by_ref": "identity--43ec108f-d3b2-4be4-b099-9cf02f166dba",
+ "created": "2022-07-02T19:59:12.612381Z",
+ "modified": "2022-07-02T19:59:12.612381Z",
"name": "Plan Strategy",
"description": "Define the desired end state, i.e. the set of required conditions that defines achievement of all objectives.",
"external_references": [
@@ -19,17 +19,17 @@
}
],
"object_marking_refs": [
- "marking-definition--fd46b7f0-c2ff-434b-bc22-6970f53e77c1"
+ "marking-definition--121feb80-d4b8-434c-a835-6474613063c3"
],
"x_mitre_shortname": "plan-strategy"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--e34df713-d1f5-4a10-bb0a-0a1ada573b51",
- "created_by_ref": "identity--2c093a89-5462-4e95-88a7-fd2e6b4ca125",
- "created": "2022-07-02T17:28:36.928249Z",
- "modified": "2022-07-02T17:28:36.928249Z",
+ "id": "x-mitre-tactic--b2b13cd3-c0da-4cc1-bbab-a68211de88e1",
+ "created_by_ref": "identity--e658afb5-e1ff-43be-af7f-d27d6d77688c",
+ "created": "2022-07-02T19:59:12.612758Z",
+ "modified": "2022-07-02T19:59:12.612758Z",
"name": "Plan Objectives",
"description": "Set clearly defined, measurable, and achievable objectives. Achieving objectives ties execution of tactical tasks to reaching the desired end state. There are four primary considerations: \n- Each desired effect should link directly to one or more objectives \n- The effect should be measurable \n- The objective statement should not specify the way and means of accomplishment \n- The effect should be distinguishable from the objective it supports as a condition for success, not as another objective or task.",
"external_references": [
@@ -40,17 +40,17 @@
}
],
"object_marking_refs": [
- "marking-definition--51f8acf1-76ca-4181-a36c-8430bf07b08e"
+ "marking-definition--c7eb23eb-f2d8-4d6a-bed1-ef63d022470c"
],
"x_mitre_shortname": "plan-objectives"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--51bb4e10-02fc-471f-9478-0cce0e4cb958",
- "created_by_ref": "identity--0411e9d8-4c88-42e1-aba9-1216bda19f75",
- "created": "2022-07-02T17:28:36.928556Z",
- "modified": "2022-07-02T17:28:36.928556Z",
+ "id": "x-mitre-tactic--3ad9f88d-278c-461e-966a-102ec22a2585",
+ "created_by_ref": "identity--f746a22f-d8bc-4d6c-b240-af9b08c19cc4",
+ "created": "2022-07-02T19:59:12.613099Z",
+ "modified": "2022-07-02T19:59:12.613099Z",
"name": "Microtarget",
"description": "Target very specific populations of people",
"external_references": [
@@ -61,17 +61,17 @@
}
],
"object_marking_refs": [
- "marking-definition--d2cae706-2737-49d7-a72f-6bc6b5c806e0"
+ "marking-definition--dbe17e42-0f4f-496e-adf4-874247fe435f"
],
"x_mitre_shortname": "microtarget"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--3552f239-dd03-4e44-b3a5-d1a5ab04b36a",
- "created_by_ref": "identity--e7884c2b-37db-4860-96ee-3a9e52c48db8",
- "created": "2022-07-02T17:28:36.928857Z",
- "modified": "2022-07-02T17:28:36.928857Z",
+ "id": "x-mitre-tactic--1668c1d4-98fb-4bc1-b801-7e7359f4c59d",
+ "created_by_ref": "identity--f8035490-4a2b-4133-ae0d-85c243b6f69b",
+ "created": "2022-07-02T19:59:12.613439Z",
+ "modified": "2022-07-02T19:59:12.613439Z",
"name": "Develop Content",
"description": "Create or acquire text, images, and other content",
"external_references": [
@@ -82,17 +82,17 @@
}
],
"object_marking_refs": [
- "marking-definition--739cc37a-afac-4dd3-9ac5-39b9b3f7ef84"
+ "marking-definition--efbeb05a-3261-441c-8061-6410f9097d58"
],
"x_mitre_shortname": "develop-content"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--04cbb20f-af5f-4dba-b98b-216fea9d9e85",
- "created_by_ref": "identity--8ff7f3f6-7228-479c-a01f-b41e0f87a842",
- "created": "2022-07-02T17:28:36.929161Z",
- "modified": "2022-07-02T17:28:36.929161Z",
+ "id": "x-mitre-tactic--e61c944e-9445-4715-b6d1-a730f0327c35",
+ "created_by_ref": "identity--90282e61-9f75-42ce-96ce-c329d753a92a",
+ "created": "2022-07-02T19:59:12.613754Z",
+ "modified": "2022-07-02T19:59:12.613754Z",
"name": "Select Channels and Affordances",
"description": "Selecting platforms and affordances assesses which online or offline platforms and their associated affordances maximize an influence operation\u2019s ability to reach its target audience. To select the most appropriate platform(s), an operation may assess the technological affordances including platform algorithms, terms of service, permitted content types, or other attributes that determine platform usability and accessibility. Selecting platforms includes both choosing platforms on which the operation will publish its own content and platforms on which the operation will attempt to restrict adversarial content.",
"external_references": [
@@ -103,17 +103,17 @@
}
],
"object_marking_refs": [
- "marking-definition--0b8856f1-ea61-442a-9711-a86662525910"
+ "marking-definition--1322623d-3c5f-451b-be10-8079472ba75a"
],
"x_mitre_shortname": "select-channels-and-affordances"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--3d3dea08-0512-45af-8c70-c3ee8e20ecd1",
- "created_by_ref": "identity--ed14fc4f-0871-4b46-b5c6-6b00d7eaf010",
- "created": "2022-07-02T17:28:36.92946Z",
- "modified": "2022-07-02T17:28:36.92946Z",
+ "id": "x-mitre-tactic--deec33a7-21f9-4eea-adff-1c4df2d4cace",
+ "created_by_ref": "identity--82661400-5ddb-4daa-ab03-b573f5562771",
+ "created": "2022-07-02T19:59:12.614068Z",
+ "modified": "2022-07-02T19:59:12.614068Z",
"name": "Conduct Pump Priming",
"description": "Release content on a targetted small scale, prior to general release, including releasing seed. Used for preparation before broader release, and as message honing. Used for preparation before broader release, and as message honing. ",
"external_references": [
@@ -124,17 +124,17 @@
}
],
"object_marking_refs": [
- "marking-definition--23a58ec2-c6a7-418f-8d8b-2cc0fbc1f79b"
+ "marking-definition--f4b05b16-1c2b-47c2-bc6a-a1151adcf5a2"
],
"x_mitre_shortname": "conduct-pump-priming"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--18b0a137-fbc8-4351-b84e-18090ca8ccb8",
- "created_by_ref": "identity--5e903b30-0879-4886-8f35-975173dfc3c2",
- "created": "2022-07-02T17:28:36.929753Z",
- "modified": "2022-07-02T17:28:36.929753Z",
+ "id": "x-mitre-tactic--96fb9f2b-c2bb-44d3-9613-fc3fa46182e7",
+ "created_by_ref": "identity--45bc2bd8-bd63-4e58-a0fb-52a625ffbad0",
+ "created": "2022-07-02T19:59:12.614484Z",
+ "modified": "2022-07-02T19:59:12.614484Z",
"name": "Deliver Content",
"description": "Release content to general public or larger population",
"external_references": [
@@ -145,17 +145,17 @@
}
],
"object_marking_refs": [
- "marking-definition--3bb6aae9-d675-4456-8815-716d14f1dec0"
+ "marking-definition--81d5e807-ce92-467d-8e86-3ecf79f967d8"
],
"x_mitre_shortname": "deliver-content"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--b63b9b6f-0178-4275-a717-634caf904c0a",
- "created_by_ref": "identity--49f28fa8-aac0-499a-9c76-cee8a056cffe",
- "created": "2022-07-02T17:28:36.930063Z",
- "modified": "2022-07-02T17:28:36.930063Z",
+ "id": "x-mitre-tactic--73e754e4-10ee-49e4-9e56-7805b5be39c5",
+ "created_by_ref": "identity--a00e716a-32a3-4500-9024-bd28bb04382d",
+ "created": "2022-07-02T19:59:12.614995Z",
+ "modified": "2022-07-02T19:59:12.614995Z",
"name": "Drive Offline Activity",
"description": "Move incident/campaign from online to offline. Encouraging users to move from the platform on which they initially viewed operation content and engage in the physical information space or offline world. This may include operation-aligned rallies or protests, radio, newspaper, or billboards. An influence operation may drive to physical forums to diversify its information channels and facilitate spaces where the target audience can engage with both operation content and like-minded individuals offline. ",
"external_references": [
@@ -166,17 +166,17 @@
}
],
"object_marking_refs": [
- "marking-definition--d4e807a9-c7b4-4029-b9b0-7b81518a5284"
+ "marking-definition--68b8dc28-328b-4ff7-9a8d-1f60aa4f0f86"
],
"x_mitre_shortname": "drive-offline-activity"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--43c9e386-bd22-4d32-8b41-44b89d8257ef",
- "created_by_ref": "identity--ae3c7095-6295-49a4-b935-f967c5e7942d",
- "created": "2022-07-02T17:28:36.930373Z",
- "modified": "2022-07-02T17:28:36.930373Z",
+ "id": "x-mitre-tactic--bcf16e08-ac6e-420a-88eb-7b0c9558e6d0",
+ "created_by_ref": "identity--9d59898a-d81b-46c1-834d-76623c855b4e",
+ "created": "2022-07-02T19:59:12.615328Z",
+ "modified": "2022-07-02T19:59:12.615328Z",
"name": "Persist in the Information Environment",
"description": "Persist in the Information Space refers to taking measures that allow an operation to maintain its presence and avoid takedown by an external entity. Techniques in Persist in the Information Space help campaigns operate without detection and appear legitimate to the target audience and platform monitoring services. Influence operations on social media often persist online by varying the type of information assets and platforms used throughout the campaign.",
"external_references": [
@@ -187,17 +187,17 @@
}
],
"object_marking_refs": [
- "marking-definition--1ff33bf7-0d77-425d-ad85-20afb09d228e"
+ "marking-definition--06530200-9382-4129-ab7a-d44f9486ace4"
],
"x_mitre_shortname": "persist-in-the-information-environment"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--7003dd30-2fd8-4da6-be27-d13210a570ec",
- "created_by_ref": "identity--abcd4f50-3415-4545-aaa4-75a7ba5ec5cd",
- "created": "2022-07-02T17:28:36.930667Z",
- "modified": "2022-07-02T17:28:36.930667Z",
+ "id": "x-mitre-tactic--ed407f47-6d8e-4ccf-8572-b423a4153747",
+ "created_by_ref": "identity--89819b20-2394-4d4f-9c9e-f16603fbcd46",
+ "created": "2022-07-02T19:59:12.615643Z",
+ "modified": "2022-07-02T19:59:12.615643Z",
"name": "Assess Effectiveness",
"description": "Assess effectiveness of action, for use in future plans ",
"external_references": [
@@ -208,17 +208,17 @@
}
],
"object_marking_refs": [
- "marking-definition--bbc88c5b-2249-4d3f-b070-4037ccd5b6b8"
+ "marking-definition--a88bad65-8116-4021-97a0-b4b4024232c0"
],
"x_mitre_shortname": "assess-effectiveness"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--98feb296-62c7-4e8a-bca7-a00aab59fc6e",
- "created_by_ref": "identity--cd46acc9-b4ac-480a-a623-dcab29f8baee",
- "created": "2022-07-02T17:28:36.93096Z",
- "modified": "2022-07-02T17:28:36.93096Z",
+ "id": "x-mitre-tactic--103f5cc2-a673-43a8-b497-4ba1d8be65bc",
+ "created_by_ref": "identity--ca6d8f63-8cb2-46f7-9570-5cd40cd72734",
+ "created": "2022-07-02T19:59:12.615954Z",
+ "modified": "2022-07-02T19:59:12.615954Z",
"name": "Target Audience Analysis",
"description": "Identifying and analyzing the target audience examines target audience member locations, political affiliations, financial situations, and other attributes that an influence operation may incorporate into its messaging strategy. During this tactic, influence operations may also identify existing similarities and differences between target audience members to unite like groups and divide opposing groups. Identifying and analyzing target audience members allows influence operations to tailor operation strategy and content to their analysis. ",
"external_references": [
@@ -229,17 +229,17 @@
}
],
"object_marking_refs": [
- "marking-definition--e0d71223-7d46-497c-a88c-3994bd39b81e"
+ "marking-definition--767fb3e7-7b15-419d-a943-e7bc1550548a"
],
"x_mitre_shortname": "target-audience-analysis"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--39b5a167-e580-4f91-9139-b329c0a47632",
- "created_by_ref": "identity--58ebf78e-aefa-4ab8-9a67-270d6b35cebb",
- "created": "2022-07-02T17:28:36.931255Z",
- "modified": "2022-07-02T17:28:36.931255Z",
+ "id": "x-mitre-tactic--f43e51ee-3870-4daa-95e0-14cf49ddaca9",
+ "created_by_ref": "identity--ec1a5a3d-03da-41b8-bd20-9af2bf5f3eb5",
+ "created": "2022-07-02T19:59:12.616267Z",
+ "modified": "2022-07-02T19:59:12.616267Z",
"name": "Develop Narratives",
"description": "The promotion of beneficial master narratives is perhaps the most effective method for achieving long-term strategic narrative dominance. From a \"\"whole of society\"\" perspective the promotion of the society's core master narratives should occupy a central strategic role. From a misinformation campaign / cognitive security perpectve the tactics around master narratives center more precisely on the day-to-day promotion and reinforcement of this messaging. In other words, beneficial, high-coverage master narratives are a central strategic goal and their promotion constitutes an ongoing tactical struggle carried out at a whole-of-society level. Tactically, their promotion covers a broad spectrum of activities both on- and offline.",
"external_references": [
@@ -250,17 +250,17 @@
}
],
"object_marking_refs": [
- "marking-definition--b2d84f4b-b4a5-423a-ba06-dd539c64f189"
+ "marking-definition--903b71b8-f237-4ca3-a1b5-1d30c8f51340"
],
"x_mitre_shortname": "develop-narratives"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--bfa7fd1d-ac3f-4f1f-a2aa-ae3819cc0fdc",
- "created_by_ref": "identity--35f606a8-7d29-4469-8519-9a878f096ef1",
- "created": "2022-07-02T17:28:36.931547Z",
- "modified": "2022-07-02T17:28:36.931547Z",
+ "id": "x-mitre-tactic--44343de0-dba6-4147-b6fd-cf5e92afe84b",
+ "created_by_ref": "identity--f4cf0ee9-c47c-4ade-9da3-73f13683c69f",
+ "created": "2022-07-02T19:59:12.616572Z",
+ "modified": "2022-07-02T19:59:12.616572Z",
"name": "Establish Social Assets",
"description": "Establishing information assets generates messaging tools, including social media accounts, operation personnel, and organizations, including directly and indirectly managed assets. For assets under their direct control, the operation can add, change, or remove these assets at will. \nEstablishing information assets allows an influence operation to promote messaging directly to the target audience without navigating through external entities. Many online influence operations create or compromise social media accounts as a primary vector of information dissemination.",
"external_references": [
@@ -271,17 +271,17 @@
}
],
"object_marking_refs": [
- "marking-definition--052ee987-b37e-4464-a0ea-4d63e0424351"
+ "marking-definition--fd1f7b00-9a7b-4755-af43-cc0a00b045c2"
],
"x_mitre_shortname": "establish-social-assets"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--63348954-e476-45d3-9a07-9bba81316a75",
- "created_by_ref": "identity--e99b8fff-d450-46ab-947d-7168e55697db",
- "created": "2022-07-02T17:28:36.931847Z",
- "modified": "2022-07-02T17:28:36.931847Z",
+ "id": "x-mitre-tactic--5a30fcc1-fdd1-4472-b2bd-e4a0e64800a5",
+ "created_by_ref": "identity--88677963-cdde-499c-ac67-536b6245120a",
+ "created": "2022-07-02T19:59:12.616883Z",
+ "modified": "2022-07-02T19:59:12.616883Z",
"name": "Establish Legitimacy",
"description": "Establish assets that create trust",
"external_references": [
@@ -292,17 +292,17 @@
}
],
"object_marking_refs": [
- "marking-definition--1daf7e1c-0c30-4aff-809d-f84dcbd7fb69"
+ "marking-definition--0255af01-86f8-4867-abe8-7b32507fd847"
],
"x_mitre_shortname": "establish-legitimacy"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--5246f92a-de17-4038-a557-8420ff53200d",
- "created_by_ref": "identity--2727c1f1-1d0f-4601-9def-98e1231ff903",
- "created": "2022-07-02T17:28:36.932138Z",
- "modified": "2022-07-02T17:28:36.932138Z",
+ "id": "x-mitre-tactic--83c9a938-8f0d-48ef-9ed8-e1250c894805",
+ "created_by_ref": "identity--59ba0414-4eea-42c8-8279-903bd3f7e9a5",
+ "created": "2022-07-02T19:59:12.61719Z",
+ "modified": "2022-07-02T19:59:12.61719Z",
"name": "Maximize Exposure",
"description": "Maximize exposure of the target audience to incident/campaign content via flooding, amplifying, and cross-posting.",
"external_references": [
@@ -313,17 +313,17 @@
}
],
"object_marking_refs": [
- "marking-definition--e4394836-949c-450f-a185-f74f002a58d7"
+ "marking-definition--68fd1401-0a73-420a-bc17-b02b212e9b69"
],
"x_mitre_shortname": "maximize-exposure"
},
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--25df641e-05a4-47d2-b32e-9b92302b7298",
- "created_by_ref": "identity--d62c7261-8efc-4c74-b3e1-d89ca6145d19",
- "created": "2022-07-02T17:28:36.932431Z",
- "modified": "2022-07-02T17:28:36.932431Z",
+ "id": "x-mitre-tactic--16ae43af-4f68-4e98-baac-61561eb5e3f4",
+ "created_by_ref": "identity--9b1bb10f-1219-49bd-80cf-985925b933c2",
+ "created": "2022-07-02T19:59:12.61753Z",
+ "modified": "2022-07-02T19:59:12.61753Z",
"name": "Drive Online Harms",
"description": "Actions taken by an influence operation to harm their opponents in online spaces through harassment, suppression, releasing private information, and controlling the information space through offensive cyberspace operations. ",
"external_references": [
@@ -334,19 +334,19 @@
}
],
"object_marking_refs": [
- "marking-definition--0cc3507d-9ce9-4376-98c5-ce50a6fadc0c"
+ "marking-definition--e14266ef-efb4-41dc-ba77-c8859582d342"
],
"x_mitre_shortname": "drive-online-harms"
},
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--e980357d-5953-4590-8986-c8ba4ad00d7d",
- "created_by_ref": "identity--41a582bd-2a66-4194-a9b6-fea6d5fdda5d",
- "created": "2022-07-02T17:28:36.932981Z",
- "modified": "2022-07-02T17:28:36.932981Z",
+ "id": "attack-pattern--6a163058-b912-4e00-9cd0-17ae46341215",
+ "created_by_ref": "identity--45c57c42-ce17-4a1b-8008-6857475452a6",
+ "created": "2022-07-02T19:59:12.618229Z",
+ "modified": "2022-07-02T19:59:12.618229Z",
"name": "Facilitate State Propaganda",
- "description": "TA02",
+ "description": "Organize citizens around pro-state messaging. Coordinate paid or volunteer groups to push state propaganda.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -361,7 +361,7 @@
}
],
"object_marking_refs": [
- "marking-definition--b6ce7864-b8ae-4573-9c25-f5476ebf71f9"
+ "marking-definition--a8efac97-6520-4bf3-82b1-01278215c187"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -374,12 +374,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--21ea7783-4105-47f2-a8dd-aaa2ff34b0fa",
- "created_by_ref": "identity--967749e1-c653-450d-84d1-cea23c65e1c1",
- "created": "2022-07-02T17:28:36.933327Z",
- "modified": "2022-07-02T17:28:36.933327Z",
+ "id": "attack-pattern--dee665e8-0d94-4244-b5c2-ac6fd6f29ed8",
+ "created_by_ref": "identity--e11b5a72-8caf-4838-a8f5-436f204fad35",
+ "created": "2022-07-02T19:59:12.618705Z",
+ "modified": "2022-07-02T19:59:12.618705Z",
"name": "Leverage Existing Narratives",
- "description": "TA14",
+ "description": "Use or adapt existing narrative themes, where narratives are the baseline stories of a target audience. Narratives form the bedrock of our worldviews. New information is understood through a process firmly grounded in this bedrock. If new information is not consitent with the prevailing narratives of an audience, it will be ignored. Effective campaigns will frame their misinformation in the context of these narratives. Highly effective campaigns will make extensive use of audience-appropriate archetypes and meta-narratives throughout their content creation and amplifiction practices. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -394,7 +394,7 @@
}
],
"object_marking_refs": [
- "marking-definition--3d055099-7b53-4537-ba8f-06dd874cbdb7"
+ "marking-definition--686540d6-1058-4b8f-985b-408ccc83f6d7"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -407,12 +407,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--530a85d9-8fed-48dc-8c59-7c36d7d5d11e",
- "created_by_ref": "identity--8ab9cd5b-8ec8-4abd-a0ad-2f6dc59fab7c",
- "created": "2022-07-02T17:28:36.933662Z",
- "modified": "2022-07-02T17:28:36.933662Z",
+ "id": "attack-pattern--da1fb7bf-4207-4fe6-895c-c6b5967aac20",
+ "created_by_ref": "identity--43bbc304-12e9-4066-9f9d-a4450a90b176",
+ "created": "2022-07-02T19:59:12.61904Z",
+ "modified": "2022-07-02T19:59:12.61904Z",
"name": "Develop Competing Narratives",
- "description": "TA14",
+ "description": "Advance competing narratives connected to same issue ie: on one hand deny incident while at same time expresses dismiss. Suppressing or discouraging narratives already spreading requires an alternative. The most simple set of narrative techniques in response would be the construction and promotion of contradictory alternatives centered on denial, deflection, dismissal, counter-charges, excessive standards of proof, bias in prohibition or enforcement, and so on. These competing narratives allow loyalists cover, but are less compelling to opponents and fence-sitters than campaigns built around existing narratives or highly explanatory master narratives. Competing narratives, as such, are especially useful in the \"firehose of misinformation\" approach.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -427,7 +427,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e9034ecf-dfa4-40d5-9e94-9fd201a5f216"
+ "marking-definition--dfd31148-43c4-4e95-8127-634a6171b20f"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -440,12 +440,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--5003d9a7-f517-45ca-8e39-0902a9fb3fb4",
- "created_by_ref": "identity--8726021d-b2cd-416f-b042-54b03a268a59",
- "created": "2022-07-02T17:28:36.933986Z",
- "modified": "2022-07-02T17:28:36.933986Z",
+ "id": "attack-pattern--f66368b5-d9c7-4742-a16b-2b0fd75e4929",
+ "created_by_ref": "identity--ab2d0791-5d18-4e63-9eaa-de983188279a",
+ "created": "2022-07-02T19:59:12.619366Z",
+ "modified": "2022-07-02T19:59:12.619366Z",
"name": "Create Inauthentic Social Media Pages and Groups",
- "description": "TA15",
+ "description": "Create key social engineering assets needed to amplify content, manipulate algorithms, fool public and/or specific incident/campaign targets. Computational propaganda depends substantially on false perceptions of credibility and acceptance. By creating fake users and groups with a variety of interests and commitments, attackers can ensure that their messages both come from trusted sources and appear more widely adopted than they actually are.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -460,7 +460,7 @@
}
],
"object_marking_refs": [
- "marking-definition--d347432d-a268-45ff-9efc-241e2c21ddee"
+ "marking-definition--54c5ef3c-5550-4b5c-8ec4-f231196fbc1c"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -473,12 +473,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--aad83719-2b04-4a3e-9664-bf9aa2350e2f",
- "created_by_ref": "identity--7212f424-f256-4f04-b08d-6472deab129c",
- "created": "2022-07-02T17:28:36.934305Z",
- "modified": "2022-07-02T17:28:36.934305Z",
+ "id": "attack-pattern--c1adbb6d-74e6-4698-b856-ffbf21ede197",
+ "created_by_ref": "identity--d89f3ba3-9b44-4412-86de-e20d17983c9a",
+ "created": "2022-07-02T19:59:12.6197Z",
+ "modified": "2022-07-02T19:59:12.6197Z",
"name": "Create fake experts",
- "description": "TA16",
+ "description": "Stories planted or promoted in computational propaganda operations often make use of experts fabricated from whole cloth, sometimes specifically for the story itself. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -493,7 +493,7 @@
}
],
"object_marking_refs": [
- "marking-definition--275c2a33-03dd-48e6-8888-15896fed061a"
+ "marking-definition--7b2b57ce-f686-418b-9850-e4543badeaca"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -506,12 +506,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--5c17929e-b059-4547-8151-769797eba5d5",
- "created_by_ref": "identity--88e698b7-fd34-4553-bbaa-26bb5a7513b4",
- "created": "2022-07-02T17:28:36.934624Z",
- "modified": "2022-07-02T17:28:36.934624Z",
+ "id": "attack-pattern--bb0a5dd6-ce06-4ed2-adb7-bd1e95890005",
+ "created_by_ref": "identity--6100c7fd-82f3-490b-aebd-751ef37dbd0d",
+ "created": "2022-07-02T19:59:12.620036Z",
+ "modified": "2022-07-02T19:59:12.620036Z",
"name": "Utilize Academic/Pseudoscientific Justifications",
- "description": "TA16",
+ "description": "Utilize Academic/Pseudoscientific Justifications",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -526,7 +526,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7f2f253c-a2ac-4aa9-a789-73882cea7792"
+ "marking-definition--611f9931-54ad-488b-9df0-e58c3a304bfb"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -539,12 +539,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4459b053-585e-4160-b54c-de6db94f0d08",
- "created_by_ref": "identity--e3567cc7-e95b-466d-8d15-04bf5c479949",
- "created": "2022-07-02T17:28:36.934998Z",
- "modified": "2022-07-02T17:28:36.934998Z",
+ "id": "attack-pattern--6dd3c20a-878e-497a-b471-173b82749edc",
+ "created_by_ref": "identity--413f9e83-96e2-4197-832e-d247fc926803",
+ "created": "2022-07-02T19:59:12.620365Z",
+ "modified": "2022-07-02T19:59:12.620365Z",
"name": "Cultivate ignorant agents",
- "description": "TA15",
+ "description": "Cultivate propagandists for a cause, the goals of which are not fully comprehended, and who are used cynically by the leaders of the cause. Independent actors use social media and specialised web sites to strategically reinforce and spread messages compatible with their own. Their networks are infiltrated and used by state media disinformation organisations to amplify the state\u2019s own disinformation strategies against target populations. Many are traffickers in conspiracy theories or hoaxes, unified by a suspicion of Western governments and mainstream media. Their narratives, which appeal to leftists hostile to globalism and military intervention and nationalists against immigration, are frequently infiltrated and shaped by state-controlled trolls and altered news items from agencies such as RT and Sputnik. Also know as \"useful idiots\" or \"unwitting agents\".",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -559,7 +559,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2f5402f3-bdd4-4881-900a-c45226181bff"
+ "marking-definition--e72dbc33-1edc-40ba-b48c-51c943573c54"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -572,12 +572,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4a00df0a-8591-451b-9f3c-1980c6856dca",
- "created_by_ref": "identity--64dbec6e-dba1-4e7a-8395-7ff125342095",
- "created": "2022-07-02T17:28:36.935318Z",
- "modified": "2022-07-02T17:28:36.935318Z",
+ "id": "attack-pattern--53019b69-6576-41bb-910a-af037d636c19",
+ "created_by_ref": "identity--2882715d-765c-449e-9906-2c4c3eb2687c",
+ "created": "2022-07-02T19:59:12.620698Z",
+ "modified": "2022-07-02T19:59:12.620698Z",
"name": "Compromise legitimate accounts",
- "description": "TA16",
+ "description": "Hack or take over legimate accounts to distribute misinformation or damaging content.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -592,7 +592,7 @@
}
],
"object_marking_refs": [
- "marking-definition--310c0ee9-665a-4d4f-8f2f-e26211ee0359"
+ "marking-definition--2b6a6a04-7c14-45c5-9a54-3df187f44345"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -605,12 +605,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--52e46e86-b4be-44e2-919d-98c5e4869bec",
- "created_by_ref": "identity--446ec9a0-af34-499e-a3ce-765014ffad9f",
- "created": "2022-07-02T17:28:36.935638Z",
- "modified": "2022-07-02T17:28:36.935638Z",
+ "id": "attack-pattern--cc18f14a-5c59-418e-99ef-63578e24c020",
+ "created_by_ref": "identity--4933a852-ba49-4e7a-b91b-71c2b2875ab6",
+ "created": "2022-07-02T19:59:12.621024Z",
+ "modified": "2022-07-02T19:59:12.621024Z",
"name": "Create inauthentic websites",
- "description": "TA15",
+ "description": "Create media assets to support inauthentic organizations (e.g. think tank), people (e.g. experts) and/or serve as sites to distribute malware/launch phishing operations.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -625,7 +625,7 @@
}
],
"object_marking_refs": [
- "marking-definition--156a15e6-e151-4328-b0f2-632d90f7a7bd"
+ "marking-definition--b0e007a6-3cb6-44e3-87b7-f45200baf0dd"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -638,12 +638,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--f8d9b96f-0edc-419e-b5f0-557f4588bf90",
- "created_by_ref": "identity--fba434be-eb6a-44e0-91d1-ccf83689f3a3",
- "created": "2022-07-02T17:28:36.935956Z",
- "modified": "2022-07-02T17:28:36.935956Z",
+ "id": "attack-pattern--04f0b6bb-47f6-430e-ae9d-0a4188eb9388",
+ "created_by_ref": "identity--fe8c27c2-1bdd-414a-93dd-66ec0d533603",
+ "created": "2022-07-02T19:59:12.62135Z",
+ "modified": "2022-07-02T19:59:12.62135Z",
"name": "Prepare fundraising campaigns",
- "description": "TA15",
+ "description": "Fundraising campaigns refer to an influence operation\u2019s systematic effort to seek financial support for a charity, cause, or other enterprise using online activities that further promote operation information pathways while raising a profit. Many influence operations have engaged in crowdfunding services on platforms including Tipee, Patreon, and GoFundMe. An operation may use its previously prepared fundraising campaigns (see: Develop Information Pathways) to promote operation messaging while raising money to support its activities. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -658,7 +658,7 @@
}
],
"object_marking_refs": [
- "marking-definition--bad23555-2aa5-40ac-b814-3a5971896b5e"
+ "marking-definition--42c8712c-2f42-4330-91db-3a94fc739a16"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -671,12 +671,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--400167bb-0e28-4499-93f5-984882266303",
- "created_by_ref": "identity--d126a8c5-2a78-4e8d-b0fd-931dd6144a90",
- "created": "2022-07-02T17:28:36.936279Z",
- "modified": "2022-07-02T17:28:36.936279Z",
- "name": "From bad actors",
- "description": "TA15",
+ "id": "attack-pattern--06504d3c-f7cc-46fd-a6a4-5f1fb3291232",
+ "created_by_ref": "identity--0d8fc69a-bd53-450e-a29e-d1e994f07b6d",
+ "created": "2022-07-02T19:59:12.621676Z",
+ "modified": "2022-07-02T19:59:12.621676Z",
+ "name": "Raise funds from malign actors",
+ "description": "Raising funds from malign actors may include contributions from foreign agents, cutouts or proxies, shell companies, dark money groups, etc. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -691,7 +691,7 @@
}
],
"object_marking_refs": [
- "marking-definition--13271717-f1ee-4a94-94c3-8570cf814242"
+ "marking-definition--a6f5dcd4-b345-4f31-8f8c-c2294dc9e7c5"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -704,12 +704,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--cbb1d58a-133a-45ff-8e58-1e96660d647d",
- "created_by_ref": "identity--28b7f8a3-cedc-4931-b86d-7ae29dcda541",
- "created": "2022-07-02T17:28:36.9366Z",
- "modified": "2022-07-02T17:28:36.9366Z",
- "name": "From ignorant agents",
- "description": "TA15",
+ "id": "attack-pattern--15ee8dc7-f009-425f-afa3-294ba94b64e2",
+ "created_by_ref": "identity--94370512-0b2d-4e80-b09c-d70e6be46569",
+ "created": "2022-07-02T19:59:12.622007Z",
+ "modified": "2022-07-02T19:59:12.622007Z",
+ "name": "Raise funds from ignorant agents",
+ "description": "Raising funds from ignorant agents may include scams, donations intended for one stated purpose but then used for another, etc. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -724,7 +724,7 @@
}
],
"object_marking_refs": [
- "marking-definition--37346810-dbbc-46cd-8e8d-4af68e0f4e00"
+ "marking-definition--c458fca1-530d-44fe-bc43-5b6f0fa2c9da"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -737,12 +737,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c10bb513-88f1-4e74-a5ed-45135bc21395",
- "created_by_ref": "identity--b1b8439e-fd8a-4444-900b-8504357c9280",
- "created": "2022-07-02T17:28:36.93692Z",
- "modified": "2022-07-02T17:28:36.93692Z",
+ "id": "attack-pattern--f487530f-45bb-4f8a-8c03-ca81ebc5cdb3",
+ "created_by_ref": "identity--98b12556-4bbc-4ff4-8512-bfc9fac3f1f7",
+ "created": "2022-07-02T19:59:12.622339Z",
+ "modified": "2022-07-02T19:59:12.622339Z",
"name": "Create hashtags and search artifacts",
- "description": "TA06",
+ "description": "Create one or more hashtags and/or hashtag groups. Many incident-based campaigns will create hashtags to promote their fabricated event. Creating a hashtag for an incident can have two important effects: 1. Create a perception of reality around an event. Certainly only \"real\" events would be discussed in a hashtag. After all, the event has a name!, and 2. Publicize the story more widely through trending lists and search behavior. Asset needed to direct/control/manage \"conversation\" connected to launching new incident/campaign with new hashtag for applicable social media sites). ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -757,7 +757,7 @@
}
],
"object_marking_refs": [
- "marking-definition--24324732-5ea8-44d1-9011-820551f62b04"
+ "marking-definition--959a217b-ef3a-4528-acd9-43028e862862"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -770,12 +770,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--223e9f84-f894-484b-9359-0743edd6584e",
- "created_by_ref": "identity--3c4abe5a-6b48-497e-ab7b-17ecb28f16d5",
- "created": "2022-07-02T17:28:36.93725Z",
- "modified": "2022-07-02T17:28:36.93725Z",
+ "id": "attack-pattern--6b4f7e4e-d68a-40de-b94a-be132e1a4d99",
+ "created_by_ref": "identity--0618a591-c581-4776-a13b-3e673f105ec2",
+ "created": "2022-07-02T19:59:12.622666Z",
+ "modified": "2022-07-02T19:59:12.622666Z",
"name": "Create Clickbait",
- "description": "TA05",
+ "description": "Create attention grabbing headlines (outrage, doubt, humor) required to drive traffic & engagement. This is a key asset.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -790,7 +790,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e79486d8-4dab-4f59-bb83-96aac4b9662a"
+ "marking-definition--12fe0574-53e2-4f86-aab8-047e07e186f6"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -803,12 +803,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a922b4a9-b5c1-479e-b471-a06a94320842",
- "created_by_ref": "identity--f7fb6477-2686-4fe5-86f4-a7d098b67d8c",
- "created": "2022-07-02T17:28:36.937566Z",
- "modified": "2022-07-02T17:28:36.937566Z",
+ "id": "attack-pattern--36203197-90da-4681-b394-0bad48a2dea5",
+ "created_by_ref": "identity--04cfd5d6-8344-4af2-b058-fdd2e7c79970",
+ "created": "2022-07-02T19:59:12.622991Z",
+ "modified": "2022-07-02T19:59:12.622991Z",
"name": "Conduct fundraising",
- "description": "TA10",
+ "description": "Fundraising campaigns refer to an influence operation\u2019s systematic effort to seek financial support for a charity, cause, or other enterprise using online activities that further promote operation information pathways while raising a profit. Many influence operations have engaged in crowdfunding services166 on platforms including Tipee, Patreon, and GoFundMe. An operation may use its previously prepared fundraising campaigns to promote operation messaging while raising money to support its activities. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -823,7 +823,7 @@
}
],
"object_marking_refs": [
- "marking-definition--0d3bd0bd-db8b-4588-8394-7f8c7f9cc5ed"
+ "marking-definition--dc4ba4b0-d802-43e8-a1f1-7f8ee6ef3f77"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -836,12 +836,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c5333233-57a6-460d-858d-9503d840d8cc",
- "created_by_ref": "identity--ebfe1a17-313b-429a-8e81-5811c97039d6",
- "created": "2022-07-02T17:28:36.937887Z",
- "modified": "2022-07-02T17:28:36.937887Z",
+ "id": "attack-pattern--caaa3a7a-e35b-4f5f-94e3-0e25061dd4de",
+ "created_by_ref": "identity--f46b9e03-4d60-454a-a89e-dc10e0959010",
+ "created": "2022-07-02T19:59:12.623323Z",
+ "modified": "2022-07-02T19:59:12.623323Z",
"name": "Conduct Crowdfunding Campaigns",
- "description": "TA10",
+ "description": "An influence operation may Conduct Crowdfunding Campaigns on platforms such as GoFundMe, GiveSendGo, Tipeee, Patreon, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -856,7 +856,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c880832b-42f6-4dd8-8b23-8ab00e401577"
+ "marking-definition--12b5bc48-7728-47f6-ac68-5a02331e95c7"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -869,12 +869,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--940e71ba-4cc0-48d5-b5d4-5b1af17c05b2",
- "created_by_ref": "identity--2bcfbfb0-24f3-4cac-bf32-55613365506b",
- "created": "2022-07-02T17:28:36.938206Z",
- "modified": "2022-07-02T17:28:36.938206Z",
+ "id": "attack-pattern--bece5e77-a816-43ee-be8b-642241f1703a",
+ "created_by_ref": "identity--721d94af-b7f6-465b-ba29-432d3b27e70a",
+ "created": "2022-07-02T19:59:12.623652Z",
+ "modified": "2022-07-02T19:59:12.623652Z",
"name": "Purchase Targeted Advertisements",
- "description": "TA05",
+ "description": "Create or fund advertisements targeted at specific populations",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -889,7 +889,7 @@
}
],
"object_marking_refs": [
- "marking-definition--88ce8b12-6410-487d-9b24-1ffef2c5a8a5"
+ "marking-definition--3dd17da1-dc54-49b3-9f4a-cfe9bfcf7cc5"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -902,12 +902,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--63ecf892-add4-4423-a27f-e49e63406771",
- "created_by_ref": "identity--213c9d6f-f783-4a35-81fc-b4942011f5e3",
- "created": "2022-07-02T17:28:36.938528Z",
- "modified": "2022-07-02T17:28:36.938528Z",
+ "id": "attack-pattern--08b0624d-4db7-4d38-838d-c7e970dbb292",
+ "created_by_ref": "identity--a008f5aa-2a69-4660-bb02-97f64f779370",
+ "created": "2022-07-02T19:59:12.623991Z",
+ "modified": "2022-07-02T19:59:12.623991Z",
"name": "Generate information pollution",
- "description": "TA06",
+ "description": "Flood social channels; drive traffic/engagement to all assets; create aura/sense/perception of pervasiveness/consensus (for or against or both simultaneously) of an issue or topic. \"Nothing is true, but everything is possible.\" Akin to astroturfing campaign.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -922,7 +922,7 @@
}
],
"object_marking_refs": [
- "marking-definition--649012a3-d622-47ef-bc8d-ec69d3d78829"
+ "marking-definition--bdc1090d-05fe-4987-9276-6e385d0d60e4"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -935,12 +935,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c11289f8-7f05-4975-a789-a089d34d96dd",
- "created_by_ref": "identity--b76fd6d5-acff-40ef-b674-d4eecc317af5",
- "created": "2022-07-02T17:28:36.938855Z",
- "modified": "2022-07-02T17:28:36.938855Z",
+ "id": "attack-pattern--0c14a9d8-4304-4468-800b-c3c1d84dff5f",
+ "created_by_ref": "identity--ef280992-aaca-463b-bb9e-1a8f0eb31c08",
+ "created": "2022-07-02T19:59:12.624385Z",
+ "modified": "2022-07-02T19:59:12.624385Z",
"name": "Create fake research",
- "description": "TA06",
+ "description": "Create fake academic research. Example: fake social science research is often aimed at hot-button social issues such as gender, race and sexuality. Fake science research can target Climate Science debate or pseudoscience like anti-vaxx",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -955,7 +955,7 @@
}
],
"object_marking_refs": [
- "marking-definition--67d0bd27-6c9f-491b-8568-05a9a88b92bf"
+ "marking-definition--b0fc2160-56aa-4247-8581-413503cb14ad"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -968,12 +968,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a632a961-4906-4e38-9e9d-fe2f0d523776",
- "created_by_ref": "identity--8fa0040a-ad7a-4ac0-a1e7-a80981bcd626",
- "created": "2022-07-02T17:28:36.939179Z",
- "modified": "2022-07-02T17:28:36.939179Z",
+ "id": "attack-pattern--da37527d-398a-4ada-b5e8-d4712b696fb6",
+ "created_by_ref": "identity--4bdad53a-af7a-422c-8a1d-b345b661ab14",
+ "created": "2022-07-02T19:59:12.624805Z",
+ "modified": "2022-07-02T19:59:12.624805Z",
"name": "Hijack Hashtags",
- "description": "TA06",
+ "description": "Hashtag hijacking occurs when users \u201c[use] a trending hashtag to promote topics that are substantially different from its recent context\u201d (VanDam and Tan, 2016) or \u201cto promote one\u2019s own social media agenda\u201d (Darius and Stephany, 2019).",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -988,7 +988,7 @@
}
],
"object_marking_refs": [
- "marking-definition--f5bbcd48-69f1-4e99-99a7-cf6a4fa364d6"
+ "marking-definition--93fe6620-589a-4e2e-a481-d5ac4c22ce7e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -1001,12 +1001,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--ef14ef26-c877-4e88-98b7-34cdaf7d45e3",
- "created_by_ref": "identity--f8e716a1-af74-44ed-b672-a1d0c898d1fc",
- "created": "2022-07-02T17:28:36.939501Z",
- "modified": "2022-07-02T17:28:36.939501Z",
+ "id": "attack-pattern--1fc51355-6d03-4f89-b4b2-dcf816109371",
+ "created_by_ref": "identity--a4bd581b-b596-46a9-b779-6595e9b43d72",
+ "created": "2022-07-02T19:59:12.625184Z",
+ "modified": "2022-07-02T19:59:12.625184Z",
"name": "Trial content",
- "description": "TA08",
+ "description": "Iteratively test incident performance (messages, content etc), e.g. A/B test headline/content enagagement metrics; website and/or funding campaign conversion rates",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1021,7 +1021,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e125dd76-b89f-4bc2-ae33-145ff5ed4eb8"
+ "marking-definition--f0ac2680-e2c5-470b-a48d-4997f2cef24e"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -1034,12 +1034,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--8f344f67-cc73-4826-9edf-9d9a202f1127",
- "created_by_ref": "identity--b8c889a2-953f-4b70-8317-269803835252",
- "created": "2022-07-02T17:28:36.939822Z",
- "modified": "2022-07-02T17:28:36.939822Z",
+ "id": "attack-pattern--74a90d3f-f426-4832-9cf7-5e9ec799bec0",
+ "created_by_ref": "identity--fcde2928-aa0f-49ed-8648-e81fce978ade",
+ "created": "2022-07-02T19:59:12.625554Z",
+ "modified": "2022-07-02T19:59:12.625554Z",
"name": "Leverage Conspiracy Theory Narratives",
- "description": "TA14",
+ "description": "\"Conspiracy narratives\" appeal to the human desire for explanatory order, by invoking the participation of poweful (often sinister) actors in pursuit of their own political goals. These narratives are especially appealing when an audience is low-information, marginalized or otherwise inclined to reject the prevailing explanation. Conspiracy narratives are an important component of the \"firehose of falsehoods\" model. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1054,7 +1054,7 @@
}
],
"object_marking_refs": [
- "marking-definition--9f87f987-8087-41d0-8e46-1eaf111d6cb6"
+ "marking-definition--a0a57c95-42f4-4821-8e89-09a3f458e735"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -1067,12 +1067,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--fb5f79c5-0642-4e08-bd45-35b68c5e3a0b",
- "created_by_ref": "identity--9406f732-24b4-4fc1-93bd-104462cf9ed9",
- "created": "2022-07-02T17:28:36.940141Z",
- "modified": "2022-07-02T17:28:36.940141Z",
- "name": "Amplify Existing Conspiracy Theory Narrative",
- "description": "TA14",
+ "id": "attack-pattern--f63ac640-cfd8-481d-b873-a79ab0f360d8",
+ "created_by_ref": "identity--ab72df52-14e9-4ea8-8116-bbf6822ce4af",
+ "created": "2022-07-02T19:59:12.625897Z",
+ "modified": "2022-07-02T19:59:12.625897Z",
+ "name": "Amplify Existing Conspiracy Theory Narratives",
+ "description": "An influence operation may amplify an existing conspiracy theory narrative that aligns with its incident or campaign goals. By amplifying existing conspiracy theory narratives, operators can leverage the power of the existing communities that support and propagate those theories without needing to expend resources creating new narratives or building momentum and buy in around new narratives. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1087,7 +1087,7 @@
}
],
"object_marking_refs": [
- "marking-definition--502808e6-d1bd-4be7-a14e-1c5ee93bdf87"
+ "marking-definition--a3496ec9-3ed2-4102-bf82-3b590abaf718"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -1100,12 +1100,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c423ab99-cdc3-4abf-bf4e-880a1011dd2c",
- "created_by_ref": "identity--258abf5a-e7af-4cc3-a37e-2114fefc92f0",
- "created": "2022-07-02T17:28:36.940459Z",
- "modified": "2022-07-02T17:28:36.940459Z",
+ "id": "attack-pattern--fbd5b3c6-7f47-4bdc-afeb-206d430abd9b",
+ "created_by_ref": "identity--af1eddd2-1434-4121-9c24-16e119341c7d",
+ "created": "2022-07-02T19:59:12.626285Z",
+ "modified": "2022-07-02T19:59:12.626285Z",
"name": "Develop Original Conspiracy Theory Narratives",
- "description": "TA14",
+ "description": "While this requires more resources than amplifying existing conspiracy theory narratives, an influence operation may develop original conspiracy theory narratives in order to achieve greater control and alignment over the narrative and their campaign goals. Prominent examples include the USSR's Operation INFEKTION disinformation campaign run by the KGB in the 1980s to plant the idea that the United States had invented HIV/AIDS as part of a biological weapons research project at Fort Detrick, Maryland. More recently, Fort Detrick featured prominently in a new conspiracy theory narratives around the origins of the COVID-19 outbreak and pandemic. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1120,7 +1120,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7f58f248-e688-4c86-a23e-412b3b42ad30"
+ "marking-definition--3d59980b-d56e-41ad-91c9-5abd5ea73dbf"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -1133,12 +1133,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c6118c1f-e163-4eb0-a647-44a9d4074bb0",
- "created_by_ref": "identity--72eda25d-1364-455d-9244-708fc0e890fd",
- "created": "2022-07-02T17:28:36.940776Z",
- "modified": "2022-07-02T17:28:36.940776Z",
+ "id": "attack-pattern--6fc3a1a6-7989-4d46-8dc5-25ec1be29106",
+ "created_by_ref": "identity--b48e891b-016e-4ce5-bda2-63ab8faaf3c4",
+ "created": "2022-07-02T19:59:12.62663Z",
+ "modified": "2022-07-02T19:59:12.62663Z",
"name": "Distort facts",
- "description": "TA06",
+ "description": "Change, twist, or exaggerate existing facts to construct a narrative that differs from reality. Examples: images and ideas can be distorted by being placed in an improper content",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1153,7 +1153,7 @@
}
],
"object_marking_refs": [
- "marking-definition--78e76db8-c5ea-4236-8bd1-0901fdd3d6fa"
+ "marking-definition--765bd041-282d-4ab1-90ee-b808df7c8921"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -1166,12 +1166,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--cee96770-2751-43aa-9ce9-23012235ae8b",
- "created_by_ref": "identity--63dfecf0-659e-41e8-8142-f293e67bb9ec",
- "created": "2022-07-02T17:28:36.941093Z",
- "modified": "2022-07-02T17:28:36.941093Z",
+ "id": "attack-pattern--dd4a7b60-a845-46d7-a189-dc05fc8a247c",
+ "created_by_ref": "identity--03bf53ef-348c-4fcc-be85-ef80671903b5",
+ "created": "2022-07-02T19:59:12.62703Z",
+ "modified": "2022-07-02T19:59:12.62703Z",
"name": "Reframe Context",
- "description": "TA06",
+ "description": "Reframing context refers to removing an event from its surrounding context to distort its intended meaning. Rather than deny that an event occurred, reframing context frames an event in a manner that may lead the target audience to draw a different conclusion about its intentions. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1186,7 +1186,7 @@
}
],
"object_marking_refs": [
- "marking-definition--66ae7e8a-9742-4cdc-baf9-e2f86d0e4dc1"
+ "marking-definition--221ca551-3092-4c38-bc9e-3e69d9e182a0"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -1199,12 +1199,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--782d58da-2c24-4520-a283-b89b54b5e59a",
- "created_by_ref": "identity--a5e04142-cb47-4bdc-8a55-1bb6916d58c5",
- "created": "2022-07-02T17:28:36.941408Z",
- "modified": "2022-07-02T17:28:36.941408Z",
+ "id": "attack-pattern--2400f6a0-b97e-4640-877d-946f68712265",
+ "created_by_ref": "identity--88278ef9-c0a1-44ec-a09a-d1b2da7b4a19",
+ "created": "2022-07-02T19:59:12.627403Z",
+ "modified": "2022-07-02T19:59:12.627403Z",
"name": "Edit Open-Source Content",
- "description": "TA06",
+ "description": "An influence operation may edit open-source content, such as collaborative blogs or encyclopedias, to promote its narratives on outlets with existing credibility and audiences. Editing open-source content may allow an operation to post content on platforms without dedicating resources to the creation and maintenance of its own assets. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1219,7 +1219,7 @@
}
],
"object_marking_refs": [
- "marking-definition--f4537f08-0294-4f22-940e-e088d6c447e4"
+ "marking-definition--81c6112b-1d13-446a-bf37-2b7a46489e5e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -1232,12 +1232,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--3f07b243-8d61-425e-8bef-b8d95ae62936",
- "created_by_ref": "identity--e243c433-c58f-4fa9-8e7c-364d0264456e",
- "created": "2022-07-02T17:28:36.94173Z",
- "modified": "2022-07-02T17:28:36.94173Z",
+ "id": "attack-pattern--abd52e1c-f92e-4247-b8bf-e3c9499a50e4",
+ "created_by_ref": "identity--a4cc9e21-ff9d-4233-9d24-57c73aa63564",
+ "created": "2022-07-02T19:59:12.627773Z",
+ "modified": "2022-07-02T19:59:12.627773Z",
"name": "Online polls",
- "description": "TA07",
+ "description": "Create fake online polls, or manipulate existing online polls. Data gathering tactic to target those who engage, and potentially their networks of friends/followers as well",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1252,7 +1252,7 @@
}
],
"object_marking_refs": [
- "marking-definition--0b503589-dec6-442f-8ea6-4929218b727e"
+ "marking-definition--60ff7763-f1d6-411c-a4c3-464bd78476e6"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -1265,12 +1265,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--86acec87-a02a-4f80-9012-2f5c610687b1",
- "created_by_ref": "identity--f8455a79-2bb1-4849-bf05-406eae3ea796",
- "created": "2022-07-02T17:28:36.942048Z",
- "modified": "2022-07-02T17:28:36.942048Z",
+ "id": "attack-pattern--ff319f77-3085-4eb5-8925-89103daab804",
+ "created_by_ref": "identity--4f80a6b6-2893-46ec-a55c-0f62ea9db2ae",
+ "created": "2022-07-02T19:59:12.628154Z",
+ "modified": "2022-07-02T19:59:12.628154Z",
"name": "Bait legitimate influencers",
- "description": "TA08",
+ "description": "Credibility in a social media environment is often a function of the size of a user's network. \"Influencers\" are so-called because of their reach, typically understood as: 1) the size of their network (i.e. the number of followers, perhaps weighted by their own influence); and 2) The rate at which their comments are re-circulated (these two metrics are related). Add traditional media players at all levels of credibility and professionalism to this, and the number of potential influencial carriers available for unwitting amplification becomes substantial. By targeting high-influence people and organizations in all types of media with narratives and content engineered to appeal their emotional or ideological drivers, influence campaigns are able to add perceived credibility to their messaging via saturation and adoption by trusted agents such as celebrities, journalists and local leaders.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1285,7 +1285,7 @@
}
],
"object_marking_refs": [
- "marking-definition--137b13aa-8b01-4c6c-a0a8-ced8e8af88d7"
+ "marking-definition--8983ccd4-a112-4e43-b633-1e7f4c99303a"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -1298,12 +1298,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--fd1be5d5-bec1-40d8-a5c6-11ff97fe61b9",
- "created_by_ref": "identity--7bb3f464-261d-4990-b597-36ff860c9b85",
- "created": "2022-07-02T17:28:36.942369Z",
- "modified": "2022-07-02T17:28:36.942369Z",
+ "id": "attack-pattern--2a0404a5-1a70-4be4-979c-6ecfd5595560",
+ "created_by_ref": "identity--f45c1a1b-52a1-497c-af7d-3a19009b4031",
+ "created": "2022-07-02T19:59:12.628516Z",
+ "modified": "2022-07-02T19:59:12.628516Z",
"name": "Demand insurmountable proof",
- "description": "TA14",
+ "description": "Campaigns often leverage tactical and informational asymmetries on the threat surface, as seen in the Distort and Deny strategies, and the \"firehose of misinformation\". Specifically, conspiracy theorists can be repeatedly wrong, but advocates of the truth need to be perfect. By constantly escalating demands for proof, propagandists can effectively leverage this asymmetry while also priming its future use, often with an even greater asymmetric advantage. The conspiracist is offered freer rein for a broader range of \"questions\" while the truth teller is burdened with higher and higher standards of proof.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1318,7 +1318,7 @@
}
],
"object_marking_refs": [
- "marking-definition--db581e86-37fd-4734-beb7-3bb5227cc2c7"
+ "marking-definition--02b0b700-bc50-45e7-a923-9fa628d65eda"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -1331,12 +1331,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--284293b6-e1fd-4072-96d3-b5ed72056848",
- "created_by_ref": "identity--cc6a0050-4a41-40e5-8b08-fc87e8ba515d",
- "created": "2022-07-02T17:28:36.94269Z",
- "modified": "2022-07-02T17:28:36.94269Z",
+ "id": "attack-pattern--2a7c503c-ec0b-4697-9e9e-9a036af8b3f1",
+ "created_by_ref": "identity--fe9ad911-7029-4966-a74c-776f17908d1e",
+ "created": "2022-07-02T19:59:12.628924Z",
+ "modified": "2022-07-02T19:59:12.628924Z",
"name": "Seed Kernel of truth",
- "description": "TA08",
+ "description": "Wrap lies or altered context/facts around truths. Influence campaigns pursue a variety of objectives with respect to target audiences, prominent among them: 1. undermine a narrative commonly referenced in the target audience; or 2. promote a narrative less common in the target audience, but preferred by the attacker. In both cases, the attacker is presented with a heavy lift. They must change the relative importance of various narratives in the interpretation of events, despite contrary tendencies. When messaging makes use of factual reporting to promote these adjustments in the narrative space, they are less likely to be dismissed out of hand; when messaging can juxtapose a (factual) truth about current affairs with the (abstract) truth explicated in these narratives, propagandists can undermine or promote them selectively. Context matters.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1351,7 +1351,7 @@
}
],
"object_marking_refs": [
- "marking-definition--ff60f339-b9ec-4c6b-89bb-79e4740a345a"
+ "marking-definition--09c6b85a-54b3-425b-abb1-d196e40d30af"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -1364,12 +1364,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a94b4289-5956-4b89-a3a8-d1ed9b604840",
- "created_by_ref": "identity--4bba6178-e2f9-4a7d-99a0-674d73da8bf8",
- "created": "2022-07-02T17:28:36.943008Z",
- "modified": "2022-07-02T17:28:36.943008Z",
+ "id": "attack-pattern--a1035e5a-489e-48e5-9a08-4c02118440dc",
+ "created_by_ref": "identity--f873d380-dc93-4249-820c-80d0b0f08330",
+ "created": "2022-07-02T19:59:12.629365Z",
+ "modified": "2022-07-02T19:59:12.629365Z",
"name": "Chat apps",
- "description": "TA07",
+ "description": "Direct messaging via chat app is an increasing method of delivery. These messages are often automated and new delivery and storage methods make them anonymous, viral, and ephemeral. This is a difficult space to monitor, but also a difficult space to build acclaim or notoriety.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1384,7 +1384,7 @@
}
],
"object_marking_refs": [
- "marking-definition--f1901b11-0c26-4296-8180-bd1084534f1c"
+ "marking-definition--d53fa5af-9b3d-4646-96dd-9db9a5b1d73b"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -1397,12 +1397,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4c383d4a-da5d-4730-82a5-93901362e4e4",
- "created_by_ref": "identity--de60e095-b798-4043-8655-3ed84e82aaa0",
- "created": "2022-07-02T17:28:36.943332Z",
- "modified": "2022-07-02T17:28:36.943332Z",
+ "id": "attack-pattern--bdc9c3fd-6f34-4a70-b9a4-d028bce2ea8a",
+ "created_by_ref": "identity--1dfc724e-d69f-461f-8b6d-5580e6f4ab66",
+ "created": "2022-07-02T19:59:12.629714Z",
+ "modified": "2022-07-02T19:59:12.629714Z",
"name": "Use Encrypted Chat Apps",
- "description": "TA07",
+ "description": "Examples include Signal, WhatsApp, Discord, Wire, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1417,7 +1417,7 @@
}
],
"object_marking_refs": [
- "marking-definition--3c2259a5-4194-4c17-8b20-965b61c219f2"
+ "marking-definition--f1a8d4c2-1840-433f-886c-8556374dda80"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -1430,12 +1430,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--42bc5436-0436-4120-81f3-ebc41c61a157",
- "created_by_ref": "identity--9bf6e66d-85dc-42c2-b742-81ea30b64a3f",
- "created": "2022-07-02T17:28:36.943681Z",
- "modified": "2022-07-02T17:28:36.943681Z",
+ "id": "attack-pattern--a0a40ba8-5a7f-46a5-8bcc-8ea5f9bdd832",
+ "created_by_ref": "identity--13d5420b-1074-4db5-adfa-f2e5cfea90ed",
+ "created": "2022-07-02T19:59:12.630045Z",
+ "modified": "2022-07-02T19:59:12.630045Z",
"name": "Use Unencrypted Chats Apps",
- "description": "TA07",
+ "description": "Examples include SMS, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1450,7 +1450,7 @@
}
],
"object_marking_refs": [
- "marking-definition--cdac0b8f-298e-4fa6-838d-9fd6f238c6b1"
+ "marking-definition--06ef863e-ee0c-4beb-ad8d-70753b159674"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -1463,12 +1463,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--de49e2b8-5756-4dc9-9f52-ee053a9c9fbc",
- "created_by_ref": "identity--e4f4d93a-31b2-4e5a-b906-72ca0314f590",
- "created": "2022-07-02T17:28:36.943999Z",
- "modified": "2022-07-02T17:28:36.943999Z",
+ "id": "attack-pattern--a1460819-670d-48a8-8fd0-945c111b1860",
+ "created_by_ref": "identity--bae04830-cb66-4b4d-b534-05d9152ae12d",
+ "created": "2022-07-02T19:59:12.630382Z",
+ "modified": "2022-07-02T19:59:12.630382Z",
"name": "Seed distortions",
- "description": "TA08",
+ "description": "Try a wide variety of messages in the early hours surrounding an incident or event, to give a misleading account or impression. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1483,7 +1483,7 @@
}
],
"object_marking_refs": [
- "marking-definition--5760e34d-e246-4e07-9e85-9045d51c239c"
+ "marking-definition--6036d55a-b0da-45f1-9cba-abd3bfe08370"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -1496,12 +1496,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--91db7925-085a-4a77-97ca-d95ae0e1ebf2",
- "created_by_ref": "identity--f5b9130c-f997-45f7-9f92-6bc12a21e69b",
- "created": "2022-07-02T17:28:36.944322Z",
- "modified": "2022-07-02T17:28:36.944322Z",
+ "id": "attack-pattern--01643bc5-725d-4764-a19b-2bb004359165",
+ "created_by_ref": "identity--09650018-a5d0-4735-85b3-5339986d0d48",
+ "created": "2022-07-02T19:59:12.630712Z",
+ "modified": "2022-07-02T19:59:12.630712Z",
"name": "Use fake experts",
- "description": "TA08",
+ "description": "Use the fake experts that were set up during Establish Legitimacy. Pseudo-experts are disposable assets that often appear once and then disappear. Give \"credility\" to misinformation. Take advantage of credential bias",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1516,7 +1516,7 @@
}
],
"object_marking_refs": [
- "marking-definition--994a2ae2-512d-48d7-a533-c500cba6d3a5"
+ "marking-definition--77fae784-a245-4fbc-a20e-5d81073ddd34"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -1529,12 +1529,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b060ced6-1ae3-4eed-a7aa-197f6ab40036",
- "created_by_ref": "identity--08fd35f9-afaa-4c0a-b831-eb3790d33c50",
- "created": "2022-07-02T17:28:36.944638Z",
- "modified": "2022-07-02T17:28:36.944638Z",
+ "id": "attack-pattern--9d782db0-5bea-45cd-b27b-af2331d4f249",
+ "created_by_ref": "identity--d043f52a-0b41-4320-ad9e-04e34a716009",
+ "created": "2022-07-02T19:59:12.631045Z",
+ "modified": "2022-07-02T19:59:12.631045Z",
"name": "Use Search Engine Optimization",
- "description": "TA08",
+ "description": "Manipulate content engagement metrics (ie: Reddit & Twitter) to influence/impact news search results (e.g. Google), also elevates RT & Sputnik headline into Google news alert emails. aka \"Black-hat SEO\" ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1549,7 +1549,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7847d3b3-30f6-46b8-acaf-20f863c1bf63"
+ "marking-definition--82e560b5-5126-4dc4-b377-3f3589027881"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -1562,12 +1562,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--97c6b863-d500-4d89-a21a-0dc6df2e52ca",
- "created_by_ref": "identity--076635ce-d3e3-43eb-a005-5ca15a2c5509",
- "created": "2022-07-02T17:28:36.944956Z",
- "modified": "2022-07-02T17:28:36.944956Z",
+ "id": "attack-pattern--c20423d1-e1ea-45c5-b18d-1bd17cc72611",
+ "created_by_ref": "identity--25ebf7ae-88d3-43a2-ad35-2dc910b97c64",
+ "created": "2022-07-02T19:59:12.631373Z",
+ "modified": "2022-07-02T19:59:12.631373Z",
"name": "Censor social media as a political force",
- "description": "TA18",
+ "description": "Use political influence or the power of state to stop critical social media comments. Government requested/driven content take downs (see Google Transperancy reports).",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1582,7 +1582,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7e790b68-702b-4977-b046-53e6dd9a972d"
+ "marking-definition--d383593e-473d-4f33-8f6f-c56c7f930e0d"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -1595,12 +1595,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c96daf1f-ac43-40d9-88a7-0f6244a38c3c",
- "created_by_ref": "identity--c62b3acb-477a-4277-a980-da224e28c838",
- "created": "2022-07-02T17:28:36.945272Z",
- "modified": "2022-07-02T17:28:36.945272Z",
+ "id": "attack-pattern--46b33983-93aa-40b2-b70f-cbcf47e346e3",
+ "created_by_ref": "identity--449017f3-a995-4cbb-8b71-2d5de6bc90e1",
+ "created": "2022-07-02T19:59:12.631699Z",
+ "modified": "2022-07-02T19:59:12.631699Z",
"name": "Harass",
- "description": "TA18",
+ "description": "Threatening or harassing believers of opposing narratives refers to the use of intimidation techniques, including cyberbullying and doxing, to discourage opponents from voicing their dissent. An influence operation may threaten or harass believers of the opposing narratives to deter individuals from posting or proliferating conflicting content. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1615,7 +1615,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2448856f-1947-4c33-abdc-aad31687c14b"
+ "marking-definition--7280bf79-5ecf-42de-8c3b-47a7b799f894"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -1628,12 +1628,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--1d8883bc-3e8c-406d-ad8e-f7d660d05494",
- "created_by_ref": "identity--c0e3a9f3-db28-4270-b125-c8c15ab52242",
- "created": "2022-07-02T17:28:36.945596Z",
- "modified": "2022-07-02T17:28:36.945596Z",
+ "id": "attack-pattern--0678242b-030c-4ff5-8f9f-73a97253c8dc",
+ "created_by_ref": "identity--e80ee5d8-d71a-4071-9ae7-5697aa5f0e0a",
+ "created": "2022-07-02T19:59:12.632024Z",
+ "modified": "2022-07-02T19:59:12.632024Z",
"name": "Boycott/\"Cancel\" Opponents",
- "description": "TA18",
+ "description": "Cancel culture refers to the phenomenon in which individuals collectively refrain from supporting an individual, organization, business, or other entity, usually following a real or falsified controversy. An influence operation may exploit cancel culture by emphasizing an adversary\u2019s problematic or disputed behavior and presenting its own content as an alternative. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1648,7 +1648,7 @@
}
],
"object_marking_refs": [
- "marking-definition--d681785f-ab54-4f82-bf66-75d3d447bba9"
+ "marking-definition--276e2501-325a-4b70-96ff-6e62f95ddd7f"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -1661,12 +1661,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--1b11a06d-2772-4b32-a70d-e64f6434bd3c",
- "created_by_ref": "identity--970c32d4-a501-498e-b15b-8c70176217a6",
- "created": "2022-07-02T17:28:36.945916Z",
- "modified": "2022-07-02T17:28:36.945916Z",
+ "id": "attack-pattern--dd6177db-6803-454a-9ab5-0ab7dcfacde6",
+ "created_by_ref": "identity--493f812f-fcea-4bf7-9a3a-c79748e2a8e3",
+ "created": "2022-07-02T19:59:12.632362Z",
+ "modified": "2022-07-02T19:59:12.632362Z",
"name": "Harass People Based on Identities",
- "description": "TA18",
+ "description": "Examples include social identities like gender, sexuality, race, ethnicity, religion, ability, nationality, etc. as well as roles and occupations like journalist or activist.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1681,7 +1681,7 @@
}
],
"object_marking_refs": [
- "marking-definition--57ad46db-bf70-435f-9d17-10c6651743c0"
+ "marking-definition--edf44f9f-a463-4594-9e5c-02d3816d381a"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -1694,12 +1694,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c800d67d-07dd-4e61-8b9f-0ebd477c9afb",
- "created_by_ref": "identity--a41714c1-45b0-4e82-b3a5-9691a7d6254b",
- "created": "2022-07-02T17:28:36.946243Z",
- "modified": "2022-07-02T17:28:36.946243Z",
+ "id": "attack-pattern--0388aa19-891a-4849-87c0-ec074291bb94",
+ "created_by_ref": "identity--cb1f3576-d500-4171-a245-d130ee1fc562",
+ "created": "2022-07-02T19:59:12.63269Z",
+ "modified": "2022-07-02T19:59:12.63269Z",
"name": "Threaten to Dox",
- "description": "TA18",
+ "description": "Doxing refers to online harassment in which individuals publicly release private information about another individual, including names, addresses, employment information, pictures, family members, and other sensitive information. An influence operation may dox its opposition to encourage individuals aligned with operation narratives to harass the doxed individuals themselves or otherwise discourage the doxed individuals from posting or proliferating conflicting content. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1714,7 +1714,7 @@
}
],
"object_marking_refs": [
- "marking-definition--f20dd9d4-ba3c-42b8-979d-eb8cbaab3b73"
+ "marking-definition--93e3de6b-997a-4e47-a293-8f72a1427a0c"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -1727,12 +1727,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--964713f6-d78e-4795-a89f-a4700996614a",
- "created_by_ref": "identity--0bc96d3b-c45b-4d8a-896e-0a73db97b600",
- "created": "2022-07-02T17:28:36.946583Z",
- "modified": "2022-07-02T17:28:36.946583Z",
+ "id": "attack-pattern--9fbaa5a6-9bbd-4819-866b-22d1a11f8592",
+ "created_by_ref": "identity--fa8305af-3ec5-4cb3-81ee-8a919fbb6f1f",
+ "created": "2022-07-02T19:59:12.633026Z",
+ "modified": "2022-07-02T19:59:12.633026Z",
"name": "Dox",
- "description": "TA18",
+ "description": "Doxing refers to online harassment in which individuals publicly release private information about another individual, including names, addresses, employment information, pictures, family members, and other sensitive information. An influence operation may dox its opposition to encourage individuals aligned with operation narratives to harass the doxed individuals themselves or otherwise discourage the doxed individuals from posting or proliferating conflicting content. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1747,7 +1747,7 @@
}
],
"object_marking_refs": [
- "marking-definition--9928648e-eee0-41d9-ae74-a84378cedb30"
+ "marking-definition--2386ad57-e1d1-49bf-9ab4-d27265adcbe6"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -1760,12 +1760,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--2f9be5f3-9474-46c1-9bf8-038577c4b6a8",
- "created_by_ref": "identity--436a153e-6a13-48ad-a2af-c9e7835e72c6",
- "created": "2022-07-02T17:28:36.946914Z",
- "modified": "2022-07-02T17:28:36.946914Z",
+ "id": "attack-pattern--1059cdf7-3b45-40e6-93d3-b25ef3b6afac",
+ "created_by_ref": "identity--b9b5c65a-3913-4a60-9448-6d4974a5c8e1",
+ "created": "2022-07-02T19:59:12.633371Z",
+ "modified": "2022-07-02T19:59:12.633371Z",
"name": "Flooding the Information Space",
- "description": "TA17",
+ "description": "Flooding and/or mobbing social media channels feeds and/or hashtag with excessive volume of content to control/shape online conversations and/or drown out opposing points of view. Bots and/or patriotic trolls are effective tools to acheive this effect.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1780,7 +1780,7 @@
}
],
"object_marking_refs": [
- "marking-definition--8b1f7930-6755-4a68-b5b7-7c56854b3178"
+ "marking-definition--bc33bc74-32ca-49cf-8fcb-c194ed40ccf9"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -1793,12 +1793,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--2c7e9fd6-8fe3-448e-99e5-81d4cc6fa9e4",
- "created_by_ref": "identity--db6a9846-f6ad-4cf5-9421-38011a93c696",
- "created": "2022-07-02T17:28:36.947255Z",
- "modified": "2022-07-02T17:28:36.947255Z",
+ "id": "attack-pattern--7cab144f-1942-4393-8f30-25d1f73160b6",
+ "created_by_ref": "identity--2796d1b8-1b0c-4dad-81f5-cdc2c42438d2",
+ "created": "2022-07-02T19:59:12.633703Z",
+ "modified": "2022-07-02T19:59:12.633703Z",
"name": "Trolls amplify and manipulate",
- "description": "TA17",
+ "description": "Use trolls to amplify narratives and/or manipulate narratives. Fake profiles/sockpuppets operating to support individuals/narratives from the entire political spectrum (left/right binary). Operating with increased emphasis on promoting local content and promoting real Twitter users generating their own, often divisive political content, as it's easier to amplify existing content than create new/original content. Trolls operate where ever there's a socially divisive issue (issues that can/are be politicized).",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1813,7 +1813,7 @@
}
],
"object_marking_refs": [
- "marking-definition--5a4bd136-ad2f-4f6b-8432-cd8f1e85846f"
+ "marking-definition--62e350a7-bb0d-4668-8986-6599fb88d9c9"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -1826,12 +1826,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--ad2ca7cc-3998-441a-b042-a004c07f4b54",
- "created_by_ref": "identity--79f4ba8a-cb05-4b9f-a5c9-dc35090ed251",
- "created": "2022-07-02T17:28:36.94767Z",
- "modified": "2022-07-02T17:28:36.94767Z",
+ "id": "attack-pattern--748bd382-1819-41d9-addc-de7081097b73",
+ "created_by_ref": "identity--d2d19e9f-ba7d-4bf0-84f0-6c17ee813d6b",
+ "created": "2022-07-02T19:59:12.634036Z",
+ "modified": "2022-07-02T19:59:12.634036Z",
"name": "Hijack existing hashtag",
- "description": "TA17",
+ "description": "Take over an existing hashtag to drive exposure.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1846,7 +1846,7 @@
}
],
"object_marking_refs": [
- "marking-definition--bdd9e3d5-d2e2-45ab-a601-cc98e1d26784"
+ "marking-definition--861a80d4-23e8-424d-9020-53653045adba"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -1859,12 +1859,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--095aa344-86dc-4488-a1d7-a8a7c1363d4a",
- "created_by_ref": "identity--c0f933b4-d46e-4419-868f-db37873512be",
- "created": "2022-07-02T17:28:36.948044Z",
- "modified": "2022-07-02T17:28:36.948044Z",
+ "id": "attack-pattern--a6e4691f-4907-4270-ab84-fbb1b01be00c",
+ "created_by_ref": "identity--2011c19d-8b82-4ba8-b189-8e29794d2689",
+ "created": "2022-07-02T19:59:12.634456Z",
+ "modified": "2022-07-02T19:59:12.634456Z",
"name": "Bots Amplify via Automated Forwarding and Reposting",
- "description": "TA17",
+ "description": "Automated forwarding and reposting refer to the proliferation of operation content using automated means, such as artificial intelligence or social media bots. An influence operation may use automated activity to increase content exposure without dedicating the resources, including personnel and time, traditionally required to forward and repost content. \nUse bots to amplify narratives above algorithm thresholds. Bots are automated/programmed profiles designed to amplify content (ie: automatically retweet or like) and give appearance it's more \"popular\" than it is. They can operate as a network, to function in a coordinated/orchestrated manner. In some cases (more so now) they are an inexpensive/disposable assets used for minimal deployment as bot detection tools improve and platforms are more responsive.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1879,7 +1879,7 @@
}
],
"object_marking_refs": [
- "marking-definition--778b8674-094f-4ba7-b58c-79a77b05dea5"
+ "marking-definition--dc054ca6-5041-44df-85a7-d2542b491c76"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -1892,12 +1892,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--f16b324b-cb5f-496e-8575-f3ff97963e54",
- "created_by_ref": "identity--66f4fccb-98c6-4a94-87c1-9a3d5d40487d",
- "created": "2022-07-02T17:28:36.948384Z",
- "modified": "2022-07-02T17:28:36.948384Z",
+ "id": "attack-pattern--e8bb5015-934a-41d1-8bf9-812973ea34ac",
+ "created_by_ref": "identity--107f3916-4a92-440e-962f-cc9b980f53ff",
+ "created": "2022-07-02T19:59:12.634843Z",
+ "modified": "2022-07-02T19:59:12.634843Z",
"name": "Utilize Spamoflauge",
- "description": "TA17",
+ "description": "Spamoflauge refers to the practice of disguising spam messages as legitimate. Spam refers to the use of electronic messaging systems to send out unrequested or unwanted messages in bulk. Simple methods of spamoflauge include replacing letters with numbers to fool keyword-based email spam filters, for example, \"you've w0n our jackp0t!\". Spamoflauge may extend to more complex techniques such as modifying the grammar or word choice of the language, casting messages as images which spam detectors cannot automatically read, or encapsulating messages in password protected attachments, such as .pdf or .zip files. Influence operations may use spamoflauge to avoid spam filtering systems and increase the likelihood of the target audience receiving operation messaging. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1912,7 +1912,7 @@
}
],
"object_marking_refs": [
- "marking-definition--887ec817-05d2-4027-94cb-362a1b1d2abc"
+ "marking-definition--6fb5e584-3f93-4e19-bc4d-ca3edf878743"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -1925,12 +1925,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a2053dcc-f24c-4aa9-8a84-4f5b3d3b2a95",
- "created_by_ref": "identity--95ed6bc6-bbf1-42dd-9eb4-aebaf73a84c3",
- "created": "2022-07-02T17:28:36.948731Z",
- "modified": "2022-07-02T17:28:36.948731Z",
+ "id": "attack-pattern--86a9f2a7-2d8c-4d82-9b68-60c133cbe662",
+ "created_by_ref": "identity--84b3ecc5-a7e9-4457-9e95-17e9cdbc68ec",
+ "created": "2022-07-02T19:59:12.635185Z",
+ "modified": "2022-07-02T19:59:12.635185Z",
"name": "Conduct Swarming",
- "description": "TA17",
+ "description": "Swarming refers to the coordinated use of accounts to overwhelm the information space with operation content. Unlike information flooding, swarming centers exclusively around a specific event or actor rather than a general narrative. Swarming relies on \u201chorizontal communication\u201d between information assets rather than a top-down, vertical command-and-control approach. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1945,7 +1945,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a08d0d41-e5b9-4664-9c6c-cc15a4af1069"
+ "marking-definition--aaf5e36e-03f1-463c-acfb-47afc5e12add"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -1958,12 +1958,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--13942c8f-1337-4de0-8b7b-3802fa4c7276",
- "created_by_ref": "identity--3fd6c410-4981-48ce-aeb6-c02ba2b2e4c3",
- "created": "2022-07-02T17:28:36.949061Z",
- "modified": "2022-07-02T17:28:36.949061Z",
+ "id": "attack-pattern--13ff62f6-6719-4ec4-b786-0a19eef53709",
+ "created_by_ref": "identity--7cad264d-b93c-448f-84cc-b91fa6377778",
+ "created": "2022-07-02T19:59:12.635522Z",
+ "modified": "2022-07-02T19:59:12.635522Z",
"name": "Conduct Keyword Squatting",
- "description": "TA17",
+ "description": "Keyword squatting refers to the creation of online content, such as websites, articles, or social media accounts, around a specific search engine-optimized term to overwhelm the search results of that term. An influence may keyword squat to increase content exposure to target audience members who query the exploited term in a search engine and manipulate the narrative around the term. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -1978,7 +1978,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2e87c460-bd21-422c-8553-64c1da11faff"
+ "marking-definition--f360526f-6ed9-4d00-96b2-6f979dcd6895"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -1991,12 +1991,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a921ea75-6d2f-4c29-a2ab-2710e554af59",
- "created_by_ref": "identity--2cf13eaa-affd-4359-8354-b65f97ddb14e",
- "created": "2022-07-02T17:28:36.949386Z",
- "modified": "2022-07-02T17:28:36.949386Z",
+ "id": "attack-pattern--01ca6965-45eb-49e0-85c3-64092e2fc7cf",
+ "created_by_ref": "identity--96689995-f346-45dd-b3e3-74d7709ce2e2",
+ "created": "2022-07-02T19:59:12.635921Z",
+ "modified": "2022-07-02T19:59:12.635921Z",
"name": "Inauthentic Sites Amplify News and Narratives",
- "description": "TA17",
+ "description": "Inauthentic sites circulate cross-post stories and amplify narratives. Often these sites have no masthead, bylines or attribution.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2011,7 +2011,7 @@
}
],
"object_marking_refs": [
- "marking-definition--9c5c84db-8553-4334-8ba6-54b93b8fcd1e"
+ "marking-definition--a6ea8e2e-a42e-4604-8cca-2501fc436c9e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -2024,12 +2024,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--7565c59e-0831-42ce-a211-25058d5159bf",
- "created_by_ref": "identity--9df81219-bc44-487e-803e-520e94763fd3",
- "created": "2022-07-02T17:28:36.94971Z",
- "modified": "2022-07-02T17:28:36.94971Z",
+ "id": "attack-pattern--e8310cb2-e346-47a7-8410-7f0dc34f2ac2",
+ "created_by_ref": "identity--9f6bee91-8c4f-4947-a08f-c0666b3895e1",
+ "created": "2022-07-02T19:59:12.636268Z",
+ "modified": "2022-07-02T19:59:12.636268Z",
"name": "Organize Events",
- "description": "TA10",
+ "description": "Coordinate and promote real-world events across media platforms, e.g. rallies, protests, gatherings in support of incident narratives.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2044,7 +2044,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c14e2993-17ce-4b69-ac75-a45370951072"
+ "marking-definition--93fb6d9e-0b65-4cfb-9ac3-f213aec8c61f"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -2057,12 +2057,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c472a384-f73e-4d83-b22d-6b42fb25a2e7",
- "created_by_ref": "identity--3d67dec8-53a7-49eb-888a-b711521917dd",
- "created": "2022-07-02T17:28:36.950043Z",
- "modified": "2022-07-02T17:28:36.950043Z",
+ "id": "attack-pattern--3cdec22a-d46b-4fab-b15a-20db08e58221",
+ "created_by_ref": "identity--93c0885b-27f7-481c-9e1f-6a8d5ba1a03d",
+ "created": "2022-07-02T19:59:12.636604Z",
+ "modified": "2022-07-02T19:59:12.636604Z",
"name": "Pay for Physical Action",
- "description": "TA10",
+ "description": "Paying for physical action occurs when an influence operation pays individuals to act in the physical realm. An influence operation may pay for physical action to create specific situations and frame them in a way that supports operation narratives, for example, paying a group of people to burn a car to later post an image of the burning car and frame it as an act of protest. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2077,7 +2077,7 @@
}
],
"object_marking_refs": [
- "marking-definition--169c4f3d-5eda-43a2-86f7-c53fbf5fc13f"
+ "marking-definition--ca889b23-874b-43be-afae-452e6549f21c"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -2090,12 +2090,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4e5b4790-3f96-44c5-9fb4-24cd84d57c31",
- "created_by_ref": "identity--438a2705-0d5e-46be-bc34-73bff9eb4d9e",
- "created": "2022-07-02T17:28:36.950372Z",
- "modified": "2022-07-02T17:28:36.950372Z",
+ "id": "attack-pattern--8799f5ac-c50d-4e5f-8117-fb242b7617be",
+ "created_by_ref": "identity--080e3d42-dad2-4a56-8d55-b3d6228c96b7",
+ "created": "2022-07-02T19:59:12.636932Z",
+ "modified": "2022-07-02T19:59:12.636932Z",
"name": "Conduct Symbolic Action",
- "description": "TA10",
+ "description": "Symbolic action refers to activities specifically intended to advance an operation\u2019s narrative by signaling something to the audience, for example, a military parade supporting a state\u2019s narrative of military superiority. An influence operation may use symbolic action to create falsified evidence supporting operation narratives in the physical information space. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2110,7 +2110,7 @@
}
],
"object_marking_refs": [
- "marking-definition--9918b3c7-2cec-4222-87c8-ed8c544c0133"
+ "marking-definition--d3281f0d-4fa2-4407-8baa-5564a411274c"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -2123,12 +2123,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a395b52a-994b-4887-b339-d28a65ea46e4",
- "created_by_ref": "identity--4d1106b8-63dd-4a8b-af96-b765fc16840c",
- "created": "2022-07-02T17:28:36.950727Z",
- "modified": "2022-07-02T17:28:36.950727Z",
+ "id": "attack-pattern--405b0ae6-af27-46f0-b88e-96847318690c",
+ "created_by_ref": "identity--2f667329-3963-46a1-a2a6-a798b2634267",
+ "created": "2022-07-02T19:59:12.637258Z",
+ "modified": "2022-07-02T19:59:12.637258Z",
"name": "Play the long game",
- "description": "TA11",
+ "description": "Play the long game refers to two phenomena: 1. To plan messaging and allow it to grow organically without conducting your own amplification. This is methodical and slow and requires years for the message to take hold 2. To develop a series of seemingly disconnected messaging narratives that eventually combine into a new narrative.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2143,7 +2143,7 @@
}
],
"object_marking_refs": [
- "marking-definition--9f31107d-69a5-4c2b-a036-54a1d0957894"
+ "marking-definition--1ebf30b4-f360-4780-834e-7158ea941df6"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -2156,12 +2156,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--7f6a9aa4-712f-4879-9257-4989ff85059d",
- "created_by_ref": "identity--451d0251-3a6a-4239-83d8-c5ce970f5b9a",
- "created": "2022-07-02T17:28:36.951061Z",
- "modified": "2022-07-02T17:28:36.951061Z",
+ "id": "attack-pattern--4ff0faac-951d-495b-a0f1-a23a1b39d24b",
+ "created_by_ref": "identity--0eded895-6d69-42f6-a8d5-c40d8fd215fc",
+ "created": "2022-07-02T19:59:12.63759Z",
+ "modified": "2022-07-02T19:59:12.63759Z",
"name": "Continue to Amplify",
- "description": "TA11",
+ "description": "continue narrative or message amplification after the main incident work has finished",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2176,7 +2176,7 @@
}
],
"object_marking_refs": [
- "marking-definition--d7b93def-0b80-49a1-8826-e40418992c52"
+ "marking-definition--759822c1-291e-44e4-95b7-a8ec58ce87dd"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -2189,12 +2189,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--e99f96c7-38d4-4fa9-b337-984da5ff0e9c",
- "created_by_ref": "identity--ff5bbe73-3479-42b4-9b7d-0e9028d50242",
- "created": "2022-07-02T17:28:36.951381Z",
- "modified": "2022-07-02T17:28:36.951381Z",
+ "id": "attack-pattern--1df3f525-2142-439a-94c1-a600464e1e6e",
+ "created_by_ref": "identity--fad6e3e4-434b-4351-a9a9-ff717bf0c296",
+ "created": "2022-07-02T19:59:12.637924Z",
+ "modified": "2022-07-02T19:59:12.637924Z",
"name": "Sell Merchandise",
- "description": "TA10",
+ "description": "Sell mechandise refers to getting the message or narrative into physical space in the offline world while making money",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2209,7 +2209,7 @@
}
],
"object_marking_refs": [
- "marking-definition--cfd1b546-76b4-42c7-8c53-8fa3a054330d"
+ "marking-definition--38b3f210-25ee-412d-b683-bc0cfd6c6353"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -2222,12 +2222,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--3603a527-d7c9-4562-ae2d-e66c49d597c5",
- "created_by_ref": "identity--c29dd83e-f875-4496-8482-ba54f2fdd2c4",
- "created": "2022-07-02T17:28:36.951707Z",
- "modified": "2022-07-02T17:28:36.951707Z",
+ "id": "attack-pattern--7f3088ee-6c4b-48d3-894e-2b33db9d6260",
+ "created_by_ref": "identity--65eb7b06-827c-411c-9751-21fa895ca05b",
+ "created": "2022-07-02T19:59:12.638252Z",
+ "modified": "2022-07-02T19:59:12.638252Z",
"name": "Sell Merchandise",
- "description": "TA10",
+ "description": "Selling merchandise refers to the sale of often branded items to the target audience. An influence operation may sell merchandise to raise funds and promote its messaging in the physical information space, for example, by selling t-shirts with operational messaging displayed on the clothing. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2242,7 +2242,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2b2cf559-3b13-45de-be95-97ef4de6c069"
+ "marking-definition--ddad1c12-fcdd-444f-81ea-a05f3f6c9566"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -2255,12 +2255,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--fa82d693-19f4-46be-864a-a660616dd060",
- "created_by_ref": "identity--e9eba55a-5895-4483-9a26-796eaec2400f",
- "created": "2022-07-02T17:28:36.952026Z",
- "modified": "2022-07-02T17:28:36.952026Z",
+ "id": "attack-pattern--87287001-e94e-42eb-832d-650f69b1c050",
+ "created_by_ref": "identity--65bda5aa-3fe5-48b6-a4ac-ede436e17a8c",
+ "created": "2022-07-02T19:59:12.638588Z",
+ "modified": "2022-07-02T19:59:12.638588Z",
"name": "Prepare Physical Broadcast Capabilities",
- "description": "TA15",
+ "description": "Create or coopt broadcast capabilities (e.g. TV, radio etc).",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2275,7 +2275,7 @@
}
],
"object_marking_refs": [
- "marking-definition--d0245c31-9575-4301-af40-e4231a6b504a"
+ "marking-definition--0817c012-87b4-478e-9283-3a3f547c7cdd"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -2288,12 +2288,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--948a6688-c89b-481e-a773-a41ef3398a2e",
- "created_by_ref": "identity--e9e4e961-7e23-485c-9e42-d3e74e314fc6",
- "created": "2022-07-02T17:28:36.952348Z",
- "modified": "2022-07-02T17:28:36.952348Z",
+ "id": "attack-pattern--85b91869-8bfa-4bae-846d-5c5645e81f13",
+ "created_by_ref": "identity--0862027b-8a54-45bc-a454-a01650686e46",
+ "created": "2022-07-02T19:59:12.638913Z",
+ "modified": "2022-07-02T19:59:12.638913Z",
"name": "Degrade Adversary",
- "description": "TA02",
+ "description": "Plan to degrade an adversary\u2019s image or ability to act. This could include preparation and use of harmful information about the adversary\u2019s actions or reputation.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2308,7 +2308,7 @@
}
],
"object_marking_refs": [
- "marking-definition--76e47b23-f952-416e-92ab-f983170749a5"
+ "marking-definition--01dc8f37-1d47-4d14-b91f-45e68189e5d0"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -2321,12 +2321,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--1761fa87-94c7-4913-a5a6-4f12626d74ed",
- "created_by_ref": "identity--62cb671f-52bd-4e92-926f-455e2eb2c87a",
- "created": "2022-07-02T17:28:36.952704Z",
- "modified": "2022-07-02T17:28:36.952704Z",
+ "id": "attack-pattern--e64fc026-2d04-4cd0-b056-29f89bb53628",
+ "created_by_ref": "identity--fae5b631-9c77-492a-8db9-c4f9a8aab31f",
+ "created": "2022-07-02T19:59:12.639248Z",
+ "modified": "2022-07-02T19:59:12.639248Z",
"name": "Respond to Breaking News Event or Active Crisis",
- "description": "TA14",
+ "description": "Media attention on a story or event is heightened during a breaking news event, where unclear facts and incomplete information increase speculation, rumors, and conspiracy theories, which are all vulnerable to manipulation. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2341,7 +2341,7 @@
}
],
"object_marking_refs": [
- "marking-definition--4b80ef0a-adc2-42e9-9908-5770de4b1f1f"
+ "marking-definition--30045507-898e-46b1-86e7-8bcde331f297"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -2354,12 +2354,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c2651250-61d5-4cfa-92f2-4745198e0c29",
- "created_by_ref": "identity--2231528e-2ec2-4d72-a613-c137f1eba535",
- "created": "2022-07-02T17:28:36.953023Z",
- "modified": "2022-07-02T17:28:36.953023Z",
+ "id": "attack-pattern--8e486393-6d94-4855-989e-9a9fa9acdd13",
+ "created_by_ref": "identity--ee117265-a292-4a05-a9da-e856f57630d1",
+ "created": "2022-07-02T19:59:12.639572Z",
+ "modified": "2022-07-02T19:59:12.639572Z",
"name": "Segment Audiences",
- "description": "TA13",
+ "description": "Create audience segmentations by features of interest to the influence campaign, including political affiliation, geographic location, income, demographics, and psychographics. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2374,7 +2374,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e9d1a4f7-c217-487a-9a68-29db650709b4"
+ "marking-definition--115c0f3e-a0a1-434d-abf2-c28ceeacb491"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -2387,12 +2387,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--734be066-e37f-4e86-b819-a868c2c4d798",
- "created_by_ref": "identity--47ad61f0-7daf-41d6-9539-9f3444c56d8c",
- "created": "2022-07-02T17:28:36.953346Z",
- "modified": "2022-07-02T17:28:36.953346Z",
+ "id": "attack-pattern--b8e80736-22ad-481d-9ea0-eebd0944187e",
+ "created_by_ref": "identity--d6e9d144-526c-493c-9cfe-e5a2e6e726e8",
+ "created": "2022-07-02T19:59:12.639896Z",
+ "modified": "2022-07-02T19:59:12.639896Z",
"name": "Geographic Segmentation",
- "description": "TA13",
+ "description": "An influence operation may target populations in a specific geographic location, such as a region, state, or city. An influence operation may use geographic segmentation to Create Localized Content (see: Establish Legitimacy). ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2407,7 +2407,7 @@
}
],
"object_marking_refs": [
- "marking-definition--ba5c00ee-4be3-4754-8b84-d25835264957"
+ "marking-definition--59d93956-7432-43c5-96e8-511b95b9cb1b"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -2420,12 +2420,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--da6adc03-a37d-45bf-973c-1297375f3f94",
- "created_by_ref": "identity--9922dc47-7bf3-4dbf-9d2f-87e7cea04781",
- "created": "2022-07-02T17:28:36.953668Z",
- "modified": "2022-07-02T17:28:36.953668Z",
+ "id": "attack-pattern--a87a01a1-ae12-4859-8ad3-faeb0dd458af",
+ "created_by_ref": "identity--03de22a0-3057-4861-82b2-c57865dd5e85",
+ "created": "2022-07-02T19:59:12.640215Z",
+ "modified": "2022-07-02T19:59:12.640215Z",
"name": "Demographic Segmentation",
- "description": "TA13",
+ "description": "An influence operation may target populations based on demographic segmentation, including age, gender, and income. Demographic segmentation may be useful for influence operations aiming to change state policies that affect a specific population sector. For example, an influence operation attempting to influence Medicare funding in the United States would likely target U.S. voters over 65 years of age. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2440,7 +2440,7 @@
}
],
"object_marking_refs": [
- "marking-definition--877c1556-6477-4d45-8bb5-da084b772050"
+ "marking-definition--70caef3e-4a85-4c5d-a4a6-d1ffd5c3f57a"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -2453,12 +2453,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--96893208-0e96-4154-b045-4fc1bdaf4af3",
- "created_by_ref": "identity--5983c15a-af56-4a78-8b3c-bfd4071f97c8",
- "created": "2022-07-02T17:28:36.953991Z",
- "modified": "2022-07-02T17:28:36.953991Z",
+ "id": "attack-pattern--15bd2bb3-531e-4a14-8650-613bf8dda25c",
+ "created_by_ref": "identity--ea577b4d-c331-4c65-b032-44577305e622",
+ "created": "2022-07-02T19:59:12.64054Z",
+ "modified": "2022-07-02T19:59:12.64054Z",
"name": "Economic Segmentation",
- "description": "TA13",
+ "description": "An influence operation may target populations based on their income bracket, wealth, or other financial or economic division. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2473,7 +2473,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7d598aca-3017-40f2-9e49-ae82855b70bf"
+ "marking-definition--24a4b640-e34c-44dc-aa8e-591e9fef9e5f"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -2486,12 +2486,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--d4a81525-7093-4cf1-8a25-5f65270f9663",
- "created_by_ref": "identity--747da886-528f-4535-baf2-70ebc56a21e1",
- "created": "2022-07-02T17:28:36.954319Z",
- "modified": "2022-07-02T17:28:36.954319Z",
+ "id": "attack-pattern--c3f5bd0d-a29b-43ba-b455-ec9ef00f05b1",
+ "created_by_ref": "identity--a4baa2d5-cdef-4210-ab9e-3866033b2406",
+ "created": "2022-07-02T19:59:12.640897Z",
+ "modified": "2022-07-02T19:59:12.640897Z",
"name": "Psychographic Segmentation",
- "description": "TA13",
+ "description": "An influence operation may target populations based on psychographic segmentation, which uses audience values and decision-making processes. An operation may individually gather psychographic data with its own surveys or collection tools or externally purchase data from social media companies or online surveys, such as personality quizzes. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2506,7 +2506,7 @@
}
],
"object_marking_refs": [
- "marking-definition--867f2693-67db-4758-a04e-b397bc84e138"
+ "marking-definition--c1a166ba-5bfa-4a83-b8a7-db5bc55b6ca3"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -2519,12 +2519,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--3ff7e5b9-ac4b-44f9-81d7-1475ee208c20",
- "created_by_ref": "identity--d0ea6102-778f-4d35-a141-4d7ab4a8dd71",
- "created": "2022-07-02T17:28:36.954654Z",
- "modified": "2022-07-02T17:28:36.954654Z",
+ "id": "attack-pattern--57be87ef-21e0-478e-9afc-996a244602f2",
+ "created_by_ref": "identity--83cc907f-2378-49ff-9241-c79b32db33ca",
+ "created": "2022-07-02T19:59:12.641254Z",
+ "modified": "2022-07-02T19:59:12.641254Z",
"name": "Political Segmentation",
- "description": "TA13",
+ "description": "An influence operation may target populations based on their political affiliations, especially when aiming to manipulate voting or change policy.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2539,7 +2539,7 @@
}
],
"object_marking_refs": [
- "marking-definition--5f9a364f-d1e8-42f6-a108-bba8d4b1eb70"
+ "marking-definition--9816e4a9-d3e8-4991-a773-c483c082e4e6"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -2552,12 +2552,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--65b42640-21d6-43c8-8dad-3faa2e5079d7",
- "created_by_ref": "identity--715aa3a5-bdd9-40cc-a6ea-56fb7f8c32b2",
- "created": "2022-07-02T17:28:36.954984Z",
- "modified": "2022-07-02T17:28:36.954984Z",
+ "id": "attack-pattern--55a6e8fc-195d-4a23-99f2-c118716ccf85",
+ "created_by_ref": "identity--0882da00-b166-4bef-8e84-feade215cba4",
+ "created": "2022-07-02T19:59:12.641593Z",
+ "modified": "2022-07-02T19:59:12.641593Z",
"name": "Determine Target Audiences",
- "description": "TA01",
+ "description": "Determining the target audiences (segments of the population) who will receive campaign narratives and artifacts intended to achieve the strategic ends.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2572,7 +2572,7 @@
}
],
"object_marking_refs": [
- "marking-definition--4409a307-4123-4a6a-a184-5037031f6097"
+ "marking-definition--5dbdcbb9-9b94-4777-a491-436c6e7a1308"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -2585,12 +2585,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--3a537720-049d-431e-84ee-33627eb44661",
- "created_by_ref": "identity--02ab167a-a990-4a18-bc06-c7cf6a1a272e",
- "created": "2022-07-02T17:28:36.955313Z",
- "modified": "2022-07-02T17:28:36.955313Z",
+ "id": "attack-pattern--c3933a7e-49a9-48fd-a1f9-a871e3a387ea",
+ "created_by_ref": "identity--ac882cd8-35c6-4fbc-9e47-75d149a7fe48",
+ "created": "2022-07-02T19:59:12.641928Z",
+ "modified": "2022-07-02T19:59:12.641928Z",
"name": "Determine Strategic Ends",
- "description": "TA01",
+ "description": "Determining the campaigns goals or objectives. Examples include achieving achieving geopolitical advantage like undermining trust in an adversary, gaining domestic political advantage, achieving financial gain, or attaining a policy change, ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2605,7 +2605,7 @@
}
],
"object_marking_refs": [
- "marking-definition--71798dc3-96c8-4bfd-9201-e3caa51814d0"
+ "marking-definition--af5c716e-fbe6-4c6d-96af-b9bf757b528a"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -2618,12 +2618,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--1b7f7c35-42b5-4fd3-828d-aff89f941850",
- "created_by_ref": "identity--00f4d831-60e1-4e33-95b2-77b1bd8162ef",
- "created": "2022-07-02T17:28:36.955635Z",
- "modified": "2022-07-02T17:28:36.955635Z",
+ "id": "attack-pattern--1899a266-350e-4e86-ba2a-d783744ff76d",
+ "created_by_ref": "identity--43cb3419-f997-45de-bbab-300f2db14906",
+ "created": "2022-07-02T19:59:12.642258Z",
+ "modified": "2022-07-02T19:59:12.642258Z",
"name": "Dismiss",
- "description": "TA02",
+ "description": "Push back against criticism by dismissing your critics. This might be arguing that the critics use a different standard for you than with other actors or themselves; or arguing that their criticism is biased.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2638,7 +2638,7 @@
}
],
"object_marking_refs": [
- "marking-definition--eaea6a55-8a6d-4460-85ce-63ec5302ec5a"
+ "marking-definition--e29453eb-0dae-4f36-be8d-8e1b2958e147"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -2651,12 +2651,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--11300333-274b-4c70-84a7-c0d5ba379d34",
- "created_by_ref": "identity--663f9601-2b42-4590-b655-c4bc542f02c1",
- "created": "2022-07-02T17:28:36.955953Z",
- "modified": "2022-07-02T17:28:36.955953Z",
+ "id": "attack-pattern--cf6ea412-b1f5-46ef-839b-9a550418d5c0",
+ "created_by_ref": "identity--04fe0474-f10e-4552-8f5e-7158aba4546f",
+ "created": "2022-07-02T19:59:12.642582Z",
+ "modified": "2022-07-02T19:59:12.642582Z",
"name": "Discredit Credible Sources",
- "description": "TA02",
+ "description": "Plan to delegitimize the media landscape and degrade public trust in reporting, by discrediting credible sources. This makes it easier to promote influence operation content.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2671,7 +2671,7 @@
}
],
"object_marking_refs": [
- "marking-definition--4770b304-99bf-4eb3-a7ef-c39191c13a88"
+ "marking-definition--5be7fa61-2b10-4583-8c9c-9f300864e5f1"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -2684,12 +2684,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--ac73ee9c-a805-4ec9-8b32-236cbd47989f",
- "created_by_ref": "identity--04a81869-584e-45a5-872e-277140a86bfe",
- "created": "2022-07-02T17:28:36.956272Z",
- "modified": "2022-07-02T17:28:36.956272Z",
+ "id": "attack-pattern--d92b1208-271a-4e70-ad86-2ecc61c2033f",
+ "created_by_ref": "identity--dc371a33-51e4-48f9-a98f-cc39ae8cb87f",
+ "created": "2022-07-02T19:59:12.642907Z",
+ "modified": "2022-07-02T19:59:12.642907Z",
"name": "Distort",
- "description": "TA02",
+ "description": "Twist the narrative. Take information, or artifacts like images, and change the framing around them.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2704,7 +2704,7 @@
}
],
"object_marking_refs": [
- "marking-definition--f69b3118-be9a-4816-865c-2db18ec50ce3"
+ "marking-definition--35294f15-a41f-4332-8fc9-b6a07e5e8784"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -2717,12 +2717,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--74e63495-e877-4ffa-859c-d73ad1c7dfcf",
- "created_by_ref": "identity--14101647-36f6-4563-bd2d-3fb0bdbfc9ab",
- "created": "2022-07-02T17:28:36.956589Z",
- "modified": "2022-07-02T17:28:36.956589Z",
+ "id": "attack-pattern--4d1d222d-28c3-4e31-b32d-b7eb240fd115",
+ "created_by_ref": "identity--843ebb61-0a43-4c9a-a76f-12479c27581b",
+ "created": "2022-07-02T19:59:12.643248Z",
+ "modified": "2022-07-02T19:59:12.643248Z",
"name": "Distract",
- "description": "TA02",
+ "description": "Shift attention to a different narrative or actor, for instance by accusing critics of the same activity that they\u2019ve accused you of (e.g. police brutality).",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2737,7 +2737,7 @@
}
],
"object_marking_refs": [
- "marking-definition--d884f06f-54a9-462d-a330-51c4ccbfc6d1"
+ "marking-definition--b7b1a968-f717-426c-909f-da075d3cd2dc"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -2750,12 +2750,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4a332cd3-c862-46e1-b571-e888a67ce45a",
- "created_by_ref": "identity--111045d1-6a2e-4077-a536-5024c741a30f",
- "created": "2022-07-02T17:28:36.956907Z",
- "modified": "2022-07-02T17:28:36.956907Z",
+ "id": "attack-pattern--a89acdfa-423d-41ea-bb0c-cbe1815b0e58",
+ "created_by_ref": "identity--80a6339c-b322-457f-94af-58214b2f11a0",
+ "created": "2022-07-02T19:59:12.643684Z",
+ "modified": "2022-07-02T19:59:12.643684Z",
"name": "Dismay",
- "description": "TA02",
+ "description": "Threaten the critic or narrator of events. For instance, threaten journalists or news outlets reporting on a story.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2770,7 +2770,7 @@
}
],
"object_marking_refs": [
- "marking-definition--4ba7978a-0a00-4041-91e0-da3e1f74bef5"
+ "marking-definition--20325c51-1b7f-4d8b-b97a-288c0c9a6af2"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -2783,12 +2783,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--275352ca-291e-4501-aef3-4bae8c972ea5",
- "created_by_ref": "identity--3cd80d75-1c98-4caa-8b59-8dd259d104a1",
- "created": "2022-07-02T17:28:36.957224Z",
- "modified": "2022-07-02T17:28:36.957224Z",
+ "id": "attack-pattern--e4225ef6-3941-429c-913c-fac485573178",
+ "created_by_ref": "identity--95f21ef0-a31f-4fa7-9b56-a03c91b2410d",
+ "created": "2022-07-02T19:59:12.644073Z",
+ "modified": "2022-07-02T19:59:12.644073Z",
"name": "Divide",
- "description": "TA02",
+ "description": "Create conflict between subgroups, to widen divisions in a community",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2803,7 +2803,7 @@
}
],
"object_marking_refs": [
- "marking-definition--04222561-2e4e-48c3-9cc9-c1cd50278481"
+ "marking-definition--b7a1471c-5448-4c59-8ed0-7ba5587a0ffb"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -2816,12 +2816,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--ccde7e48-1f25-46dd-a38f-39758274a024",
- "created_by_ref": "identity--f1f36b0b-dc11-4139-a742-b1843513f115",
- "created": "2022-07-02T17:28:36.957551Z",
- "modified": "2022-07-02T17:28:36.957551Z",
+ "id": "attack-pattern--2b2b06d9-26d3-4e69-93b3-5a3f37363b5f",
+ "created_by_ref": "identity--f1bc29f3-e0ff-4d3c-bf96-fa830dd15a9a",
+ "created": "2022-07-02T19:59:12.644481Z",
+ "modified": "2022-07-02T19:59:12.644481Z",
"name": "Map Target Audience Information Environment",
- "description": "TA13",
+ "description": "Mapping the target audience information environment analyzes the information space itself, including social media analytics, web traffic, and media surveys. Mapping the information environment may help the influence operation determine the most realistic and popular information channels to reach its target audience. \nMapping the target audience information environment aids influence operations in determining the most vulnerable areas of the information space to target with messaging.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2836,7 +2836,7 @@
}
],
"object_marking_refs": [
- "marking-definition--37465520-e34e-4053-afe6-5406331485cd"
+ "marking-definition--52766689-e041-4dc5-bba3-71a239f06ea1"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -2849,12 +2849,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--e5d4cc77-8a4c-4121-aafd-f8683a9d322c",
- "created_by_ref": "identity--7af33b9b-9421-451e-8892-51eda2ea4f1a",
- "created": "2022-07-02T17:28:36.957871Z",
- "modified": "2022-07-02T17:28:36.957871Z",
+ "id": "attack-pattern--e7adceed-2079-48db-b7d8-9d93ad960f37",
+ "created_by_ref": "identity--a7d1279f-4a10-4236-80b4-6d00ed9dab89",
+ "created": "2022-07-02T19:59:12.644857Z",
+ "modified": "2022-07-02T19:59:12.644857Z",
"name": "Monitor Social Media Analytics",
- "description": "TA13",
+ "description": "An influence operation may use social media analytics to determine which factors will increase the operation content\u2019s exposure to its target audience on social media platforms, including views, interactions, and sentiment relating to topics and content types. The social media platform itself or a third-party tool may collect the metrics. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2869,7 +2869,7 @@
}
],
"object_marking_refs": [
- "marking-definition--28c83306-a1ae-4588-b7d0-96040153d1c1"
+ "marking-definition--ac981015-659c-4aa5-bb45-d8be36bc6121"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -2882,12 +2882,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--5d3ed9dc-6f1f-43c0-b3d3-3da63a7192d6",
- "created_by_ref": "identity--b10c17d1-4cfc-44b8-9ef2-652a999231e1",
- "created": "2022-07-02T17:28:36.958201Z",
- "modified": "2022-07-02T17:28:36.958201Z",
+ "id": "attack-pattern--bb7f412a-6e4e-4799-a32c-5ee05016e8b5",
+ "created_by_ref": "identity--0880ddf4-8131-4a9d-97f5-c375eb1cb6ff",
+ "created": "2022-07-02T19:59:12.645246Z",
+ "modified": "2022-07-02T19:59:12.645246Z",
"name": "Evaluate Media Surveys",
- "description": "TA13",
+ "description": "An influence operation may evaluate its own or third-party media surveys to determine what type of content appeals to its target audience. Media surveys may provide insight into an audience\u2019s political views, social class, general interests, or other indicators used to tailor operation messaging to its target audience.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2902,7 +2902,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a19e2a10-e12f-4587-a4e9-ffe0ff290931"
+ "marking-definition--0b4b19d6-0881-4258-8ff3-85facacafc96"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -2915,12 +2915,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--838d2d28-0c80-4742-b60d-ceb63c1c864b",
- "created_by_ref": "identity--db790fd8-2f26-493b-babb-c044ed342260",
- "created": "2022-07-02T17:28:36.95854Z",
- "modified": "2022-07-02T17:28:36.95854Z",
+ "id": "attack-pattern--7285bc0e-2e3f-4ee7-ab50-637c84d538e2",
+ "created_by_ref": "identity--b992546e-8144-4e4c-80fd-59bb821a1b74",
+ "created": "2022-07-02T19:59:12.645587Z",
+ "modified": "2022-07-02T19:59:12.645587Z",
"name": "Identify Trending Topics/Hashtags",
- "description": "TA13",
+ "description": "An influence operation may identify trending hashtags on social media platforms for later use in boosting operation content. A hashtag40 refers to a word or phrase preceded by the hash symbol (#) on social media used to identify messages and posts relating to a specific topic. All public posts that use the same hashtag are aggregated onto a centralized page dedicated to the word or phrase and sorted either chronologically or by popularity. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2935,7 +2935,7 @@
}
],
"object_marking_refs": [
- "marking-definition--5a3dc33d-c9e8-45c2-bf50-b37f09de8c47"
+ "marking-definition--f87997ed-0d5d-43ac-9d10-a6e7951292d6"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -2948,12 +2948,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--173741da-6c65-45a2-8b72-4692e694c345",
- "created_by_ref": "identity--322f05b2-e939-4e95-b04e-632436df4704",
- "created": "2022-07-02T17:28:36.958901Z",
- "modified": "2022-07-02T17:28:36.958901Z",
+ "id": "attack-pattern--20d348c8-0ed6-46b8-adea-6f82f154b5d4",
+ "created_by_ref": "identity--a2bd4d6f-29b5-4766-8248-040a8f2d7a00",
+ "created": "2022-07-02T19:59:12.645914Z",
+ "modified": "2022-07-02T19:59:12.645914Z",
"name": "Conduct Web Traffic Analysis",
- "description": "TA13",
+ "description": "An influence operation may conduct web traffic analysis to determine which search engines, keywords, websites, and advertisements gain the most traction with its target audience.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -2968,7 +2968,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e4ac92c8-8d37-4ccc-85c3-8cd4b4d61d20"
+ "marking-definition--86b87cb1-b5ef-4459-8b87-85421fcccd84"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -2981,12 +2981,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--8f41068e-fa56-4853-b6ae-2806d49f7027",
- "created_by_ref": "identity--25ced9c5-c4d7-4c85-b43b-1783e5c0cbae",
- "created": "2022-07-02T17:28:36.95936Z",
- "modified": "2022-07-02T17:28:36.95936Z",
+ "id": "attack-pattern--10d6f181-cf76-42b1-a021-37949a0574bc",
+ "created_by_ref": "identity--91e9b84a-7692-49e7-8b36-210d7a841f7d",
+ "created": "2022-07-02T19:59:12.64624Z",
+ "modified": "2022-07-02T19:59:12.64624Z",
"name": "Assess Degree/Type of Media Access",
- "description": "TA13",
+ "description": "An influence operation may survey a target audience\u2019s Internet availability and degree of media freedom to determine which target audience members will have access to operation content and on which platforms. An operation may face more difficulty targeting an information environment with heavy restrictions and media control than an environment with independent media, freedom of speech and of the press, and individual liberties. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3001,7 +3001,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7cb7ec5d-cb29-472e-8c50-9ad45282011d"
+ "marking-definition--ace2621f-f96b-4ac0-ac39-c302622a6d05"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3014,12 +3014,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334",
- "created_by_ref": "identity--5342ef84-f577-458b-804c-256ffc7bd56b",
- "created": "2022-07-02T17:28:36.959732Z",
- "modified": "2022-07-02T17:28:36.959732Z",
+ "id": "attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0",
+ "created_by_ref": "identity--875c4f47-bae7-4c40-a92f-e6169a840b57",
+ "created": "2022-07-02T19:59:12.646566Z",
+ "modified": "2022-07-02T19:59:12.646566Z",
"name": "Identify Social and Technical Vulnerabilities",
- "description": "TA13",
+ "description": "Identifying social and technical vulnerabilities determines weaknesses within the target audience information environment for later exploitation. Vulnerabilities include decisive political issues, weak cybersecurity infrastructure, search engine data voids, and other technical and non technical weaknesses in the target information environment. \nIdentifying social and technical vulnerabilities facilitates the later exploitation of the identified weaknesses to advance operation objectives. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3034,7 +3034,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e8d5492f-5d18-4455-b160-8c2e002e337b"
+ "marking-definition--db94b503-922d-4110-a7e5-4fe556f70858"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -3047,12 +3047,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--cd282f8b-686c-44c1-af4d-02ce5b4c707a",
- "created_by_ref": "identity--44a7a18b-0aa1-4a7f-b8d4-7c780e1bb169",
- "created": "2022-07-02T17:28:36.960089Z",
- "modified": "2022-07-02T17:28:36.960089Z",
+ "id": "attack-pattern--68c24d5c-02f4-4dda-b876-da222c052d86",
+ "created_by_ref": "identity--9ce890f1-a373-4b1c-9d23-0fdb1d655c0a",
+ "created": "2022-07-02T19:59:12.646892Z",
+ "modified": "2022-07-02T19:59:12.646892Z",
"name": "Find Echo Chambers",
- "description": "TA13",
+ "description": "Find or plan to create areas (social media groups, search term groups, hashtag groups etc) where individuals only engage with people they agree with. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3067,7 +3067,7 @@
}
],
"object_marking_refs": [
- "marking-definition--5dc1f9e5-601f-478d-b52e-c6b1c097ee52"
+ "marking-definition--44fe75d9-e693-40ee-96a2-11da2f46c1dd"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3080,12 +3080,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--aaeceb4e-5f3a-48c9-8e79-5c8e1424ab6d",
- "created_by_ref": "identity--3e76ed5a-a395-4d8e-be6c-eea3dd3e65b5",
- "created": "2022-07-02T17:28:36.960441Z",
- "modified": "2022-07-02T17:28:36.960441Z",
+ "id": "attack-pattern--b8eb2c66-3523-4b3c-9996-060178842282",
+ "created_by_ref": "identity--6e89a9ef-8ef3-4283-8153-30ab942eaa94",
+ "created": "2022-07-02T19:59:12.647212Z",
+ "modified": "2022-07-02T19:59:12.647212Z",
"name": "Identify Data Voids",
- "description": "TA13",
+ "description": "A data void refers to a word or phrase that results in little, manipulative, or low-quality search engine data. Data voids are hard to detect and relatively harmless until exploited by an entity aiming to quickly proliferate false or misleading information during a phenomenon that causes a high number of individuals to query the term or phrase. In the Plan phase, an influence operation may identify data voids for later exploitation in the operation. \nA 2019 report by Michael Golebiewski identifies five types of data voids. (1) \u201cBreaking news\u201d data voids occur when a keyword gains popularity during a short period of time, allowing an influence operation to publish false content before legitimate news outlets have an opportunity to publish relevant information. (2) An influence operation may create a \u201cstrategic new terms\u201d data void by creating their own terms and publishing information online before promoting their keyword to the target audience. (3) An influence operation may publish content on \u201coutdated terms\u201d that have decreased in popularity, capitalizing on most search engines\u2019 preferences for recency. (4) \u201cFragmented concepts\u201d data voids separate connections between similar ideas, isolating segment queries to distinct search engine results. (5) An influence operation may use \u201cproblematic queries\u201d that previously resulted in disturbing or inappropriate content to promote messaging until mainstream media recontextualizes the term. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3100,7 +3100,7 @@
}
],
"object_marking_refs": [
- "marking-definition--3cb615fb-870d-47c5-943b-cd9dbd498c6a"
+ "marking-definition--c2866214-c079-4ef9-9033-ea07409cc312"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3113,12 +3113,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--59223888-b348-45cf-a4f7-577ba5778641",
- "created_by_ref": "identity--3b468fa6-32f3-4f12-9071-6c3db353d07d",
- "created": "2022-07-02T17:28:36.960796Z",
- "modified": "2022-07-02T17:28:36.960796Z",
+ "id": "attack-pattern--de168abd-3a95-4dbc-a673-6756ba2bc3fc",
+ "created_by_ref": "identity--ba348c32-bb6c-457e-9326-ca57df0cecd1",
+ "created": "2022-07-02T19:59:12.647534Z",
+ "modified": "2022-07-02T19:59:12.647534Z",
"name": "Identify Existing Prejudices",
- "description": "TA13",
+ "description": "An influence operation may exploit existing racial, religious, demographic, or social prejudices to further polarize its target audience from the rest of the public.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3133,7 +3133,7 @@
}
],
"object_marking_refs": [
- "marking-definition--94232774-8de1-450a-8a03-2af5246e9c2a"
+ "marking-definition--649e28ca-2822-4efe-8a7e-b31b5123efa3"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3146,12 +3146,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--d673e8b6-858b-4b8e-b396-4bf840217fc1",
- "created_by_ref": "identity--1c86228f-e0eb-4031-8ebe-ddf0981a290f",
- "created": "2022-07-02T17:28:36.961141Z",
- "modified": "2022-07-02T17:28:36.961141Z",
+ "id": "attack-pattern--b75f97dd-e18e-4555-8c9e-97680b398ae3",
+ "created_by_ref": "identity--baa7136c-27ee-4a90-a4ae-bd6ef2c0215b",
+ "created": "2022-07-02T19:59:12.647865Z",
+ "modified": "2022-07-02T19:59:12.647865Z",
"name": "Identify Existing Fissures",
- "description": "TA13",
+ "description": "An influence operation may identify existing fissures to pit target populations against one another or facilitate a \u201cdivide-and-conquer\" approach to tailor operation narratives along the divides.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3166,7 +3166,7 @@
}
],
"object_marking_refs": [
- "marking-definition--243bba78-e67a-4fac-9970-1f46219bfa36"
+ "marking-definition--f7a6150e-767c-4205-8940-c9bec2ed57cd"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3179,12 +3179,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4db9874c-0b6b-4159-8ef9-1ecae17677cc",
- "created_by_ref": "identity--bc7a2f8d-f3c0-4654-90d0-8df5cf5f333e",
- "created": "2022-07-02T17:28:36.961487Z",
- "modified": "2022-07-02T17:28:36.961487Z",
+ "id": "attack-pattern--b7c84415-9ce4-431c-8419-1c9dc3b4927f",
+ "created_by_ref": "identity--a94808a7-6358-448f-b81a-12c9c3551720",
+ "created": "2022-07-02T19:59:12.648186Z",
+ "modified": "2022-07-02T19:59:12.648186Z",
"name": "Identify Existing Conspiracy Narratives/Suspicions",
- "description": "TA13",
+ "description": "An influence operation may assess preexisting conspiracy theories or suspicions in a population to identify existing narratives that support operational objectives. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3199,7 +3199,7 @@
}
],
"object_marking_refs": [
- "marking-definition--ac3415ff-d329-4dc5-8edb-6e77f4d2856d"
+ "marking-definition--eeb615f5-b651-4b91-a940-f6a181131fbc"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3212,12 +3212,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--9175c5c5-5e10-492c-823d-17178bdd1406",
- "created_by_ref": "identity--f1e7062a-a677-4559-9499-004155582f93",
- "created": "2022-07-02T17:28:36.962232Z",
- "modified": "2022-07-02T17:28:36.962232Z",
+ "id": "attack-pattern--0f3f9883-6db6-4936-94ce-e89e0f994f6d",
+ "created_by_ref": "identity--3e4f09d6-dd88-446d-83c3-071cabe34a9c",
+ "created": "2022-07-02T19:59:12.648507Z",
+ "modified": "2022-07-02T19:59:12.648507Z",
"name": "Identify Wedge Issues",
- "description": "TA13",
+ "description": "A wedge issue is a divisive political issue, usually concerning a social phenomenon, that divides individuals along a defined line. An influence operation may exploit wedge issues by intentionally polarizing the public along the wedge issue line and encouraging opposition between factions.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3232,7 +3232,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a4f3cf5a-f71c-48e9-899e-a2c199fb8dd7"
+ "marking-definition--c9493262-f742-49c2-99de-8470c7296eb0"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3245,12 +3245,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--76f1c6e2-e4b9-4bc1-ae6a-02fe7345325a",
- "created_by_ref": "identity--019a6d11-1af6-474f-b724-082dd940f6fc",
- "created": "2022-07-02T17:28:36.962611Z",
- "modified": "2022-07-02T17:28:36.962611Z",
+ "id": "attack-pattern--74722b9d-d4cc-4d80-8261-d4e53b3b7af2",
+ "created_by_ref": "identity--05ea3657-2216-486f-a28e-a15e20675631",
+ "created": "2022-07-02T19:59:12.648836Z",
+ "modified": "2022-07-02T19:59:12.648836Z",
"name": "Identify Target Audience Adversaries",
- "description": "TA13",
+ "description": "An influence operation may identify or create a real or imaginary adversary to center operation narratives against. A real adversary may include certain politicians or political parties while imaginary adversaries may include falsified \u201cdeep state\u201d62 actors that, according to conspiracies, run the state behind public view. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3265,7 +3265,7 @@
}
],
"object_marking_refs": [
- "marking-definition--6bb04aa9-5e8c-4c80-a4cb-d6d65b4adac0"
+ "marking-definition--7f54ac2c-b139-4553-abf1-b23862c1ccb9"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3278,12 +3278,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--3ff18f87-55ce-47c5-822d-94f2cd6aeb9f",
- "created_by_ref": "identity--4eb4c2a4-3763-434b-b492-479c3f3cc162",
- "created": "2022-07-02T17:28:36.962946Z",
- "modified": "2022-07-02T17:28:36.962946Z",
+ "id": "attack-pattern--695e41fe-b084-4065-953c-e2cffd80ea5f",
+ "created_by_ref": "identity--fe106c43-02ee-48da-bc4a-4ce3f45c1997",
+ "created": "2022-07-02T19:59:12.649163Z",
+ "modified": "2022-07-02T19:59:12.649163Z",
"name": "Identify Media System Vulnerabilities",
- "description": "TA13",
+ "description": "An influence operation may exploit existing weaknesses in a target\u2019s media system. These weaknesses may include existing biases among media agencies, vulnerability to false news agencies on social media, or existing distrust of traditional media sources. An existing distrust among the public in the media system\u2019s credibility holds high potential for exploitation by an influence operation when establishing alternative news agencies to spread operation content. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3298,7 +3298,7 @@
}
],
"object_marking_refs": [
- "marking-definition--6e6a2078-8bd8-4fc4-a609-02a11a8f77b2"
+ "marking-definition--11eb273f-6181-4492-901f-218ebca563ae"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3311,12 +3311,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--5e2a649f-138b-4262-9397-2ced89d77d0e",
- "created_by_ref": "identity--71e7964f-35ec-42c9-9fd6-334f5dc3ee13",
- "created": "2022-07-02T17:28:36.963271Z",
- "modified": "2022-07-02T17:28:36.963271Z",
+ "id": "attack-pattern--9d40d2ec-4083-40d0-a2ef-370a7366d0aa",
+ "created_by_ref": "identity--9c93c304-5f9f-4786-951d-24eed34bf51e",
+ "created": "2022-07-02T19:59:12.649494Z",
+ "modified": "2022-07-02T19:59:12.649494Z",
"name": "Develop New Narratives",
- "description": "TA14",
+ "description": "Actors may develop new narratives to further strategic or tactical goals, especially when existing narratives adequately align with the campaign goals. New narratives provide more control in terms of crafting the message to achieve specific goals. However, new narratives may require more effort to disseminate than adapting or adopting existing narratives. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3331,7 +3331,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c42cd74e-8f97-4e44-9f3d-60e8d6c90111"
+ "marking-definition--be1a2137-010b-4a3f-84f5-fa557f9dacba"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -3344,12 +3344,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--20a5cd5a-48be-48e4-83a7-c03efe6f66fa",
- "created_by_ref": "identity--ea725fa9-8b4b-4ecd-9d90-9c4611efa4c3",
- "created": "2022-07-02T17:28:36.963605Z",
- "modified": "2022-07-02T17:28:36.963605Z",
+ "id": "attack-pattern--a17d4c62-fb85-4dd7-8c0e-9bf4c6787524",
+ "created_by_ref": "identity--68ef09b8-c250-4bf2-bb14-c4d4d77b8fe3",
+ "created": "2022-07-02T19:59:12.649824Z",
+ "modified": "2022-07-02T19:59:12.649824Z",
"name": "Integrate Target Audience Vulnerabilities into Narrative",
- "description": "TA14",
+ "description": "An influence operation may seek to exploit the preexisting weaknesses, fears, and enemies of the target audience for integration into the operation\u2019s narratives and overall strategy. Integrating existing vulnerabilities into the operational approach conserves resources by exploiting already weak areas of the target information environment instead of forcing the operation to create new vulnerabilities in the environment.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3364,7 +3364,7 @@
}
],
"object_marking_refs": [
- "marking-definition--eb5a95f9-cb0a-4fd9-878d-baffa84f72bd"
+ "marking-definition--7fbc122b-40f0-4dd7-8c85-2d06fe871920"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -3377,12 +3377,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--de5a467e-4326-4909-9c2d-d123830edca6",
- "created_by_ref": "identity--3bfdb267-c9b3-4f32-a6cc-2c749f430ce9",
- "created": "2022-07-02T17:28:36.963927Z",
- "modified": "2022-07-02T17:28:36.963927Z",
+ "id": "attack-pattern--acb35a90-5c38-42f4-a32e-5e96bacf0e33",
+ "created_by_ref": "identity--ab023978-2067-49be-9e74-7f0c42fdca15",
+ "created": "2022-07-02T19:59:12.650147Z",
+ "modified": "2022-07-02T19:59:12.650147Z",
"name": "Reuse Existing Content",
- "description": "TA06",
+ "description": "When an operation recycles content from its own previous operations or plagiarizes from external operations. An operation may launder information to conserve resources that would have otherwise been utilized to develop new content. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3397,7 +3397,7 @@
}
],
"object_marking_refs": [
- "marking-definition--61ffcde0-00e8-4ace-9308-a2937eac79d7"
+ "marking-definition--84551930-9961-4062-8a9f-57d4cdc42233"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -3410,12 +3410,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--8e21ea76-776b-4113-ab50-0ced1178fd21",
- "created_by_ref": "identity--67c908f4-e055-4f71-af47-77b74f7ea9b2",
- "created": "2022-07-02T17:28:36.964251Z",
- "modified": "2022-07-02T17:28:36.964251Z",
+ "id": "attack-pattern--cadb4dca-7f14-4616-a515-c211d418c4c9",
+ "created_by_ref": "identity--657a6b7c-333d-43c5-8831-873d26e2c5c0",
+ "created": "2022-07-02T19:59:12.650473Z",
+ "modified": "2022-07-02T19:59:12.650473Z",
"name": "Use Copypasta",
- "description": "TA06",
+ "description": "Copypasta refers to a piece of text that has been copied and pasted multiple times across various online platforms. A copypasta\u2019s final form may differ from its original source text as users add, delete, or otherwise edit the content as they repost the text. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3430,7 +3430,7 @@
}
],
"object_marking_refs": [
- "marking-definition--b3f38281-19ec-4cef-94f5-5f12b3f70455"
+ "marking-definition--5d47ba64-ffc9-451a-8062-bc368b0ab610"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3443,12 +3443,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--2b86f30b-02d0-4759-9ccd-7abff53714a2",
- "created_by_ref": "identity--1df51467-370a-4394-baad-ca76908234f0",
- "created": "2022-07-02T17:28:36.964571Z",
- "modified": "2022-07-02T17:28:36.964571Z",
+ "id": "attack-pattern--c7076dd5-bc90-466a-9bd5-6cdd3d0d6be7",
+ "created_by_ref": "identity--710b455c-85f0-4402-827d-51de3b5cb98d",
+ "created": "2022-07-02T19:59:12.650795Z",
+ "modified": "2022-07-02T19:59:12.650795Z",
"name": "Plagiarize Content",
- "description": "TA06",
+ "description": "An influence operation may take content from other sources without proper attribution. This content may be either misinformation content shared by others without malicious intent but now leveraged by the campaign as disinformation or disinformation content from other sources. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3463,7 +3463,7 @@
}
],
"object_marking_refs": [
- "marking-definition--1bf2ad11-158a-4616-acde-706b3caf4858"
+ "marking-definition--9105fba4-55e6-48d0-8c9f-3c529a2bd1a9"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3476,12 +3476,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c79c0902-20ea-4efb-b6b5-0659f19c035b",
- "created_by_ref": "identity--514be4d9-4fa3-4e97-853b-264fb284e4c6",
- "created": "2022-07-02T17:28:36.964893Z",
- "modified": "2022-07-02T17:28:36.964893Z",
+ "id": "attack-pattern--c77cddbe-3859-4fbb-ba3f-ce9a9c19497f",
+ "created_by_ref": "identity--19f7c2da-59d0-41f7-9529-825b6d7cedc8",
+ "created": "2022-07-02T19:59:12.651118Z",
+ "modified": "2022-07-02T19:59:12.651118Z",
"name": "Deceptively Labeled or Translated",
- "description": "TA06",
+ "description": "An influence operation may take authentic content from other sources and add deceptive labels or deceptively translate the content into other langauges. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3496,7 +3496,7 @@
}
],
"object_marking_refs": [
- "marking-definition--d21d3608-8994-49f9-b795-3e8e3df1164b"
+ "marking-definition--d43dd2dc-950e-4cb6-a32e-55da90ae6daf"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3509,12 +3509,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4b2a1b42-547b-459a-97b9-7fb7915359dc",
- "created_by_ref": "identity--268f5f6b-c1d4-4361-a654-16bc69f8811f",
- "created": "2022-07-02T17:28:36.965211Z",
- "modified": "2022-07-02T17:28:36.965211Z",
+ "id": "attack-pattern--1d658549-c2db-4d51-805e-7f2577fe1a95",
+ "created_by_ref": "identity--cdeac2b0-99ec-42d6-920e-6a42e2ae603e",
+ "created": "2022-07-02T19:59:12.651441Z",
+ "modified": "2022-07-02T19:59:12.651441Z",
"name": "Appropriate Content",
- "description": "TA06",
+ "description": "An influence operation may take content from other sources with proper attribution. This content may be either misinformation content shared by others without malicious intent but now leveraged by the campaign as disinformation or disinformation content from other sources. Examples include the appropriation of content from one inauthentic news site to another inauthentic news site or network in ways that align with the originators licensing or terms of service.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3529,7 +3529,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7e86536b-cde3-40a7-9e2a-62ca826593e7"
+ "marking-definition--b20d4b56-d323-4906-87be-2ab192133807"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3542,12 +3542,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--89258f59-9d58-42c6-9fbb-ceffd2530a76",
- "created_by_ref": "identity--da218172-fe47-468f-b30e-15ac14ff4c07",
- "created": "2022-07-02T17:28:36.965533Z",
- "modified": "2022-07-02T17:28:36.965533Z",
+ "id": "attack-pattern--24bd7bc9-64dc-4ec9-b0e0-551c00666462",
+ "created_by_ref": "identity--e88ac6cd-91a4-43ce-87fe-2ce7cea02c55",
+ "created": "2022-07-02T19:59:12.651772Z",
+ "modified": "2022-07-02T19:59:12.651772Z",
"name": "Develop Text-based Content",
- "description": "TA06",
+ "description": "Creating and editing false or misleading text-based artifacts, often aligned with one or more specific narratives, for use in a disinformation campaign.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3562,7 +3562,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a5c9ea13-f2ea-4b1b-9f79-aee853e8ae56"
+ "marking-definition--b37247d1-211f-4f79-869e-04bdbb52aa65"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -3575,12 +3575,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--203756a5-ac3d-4a82-a096-25d01609571b",
- "created_by_ref": "identity--5490fecd-9a34-4016-861d-2a0bc4483486",
- "created": "2022-07-02T17:28:36.965875Z",
- "modified": "2022-07-02T17:28:36.965875Z",
+ "id": "attack-pattern--02b93bbb-3137-4ffe-8644-599e9a3bec76",
+ "created_by_ref": "identity--38991d54-70c6-46dc-8440-769b6b53d5cc",
+ "created": "2022-07-02T19:59:12.652098Z",
+ "modified": "2022-07-02T19:59:12.652098Z",
"name": "Develop AI-Generated Text",
- "description": "TA06",
+ "description": "AI-generated texts refers to synthetic text composed by computers using text-generating AI technology. Autonomous generation refers to content created by a bot without human input, also known as bot-created content generation. Autonomous generation represents the next step in automation after language generation and may lead to automated journalism. An influence operation may use read fakes or autonomous generation to quickly develop and distribute content to the target audience.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3595,7 +3595,7 @@
}
],
"object_marking_refs": [
- "marking-definition--6575f8b2-caaf-4d2c-a43f-4a52eaac72a7"
+ "marking-definition--4c039358-d5cf-42c1-8a02-df8e684133a9"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3608,12 +3608,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--e977dd1f-45db-4762-a34d-2f06c2bd788b",
- "created_by_ref": "identity--9bab100e-2406-494a-b41b-ebb02e77d314",
- "created": "2022-07-02T17:28:36.966205Z",
- "modified": "2022-07-02T17:28:36.966205Z",
+ "id": "attack-pattern--88a99ab0-5135-4c6b-9832-74260b6c1dbd",
+ "created_by_ref": "identity--ee344975-686c-4ec0-9831-e3db6d42cc19",
+ "created": "2022-07-02T19:59:12.652423Z",
+ "modified": "2022-07-02T19:59:12.652423Z",
"name": "Develop False or Altered Documents",
- "description": "TA06",
+ "description": "Develop False or Altered Documents",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3628,7 +3628,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2ca25000-cc0d-4629-b4e0-8c8de388f192"
+ "marking-definition--7b37ac47-196e-443f-b9dd-ee0e9e0a7795"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3641,12 +3641,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--12cd627c-2617-486e-bcbf-a5bf5f467286",
- "created_by_ref": "identity--cb4cf0ff-523c-4220-afb2-14f2608f63ba",
- "created": "2022-07-02T17:28:36.966525Z",
- "modified": "2022-07-02T17:28:36.966525Z",
+ "id": "attack-pattern--c9ce8866-87ec-4489-8a95-8e89ad2ae135",
+ "created_by_ref": "identity--06d529f3-4ae3-4f93-96d7-0abd7f88104a",
+ "created": "2022-07-02T19:59:12.652747Z",
+ "modified": "2022-07-02T19:59:12.652747Z",
"name": "Develop Inauthentic News Articles",
- "description": "TA06",
+ "description": "An influence operation may develop false or misleading news articles aligned to their campaign goals or narratives. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3661,7 +3661,7 @@
}
],
"object_marking_refs": [
- "marking-definition--b10767de-5e60-43b8-95d0-e1d534ff8747"
+ "marking-definition--86b3341f-0b19-48ee-9b73-2aca0fda10a7"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3674,12 +3674,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b3c2db10-3666-4b0b-a8f2-c97506382de0",
- "created_by_ref": "identity--d7e62313-40ee-4705-8357-1d80d0e4ef40",
- "created": "2022-07-02T17:28:36.966847Z",
- "modified": "2022-07-02T17:28:36.966847Z",
+ "id": "attack-pattern--fc6efd97-7618-4ea6-81bb-f83cc4d5f608",
+ "created_by_ref": "identity--7755b139-451b-42b8-b0c2-e5029b316c66",
+ "created": "2022-07-02T19:59:12.65308Z",
+ "modified": "2022-07-02T19:59:12.65308Z",
"name": "Develop Image-based Content",
- "description": "TA06",
+ "description": "Creating and editing false or misleading visual artifacts, often aligned with one or more specific narratives, for use in a disinformation campaign. This may include photographing staged real-life situations, repurposing existing digital images, or using image creation and editing technologies.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3694,7 +3694,7 @@
}
],
"object_marking_refs": [
- "marking-definition--00b5c576-1989-4c4f-9435-a38386b945a7"
+ "marking-definition--af98aff6-f6ca-4958-ae32-1977bd1f92af"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -3707,12 +3707,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c9b162f1-ae90-4ccb-acb0-c2a4d7c9979d",
- "created_by_ref": "identity--321d523b-7bd3-494b-a087-bd3b2f8805c9",
- "created": "2022-07-02T17:28:36.967168Z",
- "modified": "2022-07-02T17:28:36.967168Z",
+ "id": "attack-pattern--e67aac85-903e-4a76-8c8f-ea20eea7fb57",
+ "created_by_ref": "identity--5457e7fd-40b6-4a24-afaa-80d07d3ac9f9",
+ "created": "2022-07-02T19:59:12.65342Z",
+ "modified": "2022-07-02T19:59:12.65342Z",
"name": "Develop Memes",
- "description": "TA06",
+ "description": "Memes are one of the most important single artefact types in all of computational propaganda. Memes in this framework denotes the narrow image-based definition. But that naming is no accident, as these items have most of the important properties of Dawkins' original conception as a self-replicating unit of culture. Memes pull together reference and commentary; image and narrative; emotion and message. Memes are a powerful tool and the heart of modern influence campaigns.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3727,7 +3727,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c06b773e-9b89-4b0a-b1cd-fe87f640e36e"
+ "marking-definition--24b8de97-2b3b-4187-a947-1742fca39219"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3740,12 +3740,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b0eb15ea-d4c2-49b9-a9e3-1fbf5c8dc11e",
- "created_by_ref": "identity--f0125f36-4796-45d0-babc-ab33c69cb5b9",
- "created": "2022-07-02T17:28:36.967489Z",
- "modified": "2022-07-02T17:28:36.967489Z",
+ "id": "attack-pattern--bde3b6dd-3bfd-42cc-9f6f-b3750dd4b94c",
+ "created_by_ref": "identity--334d2da0-935f-444a-b547-3418068e6dc7",
+ "created": "2022-07-02T19:59:12.653746Z",
+ "modified": "2022-07-02T19:59:12.653746Z",
"name": "Develop AI-Generated Images (Deepfakes)",
- "description": "TA06",
+ "description": "Deepfakes refer to AI-generated falsified photos, videos, or soundbites. An influence operation may use deepfakes to depict an inauthentic situation by synthetically recreating an individual\u2019s face, body, voice, and physical gestures.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3760,7 +3760,7 @@
}
],
"object_marking_refs": [
- "marking-definition--3842b83b-472c-4adf-9573-49f7ca27066a"
+ "marking-definition--a248c570-57a8-482b-98c1-1b38bf2e0090"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3773,12 +3773,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a500a0b8-2780-497c-82cf-6b053542e489",
- "created_by_ref": "identity--2ef2211e-b641-42b9-98e2-159ef661e69a",
- "created": "2022-07-02T17:28:36.967807Z",
- "modified": "2022-07-02T17:28:36.967807Z",
- "name": "Deceptively Edit Image (Cheap fakes)",
- "description": "TA06",
+ "id": "attack-pattern--3984387e-adea-4ccd-88d3-8a481e41a045",
+ "created_by_ref": "identity--044ed2e3-8618-4244-8075-8f3e31443f76",
+ "created": "2022-07-02T19:59:12.654096Z",
+ "modified": "2022-07-02T19:59:12.654096Z",
+ "name": "Deceptively Edit Images (Cheap fakes)",
+ "description": "Cheap fakes utilize less sophisticated measures of altering an image, video, or audio for example, slowing, speeding, or cutting footage to create a false context surrounding an image or event.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3793,7 +3793,7 @@
}
],
"object_marking_refs": [
- "marking-definition--875151fe-6dd1-4cf7-a4e4-30e6fa796f51"
+ "marking-definition--f479185c-2c89-4d11-954e-2cec7a37be4c"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3806,12 +3806,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--06a4372a-4911-4569-9d5a-513bfaf1abc9",
- "created_by_ref": "identity--3d83d2ee-a6ff-4903-ab50-aa89aeac0735",
- "created": "2022-07-02T17:28:36.968121Z",
- "modified": "2022-07-02T17:28:36.968121Z",
+ "id": "attack-pattern--84a6b4f6-67e3-41e8-b99c-96bd5a4741da",
+ "created_by_ref": "identity--0e3a6085-5ab9-458b-b925-a040a662b944",
+ "created": "2022-07-02T19:59:12.654436Z",
+ "modified": "2022-07-02T19:59:12.654436Z",
"name": "Aggregate Information into Evidence Collages",
- "description": "TA06",
+ "description": "Image files that aggregate positive evidence (Joan Donovan)",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3826,7 +3826,7 @@
}
],
"object_marking_refs": [
- "marking-definition--70d84cf5-488d-4945-ba9c-96fadd1df743"
+ "marking-definition--90fed931-e5ed-4cc4-8045-ad34da6bf5c4"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3839,12 +3839,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b5a8668d-e35e-406f-b2a9-62bc4aa25cfe",
- "created_by_ref": "identity--0ea4e16f-60a5-45a8-8b39-665a1fa2ce93",
- "created": "2022-07-02T17:28:36.968435Z",
- "modified": "2022-07-02T17:28:36.968435Z",
+ "id": "attack-pattern--acdb4254-8f84-4ae5-b26a-b4e19f29b6f0",
+ "created_by_ref": "identity--19d9cd28-2e04-4373-ac46-9f8e22e9ac62",
+ "created": "2022-07-02T19:59:12.654767Z",
+ "modified": "2022-07-02T19:59:12.654767Z",
"name": "Develop Video-based Content",
- "description": "TA06",
+ "description": "Creating and editing false or misleading video artifacts, often aligned with one or more specific narratives, for use in a disinformation campaign. This may include staging videos of purportedly real situations, repurposing existing video artifacts, or using AI-generated video creation and editing technologies (including deepfakes).",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3859,7 +3859,7 @@
}
],
"object_marking_refs": [
- "marking-definition--754738aa-a4fb-48b1-b7a4-2ec8a9fbb0f0"
+ "marking-definition--5d54e8fd-b577-499e-8d14-6dee5653113b"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -3872,12 +3872,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--70885523-55fd-46ff-aa6f-59ff4810dfe5",
- "created_by_ref": "identity--a41d0b6e-5ad6-43f7-b8e1-d459c7072e95",
- "created": "2022-07-02T17:28:36.968753Z",
- "modified": "2022-07-02T17:28:36.968753Z",
+ "id": "attack-pattern--231b3ff6-8ecb-4cd8-b9eb-ca7740298c61",
+ "created_by_ref": "identity--d8019794-70dc-47da-9bae-5dffca5e9949",
+ "created": "2022-07-02T19:59:12.655093Z",
+ "modified": "2022-07-02T19:59:12.655093Z",
"name": "Develop AI-Generated Videos (Deepfakes)",
- "description": "TA06",
+ "description": "Deepfakes refer to AI-generated falsified photos, videos, or soundbites. An influence operation may use deepfakes to depict an inauthentic situation by synthetically recreating an individual\u2019s face, body, voice, and physical gestures.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3892,7 +3892,7 @@
}
],
"object_marking_refs": [
- "marking-definition--1f2faa29-eedf-4947-8bd2-c1344b0a7247"
+ "marking-definition--0a97bad2-3a12-41fe-8c81-42b21d3e0934"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3905,12 +3905,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--18dfaddc-b4d8-43dc-baff-e92c4ad7b6c1",
- "created_by_ref": "identity--afa36676-23d9-491d-bcc0-a88be3320eb7",
- "created": "2022-07-02T17:28:36.969219Z",
- "modified": "2022-07-02T17:28:36.969219Z",
+ "id": "attack-pattern--2cf97da8-f92c-49f3-bc58-d2527ce2a931",
+ "created_by_ref": "identity--6fafe263-0f92-45ca-a9fd-246d4bf6bdd6",
+ "created": "2022-07-02T19:59:12.655418Z",
+ "modified": "2022-07-02T19:59:12.655418Z",
"name": "Deceptively Edit Video (Cheap fakes)",
- "description": "TA06",
+ "description": "Cheap fakes utilize less sophisticated measures of altering an image, video, or audio for example, slowing, speeding, or cutting footage to create a false context surrounding an image or event.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3925,7 +3925,7 @@
}
],
"object_marking_refs": [
- "marking-definition--badf82a7-0778-48a2-afb4-fa793734fb2d"
+ "marking-definition--974c743a-3157-4513-ac26-b95b97291258"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -3938,12 +3938,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--75b32a49-e97e-4f8d-884a-870fad05bcc6",
- "created_by_ref": "identity--74261b56-1dea-44fd-bf85-1fbed3f9d041",
- "created": "2022-07-02T17:28:36.969656Z",
- "modified": "2022-07-02T17:28:36.969656Z",
+ "id": "attack-pattern--2e57c2b3-f885-4684-bc08-47d334463c48",
+ "created_by_ref": "identity--86c23365-0713-4f85-aa98-4dba3d6952dd",
+ "created": "2022-07-02T19:59:12.655743Z",
+ "modified": "2022-07-02T19:59:12.655743Z",
"name": "Develop Audio-based Content",
- "description": "TA06",
+ "description": "Creating and editing false or misleading audio artifacts, often aligned with one or more specific narratives, for use in a disinformation campaign. This may include creating completely new audio content, repurposing existing audio artifacts (including cheap fakes), or using AI-generated audio creation and editing technologies (including deepfakes).",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3958,7 +3958,7 @@
}
],
"object_marking_refs": [
- "marking-definition--b4f4c30b-1853-44f1-82a1-5d89281c7b89"
+ "marking-definition--05a5db55-a642-42c3-be35-bada9c946bcd"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -3971,12 +3971,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--87790d44-0beb-434e-bfae-178a7765a765",
- "created_by_ref": "identity--5bca8e21-6916-400f-a191-709b54d36368",
- "created": "2022-07-02T17:28:36.97001Z",
- "modified": "2022-07-02T17:28:36.97001Z",
+ "id": "attack-pattern--28efce68-0e87-431b-920f-9d678eb6f444",
+ "created_by_ref": "identity--2ddc4452-b30b-4f7f-9bf9-0adbd5bf1261",
+ "created": "2022-07-02T19:59:12.656068Z",
+ "modified": "2022-07-02T19:59:12.656068Z",
"name": "Develop AI-Generated Audio (Deepfakes)",
- "description": "TA06",
+ "description": "Deepfakes refer to AI-generated falsified photos, videos, or soundbites. An influence operation may use deepfakes to depict an inauthentic situation by synthetically recreating an individual\u2019s face, body, voice, and physical gestures.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -3991,7 +3991,7 @@
}
],
"object_marking_refs": [
- "marking-definition--0b60d30e-dd14-4f81-ab6a-1cba0bfcffaf"
+ "marking-definition--90bbb32a-bc70-48e6-a2b2-ecf39cc99fab"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4004,12 +4004,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--d230f9c5-757d-4a27-a808-fa5a60b42824",
- "created_by_ref": "identity--38a77815-7d37-41b4-aa0e-c1c30262d365",
- "created": "2022-07-02T17:28:36.97035Z",
- "modified": "2022-07-02T17:28:36.97035Z",
+ "id": "attack-pattern--ca7f1d3a-ee55-49d4-824f-1f060d97db12",
+ "created_by_ref": "identity--3deacfaa-2261-489c-b048-8fcddb2e337b",
+ "created": "2022-07-02T19:59:12.656395Z",
+ "modified": "2022-07-02T19:59:12.656395Z",
"name": "Deceptively Edit Audio (Cheap fakes)",
- "description": "TA06",
+ "description": "Cheap fakes utilize less sophisticated measures of altering an image, video, or audio for example, slowing, speeding, or cutting footage to create a false context surrounding an image or event.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4024,7 +4024,7 @@
}
],
"object_marking_refs": [
- "marking-definition--52bcb8cb-9c93-47e9-8518-16cd5aa590c6"
+ "marking-definition--bd2d8f07-c4b6-4258-b533-2fd8f3d10614"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4037,12 +4037,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--8f74ba8b-807b-4b71-81fd-d1fa6edcc1a7",
- "created_by_ref": "identity--9290262e-d9b2-4f88-8fcd-cc17833bb993",
- "created": "2022-07-02T17:28:36.97069Z",
- "modified": "2022-07-02T17:28:36.97069Z",
+ "id": "attack-pattern--81984c05-802f-4dc7-9288-fb3abb263ef5",
+ "created_by_ref": "identity--6fc82af3-29da-434f-a60f-959c24ef37a6",
+ "created": "2022-07-02T19:59:12.656717Z",
+ "modified": "2022-07-02T19:59:12.656717Z",
"name": "Obtain Private Documents",
- "description": "TA06",
+ "description": "Procuring documents that are not publicly available, by whatever means -- whether legal or illegal, highly-resourced or less so. These documents can include authentic non-public documents, authentic non-public documents have been altered, or inauthentic documents intended to appear as if they are authentic non-public documents. All of these types of documents can be \"leaked\" during later stages in the operation.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4057,7 +4057,7 @@
}
],
"object_marking_refs": [
- "marking-definition--cf2468c4-4e36-4dc9-8717-b3d02bb60e70"
+ "marking-definition--ef94690c-7a67-427c-9b8b-f730cb74aa9d"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -4070,12 +4070,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a224996d-effe-42ed-b7a6-78a7d86c662d",
- "created_by_ref": "identity--0391a029-df65-4518-b8b9-fa8319cab412",
- "created": "2022-07-02T17:28:36.971021Z",
- "modified": "2022-07-02T17:28:36.971021Z",
- "name": "Leak Authentic Documents",
- "description": "TA06",
+ "id": "attack-pattern--762233df-b2a8-404c-9136-d97611361d28",
+ "created_by_ref": "identity--a7a04e17-5b3f-424f-ab67-31e5d642ec26",
+ "created": "2022-07-02T19:59:12.657036Z",
+ "modified": "2022-07-02T19:59:12.657036Z",
+ "name": "Obtain Authentic Documents",
+ "description": "Procure authentic documents that are not publicly available, by whatever means -- whether legal or illegal, highly-resourced or less so. These documents can be \"leaked\" during later stages in the operation.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4090,7 +4090,7 @@
}
],
"object_marking_refs": [
- "marking-definition--84a96def-aee9-4a96-b74d-46b88f4f9ee9"
+ "marking-definition--c081bc93-ff3c-4a89-b150-4d0db424621c"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4103,12 +4103,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--ec885090-0bb5-4d21-9f0a-0b62f22d1de0",
- "created_by_ref": "identity--0cf5694f-5cbb-4c36-904c-21fb5072883d",
- "created": "2022-07-02T17:28:36.971411Z",
- "modified": "2022-07-02T17:28:36.971411Z",
- "name": "Leak False Documents",
- "description": "TA06",
+ "id": "attack-pattern--fb297eec-3fc8-4599-bc41-60f5b0d71cb5",
+ "created_by_ref": "identity--5f1ef648-9b7f-4d0a-b544-694a6e49b76c",
+ "created": "2022-07-02T19:59:12.657359Z",
+ "modified": "2022-07-02T19:59:12.657359Z",
+ "name": "Create Inauthentic Documents",
+ "description": "Create inauthentic documents intended to appear as if they are authentic non-public documents. These documents can be \"leaked\" during later stages in the operation.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4123,7 +4123,7 @@
}
],
"object_marking_refs": [
- "marking-definition--873a70a8-1ef8-4e41-8878-948bb2621c7b"
+ "marking-definition--7410f56a-61a6-4eae-9407-f627d5a03388"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4136,12 +4136,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--7b6755fc-a945-4ee8-9547-34be9f979b92",
- "created_by_ref": "identity--e055cad0-aa0a-494e-9307-588c00b5c638",
- "created": "2022-07-02T17:28:36.971749Z",
- "modified": "2022-07-02T17:28:36.971749Z",
- "name": "Leak Altered Documents",
- "description": "TA06",
+ "id": "attack-pattern--d75214cd-118d-4ce4-ba64-f1a0ef15b953",
+ "created_by_ref": "identity--98b6c229-8789-4a75-a9f5-76000c9c7566",
+ "created": "2022-07-02T19:59:12.657683Z",
+ "modified": "2022-07-02T19:59:12.657683Z",
+ "name": "Alter Authentic Documents",
+ "description": "Alter authentic documents (public or non-public) to achieve campaign goals. The altered documents are intended to appear as if they are authentic can be \"leaked\" during later stages in the operation.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4156,7 +4156,7 @@
}
],
"object_marking_refs": [
- "marking-definition--44be47a1-7a10-4443-bd1a-1d585c544450"
+ "marking-definition--744df4b6-2091-44e3-907c-441330536d7d"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4169,12 +4169,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--dc48b236-a1f8-4631-9645-bf76dd558c29",
- "created_by_ref": "identity--dad1c20e-63de-4448-b183-6efa6112d8ff",
- "created": "2022-07-02T17:28:36.972086Z",
- "modified": "2022-07-02T17:28:36.972086Z",
+ "id": "attack-pattern--9ae37313-f374-4007-bf44-91d0b85d8e1a",
+ "created_by_ref": "identity--c3e66673-d857-4d3a-b3ff-71f50ff1a100",
+ "created": "2022-07-02T19:59:12.658007Z",
+ "modified": "2022-07-02T19:59:12.658007Z",
"name": "Create Inauthentic Accounts",
- "description": "TA15",
+ "description": "Inauthentic accounts include bot accounts, cyborg accounts, sockpuppet accounts, and anonymous accounts.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4189,7 +4189,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a5d73ac3-eb8b-41fd-a1c5-624f984880bc"
+ "marking-definition--51dec3f0-5ebc-44fa-a974-392ea963cc72"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -4202,12 +4202,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--2fd5387c-c9c4-4de2-bcb7-0ef7364b819c",
- "created_by_ref": "identity--2c02fedc-a9cd-4754-8a58-896f08e0ea5e",
- "created": "2022-07-02T17:28:36.972415Z",
- "modified": "2022-07-02T17:28:36.972415Z",
+ "id": "attack-pattern--72b26317-80d3-4149-9161-708c83549ac1",
+ "created_by_ref": "identity--777b9242-6ee1-45a9-8340-29e19082e808",
+ "created": "2022-07-02T19:59:12.658326Z",
+ "modified": "2022-07-02T19:59:12.658326Z",
"name": "Create Anonymous Accounts",
- "description": "TA15",
+ "description": "Anonymous accounts or anonymous users refer to users that access network resources without providing a username or password. An influence operation may use anonymous accounts to spread content without direct attribution to the operation. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4222,7 +4222,7 @@
}
],
"object_marking_refs": [
- "marking-definition--65f4f1c7-429e-48d7-b2eb-1ab8f4b93ad1"
+ "marking-definition--a9c8feb5-836a-4c4a-8f52-db6503f2e7ab"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4235,12 +4235,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--1d4bebe8-8bab-4066-91ad-45a3fef5161f",
- "created_by_ref": "identity--c4feb0dc-f31c-4161-b6f0-c52d03b3a5b0",
- "created": "2022-07-02T17:28:36.972743Z",
- "modified": "2022-07-02T17:28:36.972743Z",
+ "id": "attack-pattern--a0a9b00c-cd91-4bbb-bfe7-546b64d8334d",
+ "created_by_ref": "identity--cbd74599-47fb-487d-aacf-ed5ecafe4cba",
+ "created": "2022-07-02T19:59:12.658659Z",
+ "modified": "2022-07-02T19:59:12.658659Z",
"name": "Create Cyborg Accounts",
- "description": "TA15",
+ "description": "Cyborg accounts refer to partly manned, partly automated social media accounts. Cyborg accounts primarily act as bots, but a human operator periodically takes control of the account to engage with real social media users by responding to comments and posting original content. Influence operations may use cyborg accounts to reduce the amount of direct human input required to maintain a regular account but increase the apparent legitimacy of the cyborg account by occasionally breaking its bot-like behavior with human interaction. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4255,7 +4255,7 @@
}
],
"object_marking_refs": [
- "marking-definition--4e12ffe3-9fb9-49b5-9d15-91081cd84641"
+ "marking-definition--fa557297-80e7-425f-b96e-fb683a2d9abc"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4268,12 +4268,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--e63da0fd-83f8-443b-9767-eb50759f36c0",
- "created_by_ref": "identity--2b649a1c-ab37-4021-85ad-274f380b694b",
- "created": "2022-07-02T17:28:36.973073Z",
- "modified": "2022-07-02T17:28:36.973073Z",
+ "id": "attack-pattern--7be98bc2-6d02-413b-bf2d-cd3f71a72526",
+ "created_by_ref": "identity--4fb17639-2a3e-4381-b996-1573b9ce43d2",
+ "created": "2022-07-02T19:59:12.658997Z",
+ "modified": "2022-07-02T19:59:12.658997Z",
"name": "Create Bot Accounts",
- "description": "TA15",
+ "description": "Bots refer to autonomous internet users that interact with systems or other users while imitating traditional human behavior. Bots use a variety of tools to stay active without direct human operation, including artificial intelligence and big data analytics. For example, an individual may program a Twitter bot to retweet a tweet every time it contains a certain keyword or hashtag. An influence operation may use bots to increase its exposure and artificially promote its content across the internet without dedicating additional time or human resources. \nAmplifier bots promote operation content through reposts, shares, and likes to increase the content\u2019s online popularity. Hacker bots are traditionally covert bots running on computer scripts that rarely engage with users and work primarily as agents of larger cyberattacks, such as a Distributed Denial of Service attacks. Spammer bots are programmed to post content on social media or in comment sections, usually as a supplementary tool. Impersonator bots102 pose as real people by mimicking human behavior, complicating their detection. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4288,7 +4288,7 @@
}
],
"object_marking_refs": [
- "marking-definition--77f3b386-c658-4f4f-ac44-17ccf2766c15"
+ "marking-definition--0fbede3a-ab10-4da3-af03-8d92ea57f2a0"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4301,12 +4301,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--3dc7575f-3242-497a-a47c-23d50e05cbfc",
- "created_by_ref": "identity--a7a4f86b-050a-45f8-be5d-d6c0d2be6bf5",
- "created": "2022-07-02T17:28:36.973402Z",
- "modified": "2022-07-02T17:28:36.973402Z",
+ "id": "attack-pattern--7e30b889-c9f9-4932-aa0d-82d5f1d79e45",
+ "created_by_ref": "identity--3529d4d3-6f11-49ed-afce-8b59dd90d796",
+ "created": "2022-07-02T19:59:12.659319Z",
+ "modified": "2022-07-02T19:59:12.659319Z",
"name": "Create Sockpuppet Accounts",
- "description": "TA15",
+ "description": "Sockpuppet accounts refer to falsified accounts that either promote the influence operation\u2019s own material or attack critics of the material online. Individuals who control sockpuppet accounts also man at least one other user account.67 Sockpuppet accounts help legitimize operation narratives by providing an appearance of external support for the material and discrediting opponents of the operation. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4321,7 +4321,7 @@
}
],
"object_marking_refs": [
- "marking-definition--13adfddf-3975-421a-963b-753e100927e1"
+ "marking-definition--f0ca3c70-6890-4d7f-b6f9-ca0d932f2b93"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4334,12 +4334,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c8096e1e-bd17-43e9-b7cf-138cf344d73d",
- "created_by_ref": "identity--5bd91aa6-f185-4aaf-9eda-9435a8e22f1a",
- "created": "2022-07-02T17:28:36.973734Z",
- "modified": "2022-07-02T17:28:36.973734Z",
- "name": "Recruit bad actors",
- "description": "TA15",
+ "id": "attack-pattern--aa3dd7f6-b16f-4ee4-850a-91394b33622a",
+ "created_by_ref": "identity--78412889-7213-4314-b440-21473c4c1a28",
+ "created": "2022-07-02T19:59:12.659657Z",
+ "modified": "2022-07-02T19:59:12.659657Z",
+ "name": "Recruit malign actors",
+ "description": "Operators recruit bad actors paying recruiting, or exerting control over individuals includes trolls, partisans, and contractors.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4354,7 +4354,7 @@
}
],
"object_marking_refs": [
- "marking-definition--24c5c541-a327-400e-b565-d37c20709a32"
+ "marking-definition--c0db4859-5ce8-48ec-8b6b-8e0e7dd083ff"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -4367,12 +4367,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--1d35a05b-99d7-4efb-8619-c0bfc4ef13a7",
- "created_by_ref": "identity--bd5f1cf0-4496-464d-be7d-1fb96711b1bf",
- "created": "2022-07-02T17:28:36.974068Z",
- "modified": "2022-07-02T17:28:36.974068Z",
+ "id": "attack-pattern--437280b4-4445-456f-ab6c-2ef6d9913c4d",
+ "created_by_ref": "identity--7e4b79b1-425b-4343-8d3c-24031ad1d8bc",
+ "created": "2022-07-02T19:59:12.660033Z",
+ "modified": "2022-07-02T19:59:12.660033Z",
"name": "Recruit Contractors",
- "description": "TA15",
+ "description": "Operators recruit paid contractor to support the campaign.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4387,7 +4387,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c2f7b249-aeb9-49fd-bd74-717bc60c2952"
+ "marking-definition--84169122-4c45-4b07-8046-f8b412019ef1"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4400,12 +4400,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--52d6fdeb-d6c6-4a0b-bf8e-6bc7b29e37ec",
- "created_by_ref": "identity--49b61c97-8260-4d89-9c3b-6ed4fe263946",
- "created": "2022-07-02T17:28:36.974405Z",
- "modified": "2022-07-02T17:28:36.974405Z",
+ "id": "attack-pattern--9e3cb11b-78e4-4ff3-9040-0a14d5b20951",
+ "created_by_ref": "identity--63834bff-db7e-4ed7-8030-719074626ce9",
+ "created": "2022-07-02T19:59:12.66044Z",
+ "modified": "2022-07-02T19:59:12.66044Z",
"name": "Recruit Partisans",
- "description": "TA15",
+ "description": "Operators recruit partisans (ideologically-aligned individuals) to support the campaign.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4420,7 +4420,7 @@
}
],
"object_marking_refs": [
- "marking-definition--b487d22d-05cb-4169-91f3-a2735c9bb9aa"
+ "marking-definition--50f2b820-4199-4d85-8eaf-4b858d781353"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4433,12 +4433,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b2c9d68e-04f9-4219-89e8-f4b625d53842",
- "created_by_ref": "identity--e6752961-6931-4f98-b1a1-76229ec2b286",
- "created": "2022-07-02T17:28:36.974737Z",
- "modified": "2022-07-02T17:28:36.974737Z",
+ "id": "attack-pattern--09c83f74-e10c-452e-b55b-37807cc79c95",
+ "created_by_ref": "identity--047518ae-fd89-411a-ac53-0d262d59768c",
+ "created": "2022-07-02T19:59:12.660812Z",
+ "modified": "2022-07-02T19:59:12.660812Z",
"name": "Enlist Troll Accounts",
- "description": "TA15",
+ "description": "An influence operation may hire trolls, or human operators of fake accounts that aim to provoke others by posting and amplifying content about controversial issues. Trolls can serve to discredit an influence operation\u2019s opposition or bring attention to the operation\u2019s cause through debate. \nClassic trolls refer to regular people who troll for personal reasons, such as attention-seeking or boredom. Classic trolls may advance operation narratives by coincidence but are not directly affiliated with any larger operation. Conversely, hybrid trolls act on behalf of another institution, such as a state or financial organization, and post content with a specific ideological goal. Hybrid trolls may be highly advanced and institutionalized or less organized and work for a single individual. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4453,7 +4453,7 @@
}
],
"object_marking_refs": [
- "marking-definition--32874c97-0bfc-4d2b-9569-83c359463ea8"
+ "marking-definition--7e51d2e1-3838-4081-a1a0-d499970c5de3"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4466,12 +4466,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--939d0f04-b080-47cc-ad3a-c971084d37ca",
- "created_by_ref": "identity--c1d42c8c-367c-4aea-bd96-d35e890f9df3",
- "created": "2022-07-02T17:28:36.975074Z",
- "modified": "2022-07-02T17:28:36.975074Z",
+ "id": "attack-pattern--a5d16185-7fbd-41e8-b549-f8534a570ca9",
+ "created_by_ref": "identity--0e3efd5a-baf0-4788-b647-75a5a0e7cf03",
+ "created": "2022-07-02T19:59:12.661177Z",
+ "modified": "2022-07-02T19:59:12.661177Z",
"name": "Build Network",
- "description": "TA15",
+ "description": "Operators build their own network, creating links between accounts -- whether authentic or inauthentic -- in order amplify and promote narratives and artifacts, and encourage further growth of ther network, as well as the ongoing sharing and engagement with operational content.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4486,7 +4486,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7cb70c73-8093-49bf-8595-6720de0bc5e4"
+ "marking-definition--eccd6ccd-7558-4fb6-8814-38d88bbbbaa3"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -4499,12 +4499,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4cf400f0-0874-4b3f-86ac-5e55dda4506e",
- "created_by_ref": "identity--03467c90-3216-44c0-bbf5-cb371dcaa3bf",
- "created": "2022-07-02T17:28:36.975409Z",
- "modified": "2022-07-02T17:28:36.975409Z",
+ "id": "attack-pattern--e455a715-d6ae-4bb7-938c-0087e929ede0",
+ "created_by_ref": "identity--7e81d607-c8aa-418a-b1cd-55169f944c2a",
+ "created": "2022-07-02T19:59:12.661537Z",
+ "modified": "2022-07-02T19:59:12.661537Z",
"name": "Create Organizations",
- "description": "TA15",
+ "description": "Influence operations may establish organizations with legitimate or falsified hierarchies, staff, and content to structure operation assets, provide a sense of legitimacy to the operation, or provide institutional backing to operation activities.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4519,7 +4519,7 @@
}
],
"object_marking_refs": [
- "marking-definition--da742be8-239b-48ee-958b-200f0dfc1dbc"
+ "marking-definition--c8c81a89-73f8-4b9e-bac1-314380be9227"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4532,12 +4532,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--841a7027-21e2-47f0-a8be-cc43d0e85faf",
- "created_by_ref": "identity--9f57ca6b-1cb8-4d45-93e3-26f6fee85399",
- "created": "2022-07-02T17:28:36.975738Z",
- "modified": "2022-07-02T17:28:36.975738Z",
- "name": "Follow Trains",
- "description": "TA15",
+ "id": "attack-pattern--0f5cbbee-3e87-4cdc-b544-ee9374919426",
+ "created_by_ref": "identity--83479fa9-197a-49d1-a3e0-c940b9701750",
+ "created": "2022-07-02T19:59:12.661899Z",
+ "modified": "2022-07-02T19:59:12.661899Z",
+ "name": "Use Follow Trains",
+ "description": "A follow train is a group of people who follow each other on a social media platform, often as a way for an individual or campaign to grow its social media following. Follow trains may be a violation of platform Terms of Service. They are also known as follow-for-follow groups. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4552,7 +4552,7 @@
}
],
"object_marking_refs": [
- "marking-definition--8f36e44d-f28a-4f6e-943b-5199f32bf6d2"
+ "marking-definition--c0b7552f-9e0d-4590-af1b-f4a8231c65e9"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4565,12 +4565,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b802c014-90dc-4e3f-8ee8-9c77ccc07f7c",
- "created_by_ref": "identity--9c17f28c-0558-4998-b72d-9aa9c23fe726",
- "created": "2022-07-02T17:28:36.976067Z",
- "modified": "2022-07-02T17:28:36.976067Z",
+ "id": "attack-pattern--ad3872bc-e727-44fb-9f7b-6afc4a54958c",
+ "created_by_ref": "identity--3a7448d0-662c-432a-9de3-45a3bc621dbc",
+ "created": "2022-07-02T19:59:12.662248Z",
+ "modified": "2022-07-02T19:59:12.662248Z",
"name": "Create Community or Sub-group",
- "description": "TA15",
+ "description": "When there is not an existing community or sub-group that meets a campaign's goals, an influence operation may seek to create a community or sub-group. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4585,7 +4585,7 @@
}
],
"object_marking_refs": [
- "marking-definition--1bffec35-57a8-4672-a156-73ec31d41f4e"
+ "marking-definition--01b62d86-b56d-45b8-9ad2-c3dc78c1c5cd"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4598,12 +4598,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--82e0d266-415c-495b-989e-9c029298646f",
- "created_by_ref": "identity--846d1766-3f1d-4caa-98ea-616d4b934797",
- "created": "2022-07-02T17:28:36.976396Z",
- "modified": "2022-07-02T17:28:36.976396Z",
- "name": "Acquire/ recruit Network",
- "description": "TA15",
+ "id": "attack-pattern--76e6a962-860b-461c-a6ed-6de2e9922be1",
+ "created_by_ref": "identity--8797daf0-5b36-41bb-8d6e-05467371987e",
+ "created": "2022-07-02T19:59:12.662591Z",
+ "modified": "2022-07-02T19:59:12.662591Z",
+ "name": "Acquire/Recruit Network",
+ "description": "Operators acquire an existing network by paying, recruiting, or exerting control over the leaders of the existing network. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4618,7 +4618,7 @@
}
],
"object_marking_refs": [
- "marking-definition--cc3b331c-ecfa-4faa-be5e-0c41230c5cdc"
+ "marking-definition--bc25de8f-c6cb-4aef-b7a7-26cc71b3be42"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -4631,12 +4631,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--30d1076a-9f74-4aba-a61a-20339888ef0f",
- "created_by_ref": "identity--daa93585-f755-4265-9a71-9228e2f539b0",
- "created": "2022-07-02T17:28:36.97672Z",
- "modified": "2022-07-02T17:28:36.97672Z",
+ "id": "attack-pattern--7763a745-0e8f-4319-b877-440860e304e7",
+ "created_by_ref": "identity--47399482-4979-4318-a257-30fcce1fb09f",
+ "created": "2022-07-02T19:59:12.662918Z",
+ "modified": "2022-07-02T19:59:12.662918Z",
"name": "Fund Proxies",
- "description": "TA15",
+ "description": "An influence operation may fund proxies, or external entities that work for the operation. An operation may recruit/train users with existing sympathies towards the operation\u2019s narratives and/or goals as proxies. Funding proxies serves various purposes including: \n- Diversifying operation locations to complicate attribution \n- Reducing the workload for direct operation assets ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4651,7 +4651,7 @@
}
],
"object_marking_refs": [
- "marking-definition--cf502bed-e521-4459-9578-2bcee6a94a2b"
+ "marking-definition--f958993d-04d3-4aeb-a0ff-0854d5e56e22"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4664,12 +4664,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--edc140d7-fd0f-40f1-b85c-78c1599da3e1",
- "created_by_ref": "identity--56774b1f-7599-4b9c-adaa-7728134194b5",
- "created": "2022-07-02T17:28:36.977046Z",
- "modified": "2022-07-02T17:28:36.977046Z",
- "name": "Botnets",
- "description": "TA15",
+ "id": "attack-pattern--8591e263-fb0c-4a9b-bcb6-ac1c940ff152",
+ "created_by_ref": "identity--4f66be16-5498-4b7b-999e-4d5be13dbce7",
+ "created": "2022-07-02T19:59:12.663301Z",
+ "modified": "2022-07-02T19:59:12.663301Z",
+ "name": "Acquire Botnets",
+ "description": "A botnet is a group of bots that can function in coordination with each other. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4684,7 +4684,7 @@
}
],
"object_marking_refs": [
- "marking-definition--acd8fb2d-37dc-4e97-bfd4-8aa693adbb47"
+ "marking-definition--82c30519-231c-4d92-9ed9-bf390024176e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4697,12 +4697,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--78c65ad8-b96c-48b2-857d-f9952f3bcb7e",
- "created_by_ref": "identity--364b03c0-64e4-4dd1-90fc-8062c8cef0a8",
- "created": "2022-07-02T17:28:36.977361Z",
- "modified": "2022-07-02T17:28:36.977361Z",
+ "id": "attack-pattern--d6f1b55e-ccb2-4cd6-9ed0-84d326e51a89",
+ "created_by_ref": "identity--891c047b-2236-4b7d-bcf9-ccdb63c25176",
+ "created": "2022-07-02T19:59:12.663632Z",
+ "modified": "2022-07-02T19:59:12.663632Z",
"name": "Infiltrate Existing Networks",
- "description": "TA15",
+ "description": "Operators deceptively insert social assets into existing networks as group members in order to influence the members of the network and the wider information environment that the network impacts.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4717,7 +4717,7 @@
}
],
"object_marking_refs": [
- "marking-definition--fae9f26c-494d-4d95-a130-a66a29547b23"
+ "marking-definition--134ec6be-bdbb-4ee1-a01a-d584cac02134"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -4730,12 +4730,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--070ebd8c-f578-4334-8f77-06b59315438e",
- "created_by_ref": "identity--a2e14224-6641-4671-9c7c-86eb2fb2adf6",
- "created": "2022-07-02T17:28:36.977679Z",
- "modified": "2022-07-02T17:28:36.977679Z",
+ "id": "attack-pattern--23b92b9a-d1e2-4049-ac91-99c5f094a84e",
+ "created_by_ref": "identity--38921490-7bcc-4bf4-a3aa-0580b963671c",
+ "created": "2022-07-02T19:59:12.663957Z",
+ "modified": "2022-07-02T19:59:12.663957Z",
"name": "Identify susceptible targets in networks",
- "description": "TA15",
+ "description": "When seeking to infiltrate an existing network, an influence operation may identify individuals and groups that might be susceptible to being co-opted or influenced.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4750,7 +4750,7 @@
}
],
"object_marking_refs": [
- "marking-definition--44c98b96-49cd-4971-a2bb-ec346392a6d9"
+ "marking-definition--ede67eb4-1420-4d5c-9c93-340c44f02e25"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4763,12 +4763,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--ba8f2965-53cc-410b-81c5-ecb749a85a25",
- "created_by_ref": "identity--403a28b8-c490-41b7-ae76-9a229b0a7d9e",
- "created": "2022-07-02T17:28:36.977994Z",
- "modified": "2022-07-02T17:28:36.977994Z",
- "name": "Utilize Butterfly Attack",
- "description": "TA15",
+ "id": "attack-pattern--3b04c334-059e-4983-80c7-c602062352c4",
+ "created_by_ref": "identity--e0347ed6-f4bb-4b16-a157-f49e981f4938",
+ "created": "2022-07-02T19:59:12.664285Z",
+ "modified": "2022-07-02T19:59:12.664285Z",
+ "name": "Utilize Butterfly Attacks",
+ "description": "Butterfly attacks occur when operators pretend to be members of a certain social group, usually a group that struggles for representation. An influence operation may mimic a group to insert controversial statements into the discourse, encourage the spread of operation content, or promote harassment among group members. Unlike astroturfing, butterfly attacks aim to infiltrate and discredit existing grassroots movements, organizations, and media campaigns. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4783,7 +4783,7 @@
}
],
"object_marking_refs": [
- "marking-definition--6bd1e654-9811-4431-a88f-b1e5bc6f0a27"
+ "marking-definition--20b472eb-f674-4e4a-9785-2c8ca7479801"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4796,12 +4796,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--08f58eed-79eb-4a78-9ae5-ec93ec5aaaa0",
- "created_by_ref": "identity--1881a3b0-4cbd-4d05-b180-78634db0de58",
- "created": "2022-07-02T17:28:36.978314Z",
- "modified": "2022-07-02T17:28:36.978314Z",
+ "id": "attack-pattern--7dbaf7b4-0485-4671-8541-065b99c4dc06",
+ "created_by_ref": "identity--930e5cc3-c567-452d-938e-5a40255b929e",
+ "created": "2022-07-02T19:59:12.664611Z",
+ "modified": "2022-07-02T19:59:12.664611Z",
"name": "Develop Owned Media Assets",
- "description": "TA15",
+ "description": "An owned media asset refers to an agency or organization through which an influence operation may create, develop, and host content and narratives. Owned media assets include websites, blogs, social media pages, forums, and other platforms that facilitate the creation and organization of content.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4816,7 +4816,7 @@
}
],
"object_marking_refs": [
- "marking-definition--18d9fbe7-f202-47bf-8f7f-a4cc95c2faca"
+ "marking-definition--057460f8-0e1c-45ef-9887-48054eb3898f"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -4829,12 +4829,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a6c98a38-b972-4c1b-aaba-27bf7be9afe8",
- "created_by_ref": "identity--57649d22-9c99-490f-a825-a527adbea9d0",
- "created": "2022-07-02T17:28:36.978634Z",
- "modified": "2022-07-02T17:28:36.978634Z",
- "name": "Leverage Content Farm",
- "description": "TA15",
+ "id": "attack-pattern--dc5fe86d-bf2c-4e17-8d7b-9e3cfa6a0683",
+ "created_by_ref": "identity--b549dd3e-fd8d-4e55-96ba-8a217d269be7",
+ "created": "2022-07-02T19:59:12.664946Z",
+ "modified": "2022-07-02T19:59:12.664946Z",
+ "name": "Leverage Content Farms",
+ "description": "Using the services of large-scale content providers for creating and amplifying campaign artifacts at scale.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4849,7 +4849,7 @@
}
],
"object_marking_refs": [
- "marking-definition--bacda8da-e8b4-40ae-b5ba-a78fba7998bb"
+ "marking-definition--872bda36-35fd-4bd5-ba8c-2127084481f5"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -4862,12 +4862,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--f4a97cf7-af47-4138-8fd4-b45f63b73c9a",
- "created_by_ref": "identity--086a6d0b-0323-4346-97c3-08f7f973e2c7",
- "created": "2022-07-02T17:28:36.978956Z",
- "modified": "2022-07-02T17:28:36.978956Z",
- "name": "Create a Content Farm",
- "description": "TA15",
+ "id": "attack-pattern--8571126c-cb8e-4ef5-945a-83f7af3d599d",
+ "created_by_ref": "identity--5f62221d-f68f-4dfb-94d9-60b6cbf8fd76",
+ "created": "2022-07-02T19:59:12.665269Z",
+ "modified": "2022-07-02T19:59:12.665269Z",
+ "name": "Create Content Farms",
+ "description": "An influence operation may create an organization for creating and amplifying campaign artifacts at scale.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4882,7 +4882,7 @@
}
],
"object_marking_refs": [
- "marking-definition--167c0d6f-5885-4faa-855f-dda22c0494a7"
+ "marking-definition--bbfa766c-6b2b-407b-972f-672b7d1fd2a4"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4895,12 +4895,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--fe3d67af-3f3c-4cc0-9514-2feef326b494",
- "created_by_ref": "identity--2bd9dca6-d802-4636-87d6-e21d4565042b",
- "created": "2022-07-02T17:28:36.979283Z",
- "modified": "2022-07-02T17:28:36.979283Z",
+ "id": "attack-pattern--4163a8ac-c555-49bf-a17e-b9e15036b667",
+ "created_by_ref": "identity--adebf0cc-3b15-462f-81c7-2ab3cc78a145",
+ "created": "2022-07-02T19:59:12.665591Z",
+ "modified": "2022-07-02T19:59:12.665591Z",
"name": "Outsource Content Creation to External Organizations",
- "description": "TA15",
+ "description": "An influence operation may outsource content creation to external companies to avoid attribution, increase the rate of content creation, or improve content quality, i.e., by employing an organization that can create content in the target audience\u2019s native language. Employed organizations may include marketing companies for tailored advertisements or external content farms for high volumes of targeted media. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4915,7 +4915,7 @@
}
],
"object_marking_refs": [
- "marking-definition--eff6a292-ff1f-4afd-9966-e1b994c8d9a9"
+ "marking-definition--d6bb0100-2d28-4537-842e-460440239257"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4928,12 +4928,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--3006fa0c-25d6-4ea8-a9fa-bcaa272fbc1d",
- "created_by_ref": "identity--e2a4a14b-d618-47fb-a484-0ebf40082161",
- "created": "2022-07-02T17:28:36.979605Z",
- "modified": "2022-07-02T17:28:36.979605Z",
+ "id": "attack-pattern--771a4024-a91e-4b1e-8744-c91b32196d63",
+ "created_by_ref": "identity--61551fa0-8485-4e90-8f9a-1864f4ff6e58",
+ "created": "2022-07-02T19:59:12.665922Z",
+ "modified": "2022-07-02T19:59:12.665922Z",
"name": "Create personas",
- "description": "TA16",
+ "description": "Creating fake people, often with accounts across multiple platforms. These personas can be as simple as a name, can contain slightly more background like location, profile pictures, backstory, or can be effectively backstopped with indicators like fake identity documents. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4948,7 +4948,7 @@
}
],
"object_marking_refs": [
- "marking-definition--95c5aee8-695f-4b68-97be-e450e309fc98"
+ "marking-definition--f3127fa8-ad54-48ee-8c6c-8a581e896655"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -4961,12 +4961,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--04158d63-8072-48ae-a05a-23809682cd1f",
- "created_by_ref": "identity--ab867de0-2067-4bd5-93af-886a89f62d00",
- "created": "2022-07-02T17:28:36.979936Z",
- "modified": "2022-07-02T17:28:36.979936Z",
+ "id": "attack-pattern--970f666f-aa3b-4cea-9ca6-c8e2410dedbb",
+ "created_by_ref": "identity--068e7816-d23e-4a0f-80c4-d6f75343eb00",
+ "created": "2022-07-02T19:59:12.666241Z",
+ "modified": "2022-07-02T19:59:12.666241Z",
"name": "Backstop personas ",
- "description": "TA16",
+ "description": "Create other assets/dossier/cover/fake relationships and/or connections or documents, sites, bylines, attributions, to establish/augment/inflate crediblity/believability",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -4981,7 +4981,7 @@
}
],
"object_marking_refs": [
- "marking-definition--0d66717e-e6af-4eb0-926b-0b8d2fed6911"
+ "marking-definition--b3bd7c6c-a4f6-4280-b62b-e71d80231d2e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -4994,12 +4994,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--fbff3e68-3833-46aa-8b05-223b16c12608",
- "created_by_ref": "identity--6a104dc8-ccde-49f0-864b-994b0294ab14",
- "created": "2022-07-02T17:28:36.980306Z",
- "modified": "2022-07-02T17:28:36.980306Z",
+ "id": "attack-pattern--2707372c-26a1-4c1f-8875-65a2433cda70",
+ "created_by_ref": "identity--d7566583-5ed1-4464-a35c-fe83bcc47cb9",
+ "created": "2022-07-02T19:59:12.666562Z",
+ "modified": "2022-07-02T19:59:12.666562Z",
"name": "Establish Inauthentic News Sites",
- "description": "TA16",
+ "description": "Modern computational propaganda makes use of a cadre of imposter news sites spreading globally. These sites, sometimes motivated by concerns other than propaganda--for instance, click-based revenue--often have some superficial markers of authenticity, such as naming and site-design. But many can be quickly exposed with reference to their owenership, reporting history and adverstising details.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5014,7 +5014,7 @@
}
],
"object_marking_refs": [
- "marking-definition--51402895-402c-45cc-b4c7-35cf44608720"
+ "marking-definition--18730cb6-f5ee-4211-8dc4-b1db494f33c9"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -5027,12 +5027,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--ed4f4eb5-994b-45b3-9018-7a8cd5d6f16a",
- "created_by_ref": "identity--96a52b2b-2aab-4a25-969f-31c8bc54d011",
- "created": "2022-07-02T17:28:36.980626Z",
- "modified": "2022-07-02T17:28:36.980626Z",
+ "id": "attack-pattern--6eb226f3-9e7d-4404-ad97-44fdf562de9b",
+ "created_by_ref": "identity--e1663cc3-77c7-4255-9c3d-c8990bffbe6a",
+ "created": "2022-07-02T19:59:12.666887Z",
+ "modified": "2022-07-02T19:59:12.666887Z",
"name": "Create Inauthentic News Sites",
- "description": "TA16",
+ "description": "Create Inauthentic News Sites",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5047,7 +5047,7 @@
}
],
"object_marking_refs": [
- "marking-definition--6977f790-fc1d-4e7b-aebf-23e9c8cbd4b0"
+ "marking-definition--c3a71697-22dc-487c-ac60-2eba66a28291"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5060,12 +5060,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--d444b0b1-16b3-4e73-a94c-dc47a3a1ed5b",
- "created_by_ref": "identity--a4098223-4aae-4cb9-a92d-13e0fd65515c",
- "created": "2022-07-02T17:28:36.980947Z",
- "modified": "2022-07-02T17:28:36.980947Z",
+ "id": "attack-pattern--11af0d9d-1e5c-4b28-b586-cffc7b2e68fc",
+ "created_by_ref": "identity--6b4a9bf5-2e4d-44e6-9ef1-6f58db491c60",
+ "created": "2022-07-02T19:59:12.667208Z",
+ "modified": "2022-07-02T19:59:12.667208Z",
"name": "Leverage Existing Inauthentic News Sites",
- "description": "TA16",
+ "description": "Leverage Existing Inauthentic News Sites",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5080,7 +5080,7 @@
}
],
"object_marking_refs": [
- "marking-definition--df7ad146-9c6d-4a83-8386-607c007732be"
+ "marking-definition--69c75baf-1bde-4e9e-978a-7298468bfabf"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5093,12 +5093,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--41bdae21-3938-47e4-81e9-a4ffa5cffb61",
- "created_by_ref": "identity--b8dac218-44eb-4225-b0fe-4c2a4ffce874",
- "created": "2022-07-02T17:28:36.981264Z",
- "modified": "2022-07-02T17:28:36.981264Z",
+ "id": "attack-pattern--35550613-e5ec-4d78-8518-1990ade69aec",
+ "created_by_ref": "identity--a20d7f99-0240-4d4f-813f-8bfe83504995",
+ "created": "2022-07-02T19:59:12.667529Z",
+ "modified": "2022-07-02T19:59:12.667529Z",
"name": "Prepare Assets Impersonating Legitimate Entities",
- "description": "TA16",
+ "description": "An influence operation may prepare assets impersonating legitimate entities to further conceal its network identity and add a layer of legitimacy to its operation content. Users will more likely believe and less likely fact-check news from recognizable sources rather than unknown sites. Legitimate entities may include authentic news outlets, public figures, organizations, or state entities. \nAn influence operation may use a wide variety of cyber techniques to impersonate a legitimate entity\u2019s website or social media account. Typosquatting87 is the international registration of a domain name with purposeful variations of the impersonated domain name through intentional typos, top-level domain (TLD) manipulation, or punycode. Typosquatting facilitates the creation of falsified websites by creating similar domain names in the URL box, leaving it to the user to confirm that the URL is correct. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5113,7 +5113,7 @@
}
],
"object_marking_refs": [
- "marking-definition--58b0ef60-3d30-4e7b-91df-d046144e0854"
+ "marking-definition--a1a2dafb-7fc7-48db-b1ae-d1bc996ed311"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -5126,12 +5126,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--84a417d1-ee53-43cc-ae7b-440a3e1ba555",
- "created_by_ref": "identity--dd39b0e9-bced-45fd-addd-7a368b10b926",
- "created": "2022-07-02T17:28:36.981584Z",
- "modified": "2022-07-02T17:28:36.981584Z",
+ "id": "attack-pattern--9e00d7b6-72ac-4e51-85cc-ed39df4de126",
+ "created_by_ref": "identity--2c308133-6863-48d6-909c-4b0816cf8c0b",
+ "created": "2022-07-02T19:59:12.667854Z",
+ "modified": "2022-07-02T19:59:12.667854Z",
"name": "Astroturfing",
- "description": "TA16",
+ "description": "Astroturfing occurs when an influence operation disguises itself as grassroots movement or organization that supports operation narratives. Unlike butterfly attacks, astroturfing aims to increase the appearance of popular support for the operation cause and does not infiltrate existing groups to discredit their objectives. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5146,7 +5146,7 @@
}
],
"object_marking_refs": [
- "marking-definition--373a6e38-aca3-45ba-ad9a-299bc5a4c4bd"
+ "marking-definition--585ed65b-771a-45dd-8e2a-bf8976a09c41"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5159,12 +5159,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--edea2df0-2c56-46b7-9264-1622a44476e2",
- "created_by_ref": "identity--52485474-019c-4bd0-afa6-4f39cf895592",
- "created": "2022-07-02T17:28:36.981905Z",
- "modified": "2022-07-02T17:28:36.981905Z",
+ "id": "attack-pattern--35c84f14-34e0-479a-b6b4-043750313fc4",
+ "created_by_ref": "identity--10551072-2fec-440f-808e-d46a00535785",
+ "created": "2022-07-02T19:59:12.668178Z",
+ "modified": "2022-07-02T19:59:12.668178Z",
"name": "Spoof/parody account/site",
- "description": "TA16",
+ "description": "An influence operation may prepare assets impersonating legitimate entities to further conceal its network identity and add a layer of legitimacy to its operation content. Users will more likely believe and less likely fact-check news from recognizable sources rather than unknown sites. Legitimate entities may include authentic news outlets, public figures, organizations, or state entities. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5179,7 +5179,7 @@
}
],
"object_marking_refs": [
- "marking-definition--42b8f0c1-c5f4-4633-9ce7-f48aa732b6da"
+ "marking-definition--5f6fba74-b814-4c81-9023-d43ddd1b84ee"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5192,12 +5192,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--78596a5d-9d80-4993-81dd-b89edd68cf21",
- "created_by_ref": "identity--0ee51536-f646-4885-9f41-d029f2088a24",
- "created": "2022-07-02T17:28:36.982226Z",
- "modified": "2022-07-02T17:28:36.982226Z",
+ "id": "attack-pattern--91a26229-8c2f-46da-b4fb-5dc291ca84ad",
+ "created_by_ref": "identity--80449a28-41c9-4c0c-ab88-99d103b8a716",
+ "created": "2022-07-02T19:59:12.6685Z",
+ "modified": "2022-07-02T19:59:12.6685Z",
"name": "Co-opt Trusted Sources",
- "description": "TA16",
+ "description": "An influence operation may co-opt trusted sources by infiltrating or repurposing a source to reach a target audience through existing, previously reliable networks. Co-opted trusted sources may include: \n- National or local new outlets \n- Research or academic publications \n- Online blogs or websites ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5212,7 +5212,7 @@
}
],
"object_marking_refs": [
- "marking-definition--363ff323-9442-4e72-98f0-c25f26a19cb5"
+ "marking-definition--a8b5e6d2-aa24-458a-87aa-f83eca2d85d0"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -5225,12 +5225,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--337c05bc-515b-48e0-bf5c-d4cdd5bc7bba",
- "created_by_ref": "identity--0c7a74b3-5f15-4ce9-a4d6-801bc9e3d440",
- "created": "2022-07-02T17:28:36.982541Z",
- "modified": "2022-07-02T17:28:36.982541Z",
+ "id": "attack-pattern--25990799-9c4f-4941-aa2c-5deab1946ef1",
+ "created_by_ref": "identity--52750422-add6-44fc-a900-d21d660d5cc4",
+ "created": "2022-07-02T19:59:12.668816Z",
+ "modified": "2022-07-02T19:59:12.668816Z",
"name": "Co-Opt Trusted Individuals",
- "description": "TA16",
+ "description": "Co-Opt Trusted Individuals",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5245,7 +5245,7 @@
}
],
"object_marking_refs": [
- "marking-definition--949b58c0-5ed3-4978-ae48-7387549fc4d4"
+ "marking-definition--9ecba7a6-c6c8-4f2c-bc31-529a08bca7b3"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5258,12 +5258,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--1880ffbe-6164-4bb5-9986-7a5fb0d10751",
- "created_by_ref": "identity--4676f667-6a86-4217-b68f-35d3be2a08bb",
- "created": "2022-07-02T17:28:36.982858Z",
- "modified": "2022-07-02T17:28:36.982858Z",
+ "id": "attack-pattern--4fe2d898-b1ec-4de1-bbd0-c42de0e2bda7",
+ "created_by_ref": "identity--6d0e461f-7d90-4f23-b72c-6d8e617fb6f5",
+ "created": "2022-07-02T19:59:12.669135Z",
+ "modified": "2022-07-02T19:59:12.669135Z",
"name": "Co-Opt Grassroots Groups",
- "description": "TA16",
+ "description": "Co-Opt Grassroots Groups",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5278,7 +5278,7 @@
}
],
"object_marking_refs": [
- "marking-definition--95fd3ec5-16e4-4ff7-9b1b-560b523a8824"
+ "marking-definition--7f386c0b-1cd9-4dcd-8abe-1acbe78ec870"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5291,12 +5291,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--28de0362-57a1-4c91-afe7-991a2cdce07e",
- "created_by_ref": "identity--5c2e719b-0c84-42f9-be1c-7a980d3e106f",
- "created": "2022-07-02T17:28:36.983181Z",
- "modified": "2022-07-02T17:28:36.983181Z",
+ "id": "attack-pattern--fa57c091-0ea0-4961-a1f4-99c34eaab23a",
+ "created_by_ref": "identity--24235f90-4929-4a56-bb5b-a7ba99f4db4a",
+ "created": "2022-07-02T19:59:12.669461Z",
+ "modified": "2022-07-02T19:59:12.669461Z",
"name": "Co-opt Influencers",
- "description": "TA16",
+ "description": "Co-opt Influencers",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5311,7 +5311,7 @@
}
],
"object_marking_refs": [
- "marking-definition--8604e7db-c483-4855-a489-4059f3f2f922"
+ "marking-definition--a3dee066-f689-4009-a355-1b11b6f7e543"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5324,12 +5324,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--aaab0e8d-7862-4185-9981-e187077cf0a5",
- "created_by_ref": "identity--d1793193-3240-4660-a3ad-e129ace1571b",
- "created": "2022-07-02T17:28:36.983506Z",
- "modified": "2022-07-02T17:28:36.983506Z",
+ "id": "attack-pattern--277e6020-d211-484d-8612-f7eb3e5ef867",
+ "created_by_ref": "identity--653b5bd3-9007-4137-9e3c-7e5e0e02d5a6",
+ "created": "2022-07-02T19:59:12.669783Z",
+ "modified": "2022-07-02T19:59:12.669783Z",
"name": "Create Localized Content",
- "description": "TA05",
+ "description": "Localized content refers to content that appeals to a specific community of individuals, often in defined geographic areas. An operation may create localized content using local language and dialects to resonate with its target audience and blend in with other local news and social media. Localized content may help an operation increase legitimacy, avoid detection, and complicate external attribution.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5344,7 +5344,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c49618b7-d40e-42af-ba51-6eca0964ec92"
+ "marking-definition--e440ec90-1df2-46d9-bc31-b0c89d7e6240"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -5357,12 +5357,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--d1f4502a-e10b-4854-a5d2-92a8400bb55f",
- "created_by_ref": "identity--933f099f-7d46-47d6-bee9-ac54d8136c3a",
- "created": "2022-07-02T17:28:36.983824Z",
- "modified": "2022-07-02T17:28:36.983824Z",
+ "id": "attack-pattern--6dccbf81-1fb1-47c3-b6c5-4d1d6286be19",
+ "created_by_ref": "identity--2bc0fd98-818f-4fa1-8258-641a571d95b3",
+ "created": "2022-07-02T19:59:12.670125Z",
+ "modified": "2022-07-02T19:59:12.670125Z",
"name": "Leverage Echo Chambers/Filter Bubbles",
- "description": "TA05",
+ "description": "An echo chamber refers to an internet subgroup, often along ideological lines, where individuals only engage with \u201cothers with which they are already in agreement.\u201d A filter bubble refers to an algorithm's placement of an individual in content that they agree with or regularly engage with, possibly entrapping the user into a bubble of their own making. An operation may create these isolated areas of the internet by match existing groups, or aggregating individuals into a single target audience based on shared interests, politics, values, demographics, and other characteristics. Echo chambers and filter bubbles help to reinforce similar biases and content to the same target audience members. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5377,7 +5377,7 @@
}
],
"object_marking_refs": [
- "marking-definition--50f82b47-eb14-47c1-b078-1259d51cbec6"
+ "marking-definition--cc3e553a-6948-4a51-a6c7-124ae7c3fb77"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -5390,12 +5390,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--88a55935-0548-48cc-9062-53a501a2afa6",
- "created_by_ref": "identity--8636255f-54fd-4bd8-9d7d-883f98d50430",
- "created": "2022-07-02T17:28:36.984141Z",
- "modified": "2022-07-02T17:28:36.984141Z",
+ "id": "attack-pattern--f98165a2-f2a6-4ddb-9766-4defcdf0f9cc",
+ "created_by_ref": "identity--8e27eebf-0b3b-41a9-a331-8a70cb7118ad",
+ "created": "2022-07-02T19:59:12.670443Z",
+ "modified": "2022-07-02T19:59:12.670443Z",
"name": "Use existing Echo Chambers/Filter Bubbles",
- "description": "TA05",
+ "description": "Use existing Echo Chambers/Filter Bubbles",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5410,7 +5410,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e2c8333e-3404-4d0b-818a-d82b8bb50110"
+ "marking-definition--4055896b-cab5-4049-852c-81a921f59523"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5423,12 +5423,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--5460ed5f-dec4-4a99-8430-809244e2c236",
- "created_by_ref": "identity--b566aa09-c002-470b-849c-31d7d1dd586e",
- "created": "2022-07-02T17:28:36.984455Z",
- "modified": "2022-07-02T17:28:36.984455Z",
+ "id": "attack-pattern--f59e1ae5-2275-4568-a5fe-d06d7ba9a2c9",
+ "created_by_ref": "identity--12bd98b9-5066-484f-93f4-1943fc7011a8",
+ "created": "2022-07-02T19:59:12.670758Z",
+ "modified": "2022-07-02T19:59:12.670758Z",
"name": "Create Echo Chambers/Filter Bubbles",
- "description": "TA05",
+ "description": "Create Echo Chambers/Filter Bubbles",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5443,7 +5443,7 @@
}
],
"object_marking_refs": [
- "marking-definition--812fdd9b-e6a7-4b8b-abe7-d14ba40837b0"
+ "marking-definition--54634895-e4d3-48df-b1ff-2eed32d00fa2"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5456,12 +5456,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4c41d3b8-b60c-428a-b728-24e58c506687",
- "created_by_ref": "identity--d65a2ea9-4cab-4694-b8e1-70da1489ddfa",
- "created": "2022-07-02T17:28:36.98478Z",
- "modified": "2022-07-02T17:28:36.98478Z",
+ "id": "attack-pattern--4dd718fa-805c-44c9-a65b-25ac3414d433",
+ "created_by_ref": "identity--a1f731ef-8d5b-4cf7-b7ae-f7e728aa69d6",
+ "created": "2022-07-02T19:59:12.671079Z",
+ "modified": "2022-07-02T19:59:12.671079Z",
"name": "Exploit Data Voids",
- "description": "TA05",
+ "description": "A data void refers to a word or phrase that results in little, manipulative, or low-quality search engine data. Data voids are hard to detect and relatively harmless until exploited by an entity aiming to quickly proliferate false or misleading information during a phenomenon that causes a high number of individuals to query the term or phrase. In the Plan phase, an influence operation may identify data voids for later exploitation in the operation. \nA 2019 report by Michael Golebiewski identifies five types of data voids. (1) \u201cBreaking news\u201d data voids occur when a keyword gains popularity during a short period of time, allowing an influence operation to publish false content before legitimate news outlets have an opportunity to publish relevant information. (2) An influence operation may create a \u201cstrategic new terms\u201d data void by creating their own terms and publishing information online before promoting their keyword to the target audience. (3) An influence operation may publish content on \u201coutdated terms\u201d that have decreased in popularity, capitalizing on most search engines\u2019 preferences for recency. (4) \u201cFragmented concepts\u201d data voids separate connections between similar ideas, isolating segment queries to distinct search engine results. (5) An influence operation may use \u201cproblematic queries\u201d that previously resulted in disturbing or inappropriate content to promote messaging until mainstream media recontextualizes the term. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5476,7 +5476,7 @@
}
],
"object_marking_refs": [
- "marking-definition--912fa75b-11ac-4b4b-a3d0-b9fb9376b80a"
+ "marking-definition--fcc474e3-5ec1-45a3-a4c4-e25e7fcdc639"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5489,12 +5489,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--e4eec620-e076-447d-9d6c-2e63edf671da",
- "created_by_ref": "identity--5514c907-b96f-4d1b-b359-d88830fb973f",
- "created": "2022-07-02T17:28:36.985097Z",
- "modified": "2022-07-02T17:28:36.985097Z",
+ "id": "attack-pattern--1a85979f-226f-4f03-bd53-4bd81807bd7b",
+ "created_by_ref": "identity--86789132-0ca6-4685-bf56-7c369788883a",
+ "created": "2022-07-02T19:59:12.671407Z",
+ "modified": "2022-07-02T19:59:12.671407Z",
"name": "Livestream",
- "description": "TA07",
+ "description": "A livestream refers to an online broadcast capability that allows for real-time communication to closed or open networks.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5509,7 +5509,7 @@
}
],
"object_marking_refs": [
- "marking-definition--6debcaac-79fb-4d39-8883-ce540676433d"
+ "marking-definition--bf332cd4-6a38-4fba-a6c6-f0f125ce6b66"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -5522,12 +5522,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--50034ce6-d21e-4320-8d8b-c5fdba371a8a",
- "created_by_ref": "identity--4a6bfcca-5fc2-417e-8860-a797fb68627f",
- "created": "2022-07-02T17:28:36.985409Z",
- "modified": "2022-07-02T17:28:36.985409Z",
+ "id": "attack-pattern--14565357-ef35-4f2c-b54b-e1010ed772ab",
+ "created_by_ref": "identity--44ffec34-6a71-4f5b-b060-bf5d48b48da7",
+ "created": "2022-07-02T19:59:12.671731Z",
+ "modified": "2022-07-02T19:59:12.671731Z",
"name": "Video Livestream",
- "description": "TA07",
+ "description": "nan",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5542,7 +5542,7 @@
}
],
"object_marking_refs": [
- "marking-definition--547dd626-c8ed-446f-a62b-b7a89c949822"
+ "marking-definition--4d2351ce-857c-4223-9565-c32ad18a1eb2"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5555,12 +5555,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--02b28a12-df83-4b45-8d7a-39498b54719b",
- "created_by_ref": "identity--070f862c-ae7d-4770-9de1-a5845c0b34be",
- "created": "2022-07-02T17:28:36.985728Z",
- "modified": "2022-07-02T17:28:36.985728Z",
+ "id": "attack-pattern--cf798771-8d4d-4625-ae5a-113244b67c1f",
+ "created_by_ref": "identity--2e1efd04-e3c9-40b7-9e80-afad523b2f79",
+ "created": "2022-07-02T19:59:12.6723Z",
+ "modified": "2022-07-02T19:59:12.6723Z",
"name": "Audio Livestream",
- "description": "TA07",
+ "description": "nan",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5575,7 +5575,7 @@
}
],
"object_marking_refs": [
- "marking-definition--98966f82-106a-4753-8a5a-e8d9d4acfe68"
+ "marking-definition--3882f49d-1439-47a4-9bf2-f93c0acfdf60"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5588,12 +5588,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--09c7c07b-108f-41a6-82e1-a5fff2b8182b",
- "created_by_ref": "identity--0330d19a-d028-4478-bf80-d6c3659544bc",
- "created": "2022-07-02T17:28:36.986045Z",
- "modified": "2022-07-02T17:28:36.986045Z",
+ "id": "attack-pattern--6565d00e-6281-4157-b050-3974e3c55616",
+ "created_by_ref": "identity--63e1d0f4-a845-4e1b-83a8-7788028607b1",
+ "created": "2022-07-02T19:59:12.672621Z",
+ "modified": "2022-07-02T19:59:12.672621Z",
"name": "Social Networks",
- "description": "TA07",
+ "description": "Social media are interactive digital channels that facilitate the creation and sharing of information, ideas, interests, and other forms of expression through virtual communities and networks.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5608,7 +5608,7 @@
}
],
"object_marking_refs": [
- "marking-definition--37565e7d-ad00-4604-a990-8e109c28717c"
+ "marking-definition--e58e3e08-12b2-4cd1-9796-d8eb100b4382"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -5621,12 +5621,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--055ffd5d-4aa8-4ce4-8b6b-e91872d4b77d",
- "created_by_ref": "identity--d8909872-ea5f-459a-aedc-4032bedcc2c9",
- "created": "2022-07-02T17:28:36.986362Z",
- "modified": "2022-07-02T17:28:36.986362Z",
+ "id": "attack-pattern--98966f30-7ef7-4620-a9b1-20869084b669",
+ "created_by_ref": "identity--74e9eead-3c88-4318-91b9-434052853145",
+ "created": "2022-07-02T19:59:12.672944Z",
+ "modified": "2022-07-02T19:59:12.672944Z",
"name": "Mainstream Social Networks",
- "description": "TA07",
+ "description": "Examples include Facebook, Twitter, LinkedIn, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5641,7 +5641,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2330bc62-0a37-43c3-9bc4-98ff1df253b3"
+ "marking-definition--e6f16d2f-5342-4316-be20-1537787e649b"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5654,12 +5654,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--91a9dfee-6096-44b3-a266-9bbcf2ddb079",
- "created_by_ref": "identity--a6f81a17-3a29-4bbb-afc0-6c3f997ca533",
- "created": "2022-07-02T17:28:36.98668Z",
- "modified": "2022-07-02T17:28:36.98668Z",
+ "id": "attack-pattern--afdce902-18af-40c1-955a-1355cbdd99d7",
+ "created_by_ref": "identity--255dddc7-ec2c-4762-8a80-8078c1e10ac7",
+ "created": "2022-07-02T19:59:12.673274Z",
+ "modified": "2022-07-02T19:59:12.673274Z",
"name": "Dating Apps",
- "description": "TA07",
+ "description": "A video livestream refers to an online video broadcast capability that allows for real-time communication to closed or open networks. Examples include Facebook Live, Instagram, Youtube, Tik Tok, and Twitter. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5674,7 +5674,7 @@
}
],
"object_marking_refs": [
- "marking-definition--26a89e3c-dcec-4c81-954e-1438666bf3c7"
+ "marking-definition--556ba80a-cb3c-4d22-84b0-2ad291d12e2c"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5687,12 +5687,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--2bd6c575-4b68-4623-bc01-6964c53476cc",
- "created_by_ref": "identity--cbe0be43-5485-49aa-acf1-6009a3aea0f9",
- "created": "2022-07-02T17:28:36.986995Z",
- "modified": "2022-07-02T17:28:36.986995Z",
+ "id": "attack-pattern--2c7bded2-3bf3-4c5b-8c70-958b3856dc7a",
+ "created_by_ref": "identity--95f06451-4dbd-4c09-a0aa-1a7f73694fab",
+ "created": "2022-07-02T19:59:12.673593Z",
+ "modified": "2022-07-02T19:59:12.673593Z",
"name": "Private/Closed Social Networks",
- "description": "TA07",
+ "description": "An audio livestream refers to an online audio broadcast capability that allows for real-time communication to closed or open networks. Examples include Twitter Spaces, ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5707,7 +5707,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c5d6a9fb-b26d-4086-a5ec-af336a8a8389"
+ "marking-definition--48408254-1db7-4679-85d5-c85aefa93b8a"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5720,12 +5720,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--0361e3a0-398d-4cc5-a610-394919a8496a",
- "created_by_ref": "identity--fb3f1bee-835c-4dc3-b994-8a7236f796e5",
- "created": "2022-07-02T17:28:36.987313Z",
- "modified": "2022-07-02T17:28:36.987313Z",
+ "id": "attack-pattern--c753d5bf-9336-4115-8c8a-18d5a417b6a5",
+ "created_by_ref": "identity--b1faf8aa-1214-4c96-957a-04849897afce",
+ "created": "2022-07-02T19:59:12.67391Z",
+ "modified": "2022-07-02T19:59:12.67391Z",
"name": "Interest-Based Networks",
- "description": "TA07",
+ "description": "Examples include smaller and niche networks including Gettr, Truth Social, Parler, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5740,7 +5740,7 @@
}
],
"object_marking_refs": [
- "marking-definition--cfb0e917-a8c1-4820-8b5b-fd9060b7db68"
+ "marking-definition--62468923-757c-4095-a882-2e54d5fec9d9"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5753,12 +5753,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--05dc1204-4147-4a09-a017-2484ee5fdc6b",
- "created_by_ref": "identity--54dd59c1-3577-4998-ac45-09aad4d1c819",
- "created": "2022-07-02T17:28:36.987631Z",
- "modified": "2022-07-02T17:28:36.987631Z",
+ "id": "attack-pattern--33e2b7b3-b9d0-47d4-ab63-fcd15740a325",
+ "created_by_ref": "identity--27ab65f2-8827-433e-b9d1-42fbcc0e8f29",
+ "created": "2022-07-02T19:59:12.674233Z",
+ "modified": "2022-07-02T19:59:12.674233Z",
"name": "Use hashtags",
- "description": "TA07",
+ "description": "Use a dedicated, existing hashtag for the campaign/incident.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5773,7 +5773,7 @@
}
],
"object_marking_refs": [
- "marking-definition--db5a9eb8-5fae-4f04-8f48-186768a5c5e9"
+ "marking-definition--4711c835-302b-4291-83ac-f14187d242a3"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5786,12 +5786,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--962602ec-2602-4224-b6bd-413c2c8ec4bf",
- "created_by_ref": "identity--32abab3c-a644-40be-8508-ef5bcaa1193d",
- "created": "2022-07-02T17:28:36.987949Z",
- "modified": "2022-07-02T17:28:36.987949Z",
+ "id": "attack-pattern--ac315aea-b839-437d-8b28-4ae7c1cdeed8",
+ "created_by_ref": "identity--d89beb8e-3330-4323-8d17-b085d69620ca",
+ "created": "2022-07-02T19:59:12.674562Z",
+ "modified": "2022-07-02T19:59:12.674562Z",
"name": "Create dedicated hashtag",
- "description": "TA07",
+ "description": "Create a campaign/incident specific hashtag.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5806,7 +5806,7 @@
}
],
"object_marking_refs": [
- "marking-definition--435de426-a6ad-4b4f-8e08-43ef6baee390"
+ "marking-definition--bae6a1d3-f974-4ca9-a9fb-33e0f675dd10"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5819,12 +5819,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--cb89181b-cb31-4902-ba50-930ca46b86fc",
- "created_by_ref": "identity--9aa4eaff-5c2a-4932-a048-34d1d12dc115",
- "created": "2022-07-02T17:28:36.988271Z",
- "modified": "2022-07-02T17:28:36.988271Z",
+ "id": "attack-pattern--dee6a0f9-6e1c-40fb-b347-b0d181d37c32",
+ "created_by_ref": "identity--fc0d8814-5f9f-46b4-97ea-4dc54109b2fa",
+ "created": "2022-07-02T19:59:12.674886Z",
+ "modified": "2022-07-02T19:59:12.674886Z",
"name": "Media Sharing Networks",
- "description": "TA07",
+ "description": "Media sharing networks refer to services whose primary function is the hosting and sharing of specific forms of media. Examples include Instagram, Snapchat, TikTok, Youtube, SoundCloud.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5839,7 +5839,7 @@
}
],
"object_marking_refs": [
- "marking-definition--36d2574b-3e95-425c-9d87-9463c4e3c1b7"
+ "marking-definition--025cb54b-fe99-4ab5-8e60-6bd4d58391e5"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -5852,12 +5852,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--494544eb-fb55-41f6-82f2-c2a180ebd8b4",
- "created_by_ref": "identity--d754da6d-2eb3-4be0-af01-7e18f16c5c99",
- "created": "2022-07-02T17:28:36.98859Z",
- "modified": "2022-07-02T17:28:36.98859Z",
+ "id": "attack-pattern--a7cfa600-2359-4fdd-8c5f-d6efef64b498",
+ "created_by_ref": "identity--efd0df9f-53be-43e5-b892-1468e5aaf488",
+ "created": "2022-07-02T19:59:12.675212Z",
+ "modified": "2022-07-02T19:59:12.675212Z",
"name": "Photo Sharing",
- "description": "TA07",
+ "description": "Examples include Instagram, Snapchat, Flickr, etc",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5872,7 +5872,7 @@
}
],
"object_marking_refs": [
- "marking-definition--5bb3ffa6-a109-4437-a115-5dd27d72c8fe"
+ "marking-definition--db4377f4-c2c0-46b5-8475-4d3f2a2a584d"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5885,12 +5885,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--467c2c32-1353-4c04-b5cc-3707f88885eb",
- "created_by_ref": "identity--fb6a7205-93f9-47a2-b905-164612715e59",
- "created": "2022-07-02T17:28:36.988932Z",
- "modified": "2022-07-02T17:28:36.988932Z",
+ "id": "attack-pattern--7aa9d580-7c3e-4e10-ac50-4fd541c7b7f2",
+ "created_by_ref": "identity--03d34677-51d5-4d1e-962a-271048357a13",
+ "created": "2022-07-02T19:59:12.675567Z",
+ "modified": "2022-07-02T19:59:12.675567Z",
"name": "Video Sharing",
- "description": "TA07",
+ "description": "Examples include Youtube, TikTok, ShareChat, Rumble, etc",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5905,7 +5905,7 @@
}
],
"object_marking_refs": [
- "marking-definition--70e398d5-01c2-488d-a134-b31291a13f30"
+ "marking-definition--d89a88b5-98d9-487c-9a85-1e7a6595190b"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5918,12 +5918,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--8342730a-496e-460b-9a2f-bad4316b43d7",
- "created_by_ref": "identity--e132962e-2b99-4c7d-b360-ee2621e37dae",
- "created": "2022-07-02T17:28:36.989257Z",
- "modified": "2022-07-02T17:28:36.989257Z",
+ "id": "attack-pattern--809f414f-c81e-448a-8e2b-14704a0b743a",
+ "created_by_ref": "identity--a96cb603-3f6d-4f99-9954-e8e800e23cf7",
+ "created": "2022-07-02T19:59:12.675894Z",
+ "modified": "2022-07-02T19:59:12.675894Z",
"name": "Audio sharing",
- "description": "TA07",
+ "description": "Examples include podcasting apps, Soundcloud, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5938,7 +5938,7 @@
}
],
"object_marking_refs": [
- "marking-definition--46ef5c17-2c47-4ccf-a820-69aa473a9194"
+ "marking-definition--59b3d332-2dc8-4477-8cc9-b3c123771299"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -5951,12 +5951,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--00b0e33d-257e-44e0-9195-0c0c3f290d2c",
- "created_by_ref": "identity--74f6965b-94d2-4f9a-abb4-7516f8ff00dc",
- "created": "2022-07-02T17:28:36.989581Z",
- "modified": "2022-07-02T17:28:36.989581Z",
+ "id": "attack-pattern--92b5c39b-f162-482d-8704-e109b453f35f",
+ "created_by_ref": "identity--c25fa990-8b42-43ae-95f3-96b769c33295",
+ "created": "2022-07-02T19:59:12.676214Z",
+ "modified": "2022-07-02T19:59:12.676214Z",
"name": "Discussion Forums",
- "description": "TA07",
+ "description": "Platforms for finding, discussing, and sharing information and opinions. Examples include Reddit, Quora, Digg, message boards, interest-based discussion forums, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -5971,7 +5971,7 @@
}
],
"object_marking_refs": [
- "marking-definition--73cc28c6-e106-407a-889c-c46dba825b1a"
+ "marking-definition--a1d638ab-59cc-45d6-af16-815c2c392c58"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -5984,12 +5984,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--1360c84b-8b09-49e5-8950-9d8362008311",
- "created_by_ref": "identity--f810326e-c1cf-447f-9995-8e6f828df8ab",
- "created": "2022-07-02T17:28:36.989899Z",
- "modified": "2022-07-02T17:28:36.989899Z",
+ "id": "attack-pattern--71f9d8d7-d6c4-4815-a56a-7dfee6d18c30",
+ "created_by_ref": "identity--11a02fc7-73b7-45ec-ab46-809d5eb4b06f",
+ "created": "2022-07-02T19:59:12.676538Z",
+ "modified": "2022-07-02T19:59:12.676538Z",
"name": "Anonymous Message Boards",
- "description": "TA07",
+ "description": "Examples include the Chans",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6004,7 +6004,7 @@
}
],
"object_marking_refs": [
- "marking-definition--03a3d509-42b9-4672-988e-a94d6535e8f0"
+ "marking-definition--2cbdf923-a523-4beb-82de-c9c4449fe2d9"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -6017,12 +6017,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--03182531-d2e0-4ff4-af66-43ea3256f24d",
- "created_by_ref": "identity--8eb1b72a-00cc-4983-b89d-f92fa2654890",
- "created": "2022-07-02T17:28:36.990218Z",
- "modified": "2022-07-02T17:28:36.990218Z",
+ "id": "attack-pattern--867f2387-626a-4024-a1aa-fa2c77f377b9",
+ "created_by_ref": "identity--8e23b3b6-73c9-4984-8f58-d2a4b71f41c6",
+ "created": "2022-07-02T19:59:12.676914Z",
+ "modified": "2022-07-02T19:59:12.676914Z",
"name": "Bookmarking and Content Curation",
- "description": "TA07",
+ "description": "Platforms for searching, sharing, and curating content and media. Examples include Pinterest, Flipboard, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6037,7 +6037,7 @@
}
],
"object_marking_refs": [
- "marking-definition--b0a2b911-a432-41bc-8252-61a6af015ee8"
+ "marking-definition--7796e8d4-1459-4884-bd46-7b7194cfb775"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -6050,12 +6050,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--729898bf-b3f0-4e12-aadc-376e25d37725",
- "created_by_ref": "identity--9e2bb319-644b-4429-96be-2e359716786a",
- "created": "2022-07-02T17:28:36.990534Z",
- "modified": "2022-07-02T17:28:36.990534Z",
+ "id": "attack-pattern--d315ce72-b48a-4fcc-bf51-6701c3b8eb6e",
+ "created_by_ref": "identity--90e5be82-f88e-449c-a0e7-2b44bfca42ca",
+ "created": "2022-07-02T19:59:12.677287Z",
+ "modified": "2022-07-02T19:59:12.677287Z",
"name": "Blogging and Publishing Networks",
- "description": "TA07",
+ "description": "Examples include WordPress, Blogger, Weebly, Tumblr, Medium, etc. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6070,7 +6070,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7fdc4d58-df17-405e-9d6e-168022d289c1"
+ "marking-definition--171818e7-b35f-4252-a83e-bc715e1af1e4"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -6083,12 +6083,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--bdf75ac9-baea-4182-9357-997012b518f6",
- "created_by_ref": "identity--bf2e8864-324c-4b1c-99ea-002a4135fbac",
- "created": "2022-07-02T17:28:36.990855Z",
- "modified": "2022-07-02T17:28:36.990855Z",
+ "id": "attack-pattern--1d79cd82-8ca4-4b12-8d95-af588445cc6d",
+ "created_by_ref": "identity--a82cc2ab-a305-49b2-804b-f3df598f4340",
+ "created": "2022-07-02T19:59:12.677631Z",
+ "modified": "2022-07-02T19:59:12.677631Z",
"name": "Consumer Review Networks",
- "description": "TA07",
+ "description": "Platforms for finding, reviewing, and sharing information about brands, products, services, restaurants, travel destinations, etc. Examples include Yelp, TripAdvisor, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6103,7 +6103,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a304bf57-69ed-4428-84f4-7028cd2d7156"
+ "marking-definition--620c99a6-f5bd-41ab-8a99-16c2fb9afd70"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -6116,12 +6116,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--51815f67-de07-4999-be0a-b59da0b2516a",
- "created_by_ref": "identity--32f265c7-d821-49bd-af74-bedc7747de0c",
- "created": "2022-07-02T17:28:36.99117Z",
- "modified": "2022-07-02T17:28:36.99117Z",
+ "id": "attack-pattern--111df696-75c4-4dcb-9ab3-0cf79fe99953",
+ "created_by_ref": "identity--6b3dd975-874b-4adc-9ad8-0c33fe6065a8",
+ "created": "2022-07-02T19:59:12.677975Z",
+ "modified": "2022-07-02T19:59:12.677975Z",
"name": "Formal Diplomatic Channels",
- "description": "TA07",
+ "description": "Leveraging formal, traditional, diplomatic channels to communicate with foreign governments (written documents, meetings, summits, diplomatic visits, etc). This type of diplomacy is conducted by diplomats of one nation with diplomats and other officials of another nation or international organization.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6136,7 +6136,7 @@
}
],
"object_marking_refs": [
- "marking-definition--0ec87009-63ca-456a-8d20-79fd5cc38743"
+ "marking-definition--c5a79e7f-871a-4049-b657-91e4b4afb92a"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -6149,12 +6149,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--bceb35c5-c32f-48fd-b02d-69c1170a0565",
- "created_by_ref": "identity--12cfdc56-49c9-4a89-8d32-532f829c6bc2",
- "created": "2022-07-02T17:28:36.991492Z",
- "modified": "2022-07-02T17:28:36.991492Z",
+ "id": "attack-pattern--bc05d8a7-e306-4112-9826-75687e7cba5c",
+ "created_by_ref": "identity--60baea53-1b66-46ba-bf04-e1f355800f1f",
+ "created": "2022-07-02T19:59:12.678316Z",
+ "modified": "2022-07-02T19:59:12.678316Z",
"name": "Traditional Media",
- "description": "TA07",
+ "description": "Examples include TV, Newspaper, Radio, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6169,7 +6169,7 @@
}
],
"object_marking_refs": [
- "marking-definition--fe2d3308-c4e0-42a0-82cc-d5c3a47e801d"
+ "marking-definition--a31cb831-58ec-4f53-8621-934edb05f50d"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -6182,12 +6182,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a3f80665-0ad7-4321-bcea-dfd1f45e8e4c",
- "created_by_ref": "identity--995acae5-3e61-44fa-89e0-62742853d716",
- "created": "2022-07-02T17:28:36.991808Z",
- "modified": "2022-07-02T17:28:36.991808Z",
+ "id": "attack-pattern--649f96b3-7163-4b98-9aa6-0276e2336371",
+ "created_by_ref": "identity--1fd731cd-2c70-490a-9bb6-041d45013dfe",
+ "created": "2022-07-02T19:59:12.678665Z",
+ "modified": "2022-07-02T19:59:12.678665Z",
"name": "TV",
- "description": "TA07",
+ "description": "TV",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6202,7 +6202,7 @@
}
],
"object_marking_refs": [
- "marking-definition--da6006ab-9f12-4516-a918-3568967349e9"
+ "marking-definition--d16c3d64-6a6e-417d-94ec-c8855ea30737"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -6215,12 +6215,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--709c2d40-c1c8-4a87-b63b-35968701d12c",
- "created_by_ref": "identity--16ace32c-f17a-438d-b0f7-1a0f5577fa95",
- "created": "2022-07-02T17:28:36.992126Z",
- "modified": "2022-07-02T17:28:36.992126Z",
+ "id": "attack-pattern--539ad344-a6e3-4cff-aae8-bc592d7404a1",
+ "created_by_ref": "identity--4cdb2096-31ca-43e1-861d-ca74ab230d62",
+ "created": "2022-07-02T19:59:12.67902Z",
+ "modified": "2022-07-02T19:59:12.67902Z",
"name": "Newspaper",
- "description": "TA07",
+ "description": "Newspaper",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6235,7 +6235,7 @@
}
],
"object_marking_refs": [
- "marking-definition--192effa8-91fd-44c5-9d25-5ec3cee87894"
+ "marking-definition--180d3335-b6fa-4058-b676-4973645961fb"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -6248,12 +6248,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--f0252e68-f05e-4284-b9da-1f406874c630",
- "created_by_ref": "identity--4813e2e2-ad08-4152-9de9-76daacc09b0b",
- "created": "2022-07-02T17:28:36.992442Z",
- "modified": "2022-07-02T17:28:36.992442Z",
+ "id": "attack-pattern--1b073cb4-f884-4e16-9fdf-df9fbf44840b",
+ "created_by_ref": "identity--77ca8372-b414-4089-aed1-6961a209822e",
+ "created": "2022-07-02T19:59:12.679343Z",
+ "modified": "2022-07-02T19:59:12.679343Z",
"name": "Radio",
- "description": "TA07",
+ "description": "Radio",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6268,7 +6268,7 @@
}
],
"object_marking_refs": [
- "marking-definition--20efdb02-56fa-47ad-96d4-788b0117b3b0"
+ "marking-definition--5e8333c9-0274-45ff-b099-5ae32834bbbf"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -6281,12 +6281,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b853d155-bc09-4306-9e6c-a405be53a6a4",
- "created_by_ref": "identity--6f3c1fa7-e852-4f4e-8f67-ab17f50493d0",
- "created": "2022-07-02T17:28:36.992758Z",
- "modified": "2022-07-02T17:28:36.992758Z",
+ "id": "attack-pattern--41f18b17-3ff2-4339-ad2c-3eca924a07d8",
+ "created_by_ref": "identity--60e4bf79-5c91-42b2-8326-c2d995a822c9",
+ "created": "2022-07-02T19:59:12.679667Z",
+ "modified": "2022-07-02T19:59:12.679667Z",
"name": "Email",
- "description": "TA07",
+ "description": "Delivering content and narratives via email. This can include using list management or high-value individually targeted messaging.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6301,7 +6301,7 @@
}
],
"object_marking_refs": [
- "marking-definition--827e29a2-e2d3-4db8-a75b-0d63365ffd0d"
+ "marking-definition--1faf9a07-6d1c-468d-ac49-3ac1afcec104"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -6314,12 +6314,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a0e829cf-8a6f-43e8-a6a4-a5ed92d95116",
- "created_by_ref": "identity--b269691d-dc2d-4870-84d9-f9d630b8caf0",
- "created": "2022-07-02T17:28:36.993079Z",
- "modified": "2022-07-02T17:28:36.993079Z",
+ "id": "attack-pattern--7b3fd751-1c2a-4647-926a-989392be9b06",
+ "created_by_ref": "identity--3e614ed4-5c23-4640-a892-ca748299042b",
+ "created": "2022-07-02T19:59:12.679992Z",
+ "modified": "2022-07-02T19:59:12.679992Z",
"name": "Employ Commercial Analytic Firms",
- "description": "TA08",
+ "description": "Commercial analytic firms collect data on target audience activities and evaluate the data to detect trends, such as content receiving high click-rates. An influence operation may employ commercial analytic firms to facilitate external collection on its target audience, complicating attribution efforts and better tailoring the content to audience preferences. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6334,7 +6334,7 @@
}
],
"object_marking_refs": [
- "marking-definition--4601eae1-ecfd-4dce-b91a-e87e6568d48b"
+ "marking-definition--fddb49a3-816c-4494-895e-bafec03763da"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -6347,12 +6347,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4faa614b-8a0a-4e5e-8492-59d12b08df18",
- "created_by_ref": "identity--cdb93746-e9be-4868-9b57-c5887de3aa6a",
- "created": "2022-07-02T17:28:36.993395Z",
- "modified": "2022-07-02T17:28:36.993395Z",
+ "id": "attack-pattern--4c396c44-aafa-4651-9478-9db90638238d",
+ "created_by_ref": "identity--06f85bb8-677b-4d4a-ad98-479a7554fef7",
+ "created": "2022-07-02T19:59:12.680317Z",
+ "modified": "2022-07-02T19:59:12.680317Z",
"name": "Deliver Ads",
- "description": "TA09",
+ "description": "Delivering content via any form of paid media or advertising.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6367,7 +6367,7 @@
}
],
"object_marking_refs": [
- "marking-definition--14f1b63b-be50-4902-a9b5-a2b9a1ea76ea"
+ "marking-definition--016822cb-0710-4614-9b25-94b97219c117"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -6380,12 +6380,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--33b83d49-01b3-452e-a68a-abd77118353c",
- "created_by_ref": "identity--d35baed2-802e-40cf-9085-4d69a570edbb",
- "created": "2022-07-02T17:28:36.993711Z",
- "modified": "2022-07-02T17:28:36.993711Z",
+ "id": "attack-pattern--dc7b3aae-7df9-405d-a530-3a753a776a9a",
+ "created_by_ref": "identity--5e295894-d010-463b-9018-4b8c9a038465",
+ "created": "2022-07-02T19:59:12.680645Z",
+ "modified": "2022-07-02T19:59:12.680645Z",
"name": "Social media",
- "description": "TA09",
+ "description": "Social Media",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6400,7 +6400,7 @@
}
],
"object_marking_refs": [
- "marking-definition--038ce6ff-3de1-44a4-8d08-4ad223468071"
+ "marking-definition--40c1c436-5b9d-4547-9132-cc56ec1f9f3a"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -6413,12 +6413,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b8caa5f9-fcf8-4ec4-a288-22c0e04db8ab",
- "created_by_ref": "identity--dfa595d3-a90e-415f-9c57-007efe67cad2",
- "created": "2022-07-02T17:28:36.99403Z",
- "modified": "2022-07-02T17:28:36.99403Z",
+ "id": "attack-pattern--55a851b9-86a9-4d24-b361-78d22e942057",
+ "created_by_ref": "identity--f751343f-123c-47ad-ba1a-8553ed13f1bb",
+ "created": "2022-07-02T19:59:12.68097Z",
+ "modified": "2022-07-02T19:59:12.68097Z",
"name": "Traditional Media",
- "description": "TA09",
+ "description": "Examples include TV, Radio, Newspaper, billboards",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6433,7 +6433,7 @@
}
],
"object_marking_refs": [
- "marking-definition--bb7cfca5-9de6-4f93-ac0d-d76dbc45c49c"
+ "marking-definition--23426623-22f5-45bc-98d0-030d7fea9345"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -6446,12 +6446,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--2aeca1ac-da54-4744-a23e-c2b1641dac28",
- "created_by_ref": "identity--3c5a156b-f144-4ed5-b08e-8bfc1042f78e",
- "created": "2022-07-02T17:28:36.994345Z",
- "modified": "2022-07-02T17:28:36.994345Z",
+ "id": "attack-pattern--82052da3-7f68-471c-9991-f1e09eaf8cb2",
+ "created_by_ref": "identity--e0af056f-9c56-446e-8e2a-9ac695c2d9e0",
+ "created": "2022-07-02T19:59:12.718195Z",
+ "modified": "2022-07-02T19:59:12.718195Z",
"name": "Post Content",
- "description": "TA09",
+ "description": "Delivering content by posting via owned media (assets that the operator controls). ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6466,7 +6466,7 @@
}
],
"object_marking_refs": [
- "marking-definition--344d25b6-9486-49aa-8ca2-397fcac861bb"
+ "marking-definition--51e6d129-d58a-4463-bae1-cdbde77bfbc5"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -6479,12 +6479,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a9e19bbd-eceb-4167-a6e9-3de030befeff",
- "created_by_ref": "identity--0ee865aa-e017-4429-a1dc-9562ba3b1ddb",
- "created": "2022-07-02T17:28:36.994665Z",
- "modified": "2022-07-02T17:28:36.994665Z",
+ "id": "attack-pattern--226290e1-b4f4-4efc-97d9-66bb4b23ca75",
+ "created_by_ref": "identity--375b2c10-2551-48f0-b064-7bf0351c5234",
+ "created": "2022-07-02T19:59:12.718561Z",
+ "modified": "2022-07-02T19:59:12.718561Z",
"name": "Share Memes",
- "description": "TA09",
+ "description": "Memes are one of the most important single artefact types in all of computational propaganda. Memes in this framework denotes the narrow image-based definition. But that naming is no accident, as these items have most of the important properties of Dawkins' original conception as a self-replicating unit of culture. Memes pull together reference and commentary; image and narrative; emotion and message. Memes are a powerful tool and the heart of modern influence campaigns.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6499,7 +6499,7 @@
}
],
"object_marking_refs": [
- "marking-definition--f411e668-466b-4446-b399-e13755aee1c7"
+ "marking-definition--6e625e76-5743-4b29-8f9c-898aaece03e4"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -6512,12 +6512,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--e8cb072b-23ac-468f-b9c8-78a69e1f6be8",
- "created_by_ref": "identity--6bee205f-a62c-405b-8632-a7573a33e996",
- "created": "2022-07-02T17:28:36.994985Z",
- "modified": "2022-07-02T17:28:36.994985Z",
+ "id": "attack-pattern--063e1fbb-d23c-404a-a9b0-bfb3bf2b9c8d",
+ "created_by_ref": "identity--4bdb7015-1412-4429-8788-471a84890a9f",
+ "created": "2022-07-02T19:59:12.718891Z",
+ "modified": "2022-07-02T19:59:12.718891Z",
"name": "Post Violative Content to Provoke Takedown and Backlash",
- "description": "TA09",
+ "description": "Post Violative Content to Provoke Takedown and Backlash.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6532,7 +6532,7 @@
}
],
"object_marking_refs": [
- "marking-definition--8b1b5001-078f-450f-9113-43c6d6aa57b2"
+ "marking-definition--0be39880-90cf-486b-a92e-b3ed2ce045be"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -6545,12 +6545,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--eb58a67d-72ef-4b62-8d0c-e14dcfc6032d",
- "created_by_ref": "identity--57a74622-a881-4eba-ab1b-8d7016151b4c",
- "created": "2022-07-02T17:28:36.995305Z",
- "modified": "2022-07-02T17:28:36.995305Z",
+ "id": "attack-pattern--5927a58a-2416-4205-9000-e4a7824ade15",
+ "created_by_ref": "identity--6fe4287e-52e4-432a-9161-8747372811e1",
+ "created": "2022-07-02T19:59:12.719223Z",
+ "modified": "2022-07-02T19:59:12.719223Z",
"name": "One-Way Direct Posting",
- "description": "TA09",
+ "description": "Direct posting refers to a method of posting content via a one-way messaging service, where the recipient cannot directly respond to the poster\u2019s messaging. An influence operation may post directly to promote operation narratives to the target audience without allowing opportunities for fact-checking or disagreement, creating a false sense of support for the narrative. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6565,7 +6565,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c739f87e-852e-4225-b47b-798715eeb2fb"
+ "marking-definition--323b4d6c-a3a6-41f9-a7f1-d7ef2e7e5ae6"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -6578,12 +6578,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--9fd0219a-66d7-49a1-ab9e-856ea5e25c98",
- "created_by_ref": "identity--244348dd-193d-4fc6-8ff7-cc0b7f089e7e",
- "created": "2022-07-02T17:28:36.995626Z",
- "modified": "2022-07-02T17:28:36.995626Z",
+ "id": "attack-pattern--bbb40d99-27b8-4bea-b294-92a07a8121b1",
+ "created_by_ref": "identity--63771958-129f-4cc6-b5d8-445a8a59156a",
+ "created": "2022-07-02T19:59:12.719551Z",
+ "modified": "2022-07-02T19:59:12.719551Z",
"name": "Comment or Reply on Content",
- "description": "TA09",
+ "description": "Delivering content by replying or commenting via owned media (assets that the operator controls). ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6598,7 +6598,7 @@
}
],
"object_marking_refs": [
- "marking-definition--6a83c258-953c-4eb6-be8e-59bcb9f47b48"
+ "marking-definition--07e3ffa0-3099-4ce8-9bb5-b09300fac99f"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -6611,12 +6611,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--37b3cf33-f0bf-40ed-9b97-0bb74ede8923",
- "created_by_ref": "identity--6680323a-b44b-43c4-84cf-d75feae5cd0e",
- "created": "2022-07-02T17:28:36.995942Z",
- "modified": "2022-07-02T17:28:36.995942Z",
+ "id": "attack-pattern--0d6d9eb1-1113-46a5-a518-ac21258eb513",
+ "created_by_ref": "identity--c50e1cdd-d981-4d76-8eb7-06fd089df704",
+ "created": "2022-07-02T19:59:12.720088Z",
+ "modified": "2022-07-02T19:59:12.720088Z",
"name": "Post inauthentic social media comment",
- "description": "TA09",
+ "description": "Use government-paid social media commenters, astroturfers, chat bots (programmed to reply to specific key words/hashtags) influence online conversations, product reviews, web-site comment forums.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6631,7 +6631,7 @@
}
],
"object_marking_refs": [
- "marking-definition--50cb9240-ed4f-4b34-819b-bbac3de7aa77"
+ "marking-definition--5526b7a3-6705-4370-9bef-13759f37f2fa"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -6644,12 +6644,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--7cb535a6-b4b0-4773-b95c-1a79fd9ce904",
- "created_by_ref": "identity--68ed172e-3e10-4c3d-8c4a-d3b3b91bc57b",
- "created": "2022-07-02T17:28:36.99626Z",
- "modified": "2022-07-02T17:28:36.99626Z",
+ "id": "attack-pattern--184c89b3-70da-473d-b547-3fde387a8d23",
+ "created_by_ref": "identity--eb1637be-a536-4cf9-aa46-7f7e08b0ed33",
+ "created": "2022-07-02T19:59:12.720433Z",
+ "modified": "2022-07-02T19:59:12.720433Z",
"name": "Attract Traditional Media",
- "description": "TA09",
+ "description": "Deliver content by attracting the attention of traditional media (earned media).",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6664,7 +6664,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e208f368-5c7c-44b0-b2ba-9d77e21f7fbf"
+ "marking-definition--d9711ec4-3c81-4590-8a6c-46789acd5d05"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -6677,12 +6677,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--57c32589-908b-4293-aeab-c965c4bf3e51",
- "created_by_ref": "identity--f5804c45-b5ae-4986-a182-5086728405fa",
- "created": "2022-07-02T17:28:36.996578Z",
- "modified": "2022-07-02T17:28:36.996578Z",
+ "id": "attack-pattern--2a53870d-aad2-44df-9129-dfd6d1c2d8cc",
+ "created_by_ref": "identity--dcfa4dc7-b1f8-4aa3-bcb3-290c456bbb95",
+ "created": "2022-07-02T19:59:12.720782Z",
+ "modified": "2022-07-02T19:59:12.720782Z",
"name": "Amplify Existing Narrative",
- "description": "TA17",
+ "description": "An influence operation may amplify existing narratives that align with its narratives to support operation objectives. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6697,7 +6697,7 @@
}
],
"object_marking_refs": [
- "marking-definition--61b605ac-0b02-49be-95a1-0826d0e46da2"
+ "marking-definition--c86a5d90-6fb6-4c04-be5d-e58cb26096b2"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -6710,12 +6710,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--2f2745b8-801a-41b5-b85a-ffba5caf53c4",
- "created_by_ref": "identity--0405c5ac-6467-492d-b6d4-5c3521a54d70",
- "created": "2022-07-02T17:28:36.996895Z",
- "modified": "2022-07-02T17:28:36.996895Z",
+ "id": "attack-pattern--2506b127-497f-4c10-80ee-6ccfebea2fda",
+ "created_by_ref": "identity--9277d520-da67-489e-b3dd-5298da41a1f1",
+ "created": "2022-07-02T19:59:12.721135Z",
+ "modified": "2022-07-02T19:59:12.721135Z",
"name": "Cross-Posting",
- "description": "TA17",
+ "description": "Cross-posting refers to posting the same message to multiple internet discussions, social media platforms or accounts, or news groups at one time. An influence operation may post content online in multiple communities and platforms to increase the chances of content exposure to the target audience. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6730,7 +6730,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e9e8c04d-b24d-49cf-8fd9-842f87544f7e"
+ "marking-definition--6f2cdafb-db00-4820-a9f4-b2521e53b25a"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -6743,12 +6743,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--0aac6482-f7b2-4cd4-8661-ae692c84a188",
- "created_by_ref": "identity--3d70a8e3-6a21-4bbb-9ae8-14395b4aaf0b",
- "created": "2022-07-02T17:28:36.997213Z",
- "modified": "2022-07-02T17:28:36.997213Z",
+ "id": "attack-pattern--c6cfb4ba-463c-4bcc-a981-9b8db1114fd7",
+ "created_by_ref": "identity--39310d97-7721-430c-a3ff-946545bcb395",
+ "created": "2022-07-02T19:59:12.721501Z",
+ "modified": "2022-07-02T19:59:12.721501Z",
"name": "Post Across Groups",
- "description": "TA17",
+ "description": "An influence operation may post content across groups to spread narratives and content to new communities within the target audiences or to new target audiences. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6763,7 +6763,7 @@
}
],
"object_marking_refs": [
- "marking-definition--99d5d2fe-2b34-4753-bdf5-4975f14703ee"
+ "marking-definition--a7b18c77-4e6b-4eb0-a193-c5ee9f2b5a1f"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -6776,12 +6776,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--ff934521-e3f4-4f11-871c-8e7aa23574fe",
- "created_by_ref": "identity--dcb7e42b-07cb-4c2d-9791-9bba133131d0",
- "created": "2022-07-02T17:28:36.997562Z",
- "modified": "2022-07-02T17:28:36.997562Z",
+ "id": "attack-pattern--65eced1b-ac40-47db-a9ac-9b4fbfdf73ac",
+ "created_by_ref": "identity--296c1457-2cce-485c-ba1c-d48247992ab4",
+ "created": "2022-07-02T19:59:12.721856Z",
+ "modified": "2022-07-02T19:59:12.721856Z",
"name": "Post Across Platform",
- "description": "TA17",
+ "description": "An influence operation may post content across platforms to spread narratives and content to new communities within the target audiences or to new target audiences. Posting across platforms can also remove opposition and context, helping the narrative spread with less opposition on the cross-posted platform. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6796,7 +6796,7 @@
}
],
"object_marking_refs": [
- "marking-definition--55ccc45c-eda4-4649-b375-f3ec1d145515"
+ "marking-definition--9d9f1c27-fdb6-4a4f-96b0-3cadedefd659"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -6809,12 +6809,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--08ee90a4-5d68-4c14-bd0a-583535d27b92",
- "created_by_ref": "identity--bd83f834-15cb-41ed-9be8-cd98e74f72b4",
- "created": "2022-07-02T17:28:36.997892Z",
- "modified": "2022-07-02T17:28:36.997892Z",
+ "id": "attack-pattern--471067d8-da62-4984-b4f6-e5e8f297babe",
+ "created_by_ref": "identity--7e53dc0f-837a-466a-9599-e5e6e0c119c8",
+ "created": "2022-07-02T19:59:12.722221Z",
+ "modified": "2022-07-02T19:59:12.722221Z",
"name": "Post Across Disciplines",
- "description": "TA17",
+ "description": "Post Across Disciplines",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6829,7 +6829,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a64de13e-f81f-44dc-936d-e46cc6e3d9d6"
+ "marking-definition--3bcbf3ad-0c66-41dd-b573-42212a4548fc"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -6842,12 +6842,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--75e85269-638d-4f45-8d25-af320dcb016f",
- "created_by_ref": "identity--77298d7c-7d70-4887-bbad-156a2f5abdce",
- "created": "2022-07-02T17:28:36.998231Z",
- "modified": "2022-07-02T17:28:36.998231Z",
+ "id": "attack-pattern--8b1caa97-3fa6-4615-8646-30234d0399ce",
+ "created_by_ref": "identity--3a736297-88d7-480b-84f0-de7e7e9ed035",
+ "created": "2022-07-02T19:59:12.722597Z",
+ "modified": "2022-07-02T19:59:12.722597Z",
"name": "Incentivize Sharing",
- "description": "TA17",
+ "description": "Incentivizing content sharing refers to actions that encourage users to share content themselves, reducing the need for the operation itself to post and promote its own content.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6862,7 +6862,7 @@
}
],
"object_marking_refs": [
- "marking-definition--3315b840-aeba-4cf1-bcb6-f6594c045fdd"
+ "marking-definition--b860236b-d914-40ec-96cf-bb1f1bce89d9"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -6875,12 +6875,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--429a7e7f-98f4-48e9-a5a0-a2a8d7038f4d",
- "created_by_ref": "identity--aaae704d-6e10-4815-ae51-38b77e67d8f6",
- "created": "2022-07-02T17:28:36.998578Z",
- "modified": "2022-07-02T17:28:36.998578Z",
+ "id": "attack-pattern--90b784fc-b681-48ab-a15e-f9e38ff64f27",
+ "created_by_ref": "identity--96822444-15f6-4ffb-baaf-b487dc116cc0",
+ "created": "2022-07-02T19:59:12.722935Z",
+ "modified": "2022-07-02T19:59:12.722935Z",
"name": "Use Affiliate Marketing Programs",
- "description": "TA17",
+ "description": "Use Affiliate Marketing Programs",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6895,7 +6895,7 @@
}
],
"object_marking_refs": [
- "marking-definition--9a005f5e-76a7-46ac-88d9-7eda1fcc5668"
+ "marking-definition--5eda3001-d48f-41fa-a7da-f270a5f9a1ab"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -6908,12 +6908,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c4b88244-71f7-4309-bae5-8f00976457a4",
- "created_by_ref": "identity--06710946-e490-4fe7-ba1c-8e3ec4e23816",
- "created": "2022-07-02T17:28:36.998906Z",
- "modified": "2022-07-02T17:28:36.998906Z",
+ "id": "attack-pattern--0b98e731-1c93-49ef-9f07-0377be20ff34",
+ "created_by_ref": "identity--e961bf5e-69ef-48f4-b322-8a565f83f490",
+ "created": "2022-07-02T19:59:12.72327Z",
+ "modified": "2022-07-02T19:59:12.72327Z",
"name": "Use Contests and Prizes",
- "description": "TA17",
+ "description": "Use Contests and Prizes",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6928,7 +6928,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a348c294-aaa0-49cc-8589-c2ee75d8270a"
+ "marking-definition--6ae81d81-f7bf-44fe-974b-0aa08c1a967e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -6941,12 +6941,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--80cb8777-deb6-4071-8413-7e23f8dfb273",
- "created_by_ref": "identity--e0d471f6-a399-415a-8501-7b0ad1778cbb",
- "created": "2022-07-02T17:28:36.999248Z",
- "modified": "2022-07-02T17:28:36.999248Z",
+ "id": "attack-pattern--5f5ff744-b5d2-45c2-a45a-412c2d43cbdf",
+ "created_by_ref": "identity--09ba3ea2-4873-464a-b92f-8f50905e8af9",
+ "created": "2022-07-02T19:59:12.723604Z",
+ "modified": "2022-07-02T19:59:12.723604Z",
"name": "Manipulate Platform Algorithm",
- "description": "TA17",
+ "description": "Manipulating a platform algorithm refers to conducting activity on a platform in a way that intentionally targets its underlying algorithm. After analyzing a platform\u2019s algorithm (see: Select Platforms), an influence operation may use a platform in a way that increases its content exposure, avoids content removal, or otherwise benefits the operation\u2019s strategy. For example, an influence operation may use bots to amplify its posts so that the platform\u2019s algorithm recognizes engagement with operation content and further promotes the content on user timelines. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6961,7 +6961,7 @@
}
],
"object_marking_refs": [
- "marking-definition--3fe1ab19-52a7-462f-b197-40f529240d3b"
+ "marking-definition--cfbdfc86-114d-459d-a721-536319f3d43f"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -6974,12 +6974,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--233e4edf-3f30-456f-9875-2e0965434706",
- "created_by_ref": "identity--262d6a84-6c99-49a5-b7bd-87dc1a686ec1",
- "created": "2022-07-02T17:28:36.999572Z",
- "modified": "2022-07-02T17:28:36.999572Z",
+ "id": "attack-pattern--0d5e2457-30e9-4934-8197-651dbc00dc82",
+ "created_by_ref": "identity--f785ad55-f2a3-4a46-9082-7910d370dd0f",
+ "created": "2022-07-02T19:59:12.723937Z",
+ "modified": "2022-07-02T19:59:12.723937Z",
"name": "Bypass Content Blocking",
- "description": "TA17",
+ "description": "Bypassing content blocking refers to actions taken to circumvent network security measures that prevent users from accessing certain servers, resources, or other online spheres. An influence operation may bypass content blocking to proliferate its content on restricted areas of the internet. Common strategies for bypassing content blocking include:\n- Altering IP addresses to avoid IP filtering \n- Using a Virtual Private Network (VPN) to avoid IP filtering \n- Using a Content Delivery Network (CDN) to avoid IP filtering \n- Enabling encryption to bypass packet inspection blocking \n- Manipulating text to avoid filtering by keywords \n- Posting content on multiple platforms to avoid platform-specific removals - Using local facilities or modified DNS servers to avoid DNS filtering ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -6994,7 +6994,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2825c31e-6488-47d6-8ded-f24b8c94ec21"
+ "marking-definition--9ea37ee9-1815-4e02-bc2b-7279a1102521"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7007,12 +7007,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--02b352fc-fc4c-4f94-b2b7-6c33ff550ab4",
- "created_by_ref": "identity--d9bd81bd-84b2-41b1-b60f-78beb6882892",
- "created": "2022-07-02T17:28:36.999913Z",
- "modified": "2022-07-02T17:28:36.999913Z",
+ "id": "attack-pattern--409a1740-f916-4c9f-a672-aa5012221aec",
+ "created_by_ref": "identity--eca669fe-1d84-41f8-b57b-eac1f9866ee1",
+ "created": "2022-07-02T19:59:12.724267Z",
+ "modified": "2022-07-02T19:59:12.724267Z",
"name": "Direct Users to Alternative Platforms",
- "description": "TA17",
+ "description": "Direct users to alternative platforms refers to encouraging users to move from the platform on which they initially viewed operation content and engage with content on alternate information channels, including separate social media channels and inauthentic websites. An operation may drive users to alternative platforms to diversify its information channels and ensure the target audience knows where to access operation content if the initial platform suspends, flags, or otherwise removes original operation assets and content. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7027,7 +7027,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c21e772c-2cd6-4091-b5b3-afdcd1bf5595"
+ "marking-definition--da4f85e2-ef5e-46c9-8b11-106c50ba22af"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -7040,12 +7040,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--5621af39-db87-4673-9840-9125cc4a17c4",
- "created_by_ref": "identity--3c9f77bd-f422-4c1f-9423-9549208c4e05",
- "created": "2022-07-02T17:28:37.000297Z",
- "modified": "2022-07-02T17:28:37.000297Z",
+ "id": "attack-pattern--d1bed9f5-c57a-463b-a7e0-1217d5e91eeb",
+ "created_by_ref": "identity--701206ed-d478-456d-8056-471c43876dca",
+ "created": "2022-07-02T19:59:12.724599Z",
+ "modified": "2022-07-02T19:59:12.724599Z",
"name": "Control Information Environment through Offensive Cyberspace Operations",
- "description": "TA18",
+ "description": "Controlling the information environment through offensive cyberspace operations uses cyber tools and techniques to alter the trajectory of content in the information space to either prioritize operation messaging or block opposition messaging.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7060,7 +7060,7 @@
}
],
"object_marking_refs": [
- "marking-definition--d4306810-bfb4-4b43-8410-7abdd7acfc68"
+ "marking-definition--b9978975-39c2-41de-b0f1-305296e69d07"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -7073,12 +7073,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b474bed9-be50-493e-a336-73adff0ec24d",
- "created_by_ref": "identity--ea02dde7-a5d3-4ec9-8487-37cb27234833",
- "created": "2022-07-02T17:28:37.000705Z",
- "modified": "2022-07-02T17:28:37.000705Z",
+ "id": "attack-pattern--cd25a2d2-5102-4666-932c-5bd7de061504",
+ "created_by_ref": "identity--05d39a28-bb20-427a-85eb-3e15951053e8",
+ "created": "2022-07-02T19:59:12.724924Z",
+ "modified": "2022-07-02T19:59:12.724924Z",
"name": "Delete Opposing Content",
- "description": "TA18",
+ "description": "Deleting opposing content refers to the removal of content that conflicts with operational narratives from selected platforms. An influence operation may delete opposing content to censor contradictory information from the target audience, allowing operation narratives to take priority in the information space.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7093,7 +7093,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e9878a32-2cbf-45c8-ac5f-2d85c410bc52"
+ "marking-definition--3891e202-6205-4e65-8bcf-a7d288e04ae2"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7106,12 +7106,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--429b3cc3-e187-450a-948e-49ef80c5b824",
- "created_by_ref": "identity--15d3df4a-6b30-42ad-9069-4699987dc370",
- "created": "2022-07-02T17:28:37.001042Z",
- "modified": "2022-07-02T17:28:37.001042Z",
+ "id": "attack-pattern--20e97210-a216-42aa-9a31-da2961f5dfa7",
+ "created_by_ref": "identity--ac08327f-f696-4dce-8808-ddb6a02fe337",
+ "created": "2022-07-02T19:59:12.725259Z",
+ "modified": "2022-07-02T19:59:12.725259Z",
"name": "Block Content",
- "description": "TA18",
+ "description": "Content blocking refers to actions taken to restrict internet access or render certain areas of the internet inaccessible. An influence operation may restrict content based on both network and content attributes. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7126,7 +7126,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2fcce406-610d-47ed-a93e-19f2d05f9d89"
+ "marking-definition--f856625e-e68a-4855-82be-04efceaa09ed"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7139,12 +7139,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--9c09e7a7-25f0-4d75-bab7-cf7d87dc6aff",
- "created_by_ref": "identity--e5552586-b953-4949-a468-f23644a80984",
- "created": "2022-07-02T17:28:37.001367Z",
- "modified": "2022-07-02T17:28:37.001367Z",
+ "id": "attack-pattern--8409255c-b2a4-41c4-8a32-784dab41e289",
+ "created_by_ref": "identity--b0a5ed99-ed2e-4ca2-aabf-f232e23c0522",
+ "created": "2022-07-02T19:59:12.725601Z",
+ "modified": "2022-07-02T19:59:12.725601Z",
"name": "Destroy Information Generation Capabilities",
- "description": "TA18",
+ "description": "Destroying information generation capabilities refers to actions taken to limit, degrade, or otherwise incapacitate an actor\u2019s ability to generate conflicting information. An influence operation may destroy an actor\u2019s information generation capabilities by physically dismantling the information infrastructure, disconnecting resources needed for information generation, or redirecting information generation personnel. An operation may destroy an adversary\u2019s information generation capabilities to limit conflicting content exposure to the target audience and crowd the information space with its own narratives. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7159,7 +7159,7 @@
}
],
"object_marking_refs": [
- "marking-definition--79653259-6aba-49f6-b9a7-c0768bb4b1eb"
+ "marking-definition--8a884d87-fc5f-408b-9054-05a8cb807df0"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7172,12 +7172,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--cc032d4b-b84c-46f7-ba6f-6b04fdf20299",
- "created_by_ref": "identity--5feeb817-b252-4e5f-91e1-ebd2595dbbc1",
- "created": "2022-07-02T17:28:37.00169Z",
- "modified": "2022-07-02T17:28:37.00169Z",
+ "id": "attack-pattern--a463f183-d98c-4bfb-ae1c-7614958be7be",
+ "created_by_ref": "identity--c2f635ef-12ba-4738-9072-571178b45620",
+ "created": "2022-07-02T19:59:12.725924Z",
+ "modified": "2022-07-02T19:59:12.725924Z",
"name": "Conduct Server Redirect",
- "description": "TA18",
+ "description": "A server redirect, also known as a URL redirect, occurs when a server automatically forwards a user from one URL to another using server-side scripting languages. An influence operation may conduct a server redirect to divert target audience members from one website to another without their knowledge. The redirected website may pose as a legitimate source, host malware, or otherwise aid operation objectives.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7192,7 +7192,7 @@
}
],
"object_marking_refs": [
- "marking-definition--4cab0f8d-83cf-45fa-a664-e08aa60122bf"
+ "marking-definition--02d672fc-6539-46fa-8381-6145b1930202"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7205,12 +7205,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b6db16cc-bbe2-44fe-99b4-c074b3b9595f",
- "created_by_ref": "identity--3c605764-4f38-45cb-87d0-45df0330dec8",
- "created": "2022-07-02T17:28:37.002019Z",
- "modified": "2022-07-02T17:28:37.002019Z",
+ "id": "attack-pattern--72e298d1-2ba8-47cb-839a-3a4c06a75de4",
+ "created_by_ref": "identity--3f7bbc05-2e56-46f8-a7c7-0a9656837742",
+ "created": "2022-07-02T19:59:12.726258Z",
+ "modified": "2022-07-02T19:59:12.726258Z",
"name": "Suppress Opposition",
- "description": "TA18",
+ "description": "Operators can suppress the opposition by exploiting platform content moderation tools and processes like reporting non-violative content to platforms for takedown and goading opposition actors into taking actions that result in platform action or target audience disapproval. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7225,7 +7225,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c415a0d3-e76a-4e43-a564-68927eb95d93"
+ "marking-definition--20461297-9aee-4b63-b87e-ef04ce19ae83"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -7238,12 +7238,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--e15ab7c3-84da-4b2b-89e6-600d89b41bb2",
- "created_by_ref": "identity--6a0944e4-cf74-4ef1-8982-9fd9c1bf1601",
- "created": "2022-07-02T17:28:37.002338Z",
- "modified": "2022-07-02T17:28:37.002338Z",
+ "id": "attack-pattern--aa481717-27f3-4896-a28e-44cb68291a6f",
+ "created_by_ref": "identity--6c094982-4d17-489c-8e41-23fb00b6edfc",
+ "created": "2022-07-02T19:59:12.726634Z",
+ "modified": "2022-07-02T19:59:12.726634Z",
"name": "Report Non-Violative Opposing Content",
- "description": "TA18",
+ "description": "Reporting opposing content refers to notifying and providing an instance of a violation of a platform\u2019s guidelines and policies for conduct on the platform. In addition to simply reporting the content, an operation may leverage copyright regulations to trick social media and web platforms into removing opposing content by manipulating the content to appear in violation of copyright laws. Reporting opposing content facilitates the suppression of contradictory information and allows operation narratives to take priority in the information space. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7258,7 +7258,7 @@
}
],
"object_marking_refs": [
- "marking-definition--551a4305-58e0-4347-b732-51dcbb9d28e1"
+ "marking-definition--6ce84eaa-a46a-44ab-9532-80cae64cb2e0"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7271,12 +7271,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--7acde6e3-f824-4ba8-bb8d-ef8018935e3c",
- "created_by_ref": "identity--03159edd-88cd-4187-84bf-0acc6c98171b",
- "created": "2022-07-02T17:28:37.002658Z",
- "modified": "2022-07-02T17:28:37.002658Z",
+ "id": "attack-pattern--6a0c006b-9572-4983-8e5c-074cf837fc20",
+ "created_by_ref": "identity--404bfdc7-ac95-475c-8a9d-dcc6aac58ddc",
+ "created": "2022-07-02T19:59:12.727024Z",
+ "modified": "2022-07-02T19:59:12.727024Z",
"name": "Goad People into Harmful Action (Stop Hitting Yourself)",
- "description": "TA18",
+ "description": "Goad people into actions that violate terms of service or will lead to having their content or accounts taken down. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7291,7 +7291,7 @@
}
],
"object_marking_refs": [
- "marking-definition--ae21156f-964f-4d19-88d7-e804a714875e"
+ "marking-definition--c9651241-5083-4474-9d98-4294edb33fdc"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7304,12 +7304,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--1f5bb3dc-8ad8-4e32-9ac5-d408197bb1b1",
- "created_by_ref": "identity--416f6c3d-8ca0-4d0d-aeb4-1a332a2a4efd",
- "created": "2022-07-02T17:28:37.002979Z",
- "modified": "2022-07-02T17:28:37.002979Z",
+ "id": "attack-pattern--3d6c883e-34bb-4c1a-8784-6d3265683039",
+ "created_by_ref": "identity--c95de225-6152-492c-8361-18ec68fb7f2c",
+ "created": "2022-07-02T19:59:12.727352Z",
+ "modified": "2022-07-02T19:59:12.727352Z",
"name": "Exploit Platform TOS/Content Moderation",
- "description": "TA18",
+ "description": "Exploit Platform TOS/Content Moderation",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7324,7 +7324,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7cf882a2-da4a-4bf5-9cc2-2620e861a624"
+ "marking-definition--8e2ee928-c4ad-437b-9f09-cd9b10b20436"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7337,12 +7337,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--0ce3479d-da57-451a-9f9d-327bef42eb77",
- "created_by_ref": "identity--192f9c85-7c69-4256-a1d9-14a45e5b9733",
- "created": "2022-07-02T17:28:37.0033Z",
- "modified": "2022-07-02T17:28:37.0033Z",
+ "id": "attack-pattern--040a03ef-81da-47f1-a2ab-f9ebf7f08148",
+ "created_by_ref": "identity--5113455d-517f-49b9-bfe1-f35cbaee0e2a",
+ "created": "2022-07-02T19:59:12.72771Z",
+ "modified": "2022-07-02T19:59:12.72771Z",
"name": "Platform Filtering",
- "description": "TA18",
+ "description": "Platform filtering refers to the decontextualization of information as claims cross platforms (from Joan Donovan https://www.hks.harvard.edu/publications/disinformation-design-use-evidence-collages-and-platform-filtering-media-manipulation)",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7357,7 +7357,7 @@
}
],
"object_marking_refs": [
- "marking-definition--18e3adc4-dfd6-4429-9f56-a096a775db5c"
+ "marking-definition--01509a69-bb7d-4375-8897-854442ab3281"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -7370,12 +7370,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--27bd786c-eb5e-4e88-9786-b4cea8789542",
- "created_by_ref": "identity--c90f5fcf-ed8f-4027-814f-69687538628b",
- "created": "2022-07-02T17:28:37.003622Z",
- "modified": "2022-07-02T17:28:37.003622Z",
+ "id": "attack-pattern--a9ec183d-c4dc-4c17-8571-f6e9dbdc643f",
+ "created_by_ref": "identity--711efe1b-2ec8-4ea8-b2f6-14de4e75b377",
+ "created": "2022-07-02T19:59:12.728053Z",
+ "modified": "2022-07-02T19:59:12.728053Z",
"name": "Encourage Attendance at Events",
- "description": "TA10",
+ "description": "Operation encourages attendance at existing real world event.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7390,7 +7390,7 @@
}
],
"object_marking_refs": [
- "marking-definition--fee6de2f-602b-475d-b0fe-378c1247203d"
+ "marking-definition--4245be72-a76c-4b0c-b830-39e4c4c80478"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -7403,12 +7403,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--58368496-c7b3-443a-80a8-636157faa954",
- "created_by_ref": "identity--e3663dbd-9278-4e2b-b347-8f591e41b252",
- "created": "2022-07-02T17:28:37.003942Z",
- "modified": "2022-07-02T17:28:37.003942Z",
+ "id": "attack-pattern--0950f50e-8b4d-4c16-93ed-5e52562fc1a7",
+ "created_by_ref": "identity--0056252d-451e-45be-96c4-8d8255c5df5a",
+ "created": "2022-07-02T19:59:12.728378Z",
+ "modified": "2022-07-02T19:59:12.728378Z",
"name": "Call to action to attend ",
- "description": "TA10",
+ "description": "Call to action to attend an event",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7423,7 +7423,7 @@
}
],
"object_marking_refs": [
- "marking-definition--70335c0b-7f4a-4dfa-9104-9f86b68d9972"
+ "marking-definition--cb7e9c7d-834b-4c53-924c-bb77f028b13d"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7436,12 +7436,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--5d997782-dd27-4c59-a2e2-ba5220dc555e",
- "created_by_ref": "identity--8d440788-7c55-4ea7-bf77-2e90ba8a577c",
- "created": "2022-07-02T17:28:37.004263Z",
- "modified": "2022-07-02T17:28:37.004263Z",
+ "id": "attack-pattern--7c5fcef9-4dac-4231-8065-97b5af4a187c",
+ "created_by_ref": "identity--72c39f12-c58d-438b-8fa7-8e77ff9303bd",
+ "created": "2022-07-02T19:59:12.728707Z",
+ "modified": "2022-07-02T19:59:12.728707Z",
"name": "Facilitate logistics or support for attendance",
- "description": "TA10",
+ "description": "Facilitate logistics or support for travel, food, housing, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7456,7 +7456,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a4b22c17-02d0-46aa-b005-bc01790b87e8"
+ "marking-definition--46d01d7c-6b1a-4ce6-bc61-f50525f9526c"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7469,12 +7469,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--418a55bf-5c5e-4a90-8f10-a18fc80a2964",
- "created_by_ref": "identity--cb3afbf2-a35b-4868-b001-0b1eb75d6194",
- "created": "2022-07-02T17:28:37.004582Z",
- "modified": "2022-07-02T17:28:37.004582Z",
+ "id": "attack-pattern--05792c90-5f5a-42e3-b7bf-b50284f7225e",
+ "created_by_ref": "identity--811faa7c-8fd8-48e8-be93-fa69c386dd9e",
+ "created": "2022-07-02T19:59:12.729033Z",
+ "modified": "2022-07-02T19:59:12.729033Z",
"name": "Physical Violence",
- "description": "TA10",
+ "description": "Physical violence refers to the use of force to injure, abuse, damage, or destroy. An influence operation may conduct or encourage physical violence to discourage opponents from promoting conflicting content or draw attention to operation narratives using shock value. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7489,7 +7489,7 @@
}
],
"object_marking_refs": [
- "marking-definition--323e88e9-808d-4c69-b9e6-e2ab8bae52cf"
+ "marking-definition--9f29a434-5df1-4abb-9a96-670e46ca3ede"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -7502,12 +7502,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4a3f721a-82a7-43b6-9889-acacda9e7617",
- "created_by_ref": "identity--b030e5ed-8218-4f2c-9be2-e5ec9ade718c",
- "created": "2022-07-02T17:28:37.004906Z",
- "modified": "2022-07-02T17:28:37.004906Z",
+ "id": "attack-pattern--7e2d4014-b049-4d8a-b902-2f08fd820ef8",
+ "created_by_ref": "identity--b045792e-e2f0-4f9b-86f2-5d0cf07210d2",
+ "created": "2022-07-02T19:59:12.72936Z",
+ "modified": "2022-07-02T19:59:12.72936Z",
"name": "Conduct Physical Violence",
- "description": "TA10",
+ "description": "An influence operation may directly Conduct Physical Violence to achieve campaign goals. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7522,7 +7522,7 @@
}
],
"object_marking_refs": [
- "marking-definition--bbe1fb76-4b7e-4eff-b804-227cf10f9e19"
+ "marking-definition--3f52d3bf-c1ad-48b6-b5dd-97ef34b4c94e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7535,12 +7535,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--6bc7f315-d082-49de-b664-9fb7b9b1184c",
- "created_by_ref": "identity--cccd6f9a-3a47-4c33-9c50-6315504e053b",
- "created": "2022-07-02T17:28:37.005227Z",
- "modified": "2022-07-02T17:28:37.005227Z",
+ "id": "attack-pattern--29f4ee70-1a5c-4fcd-b76b-07b7a99b356a",
+ "created_by_ref": "identity--d966710e-85b1-4115-be93-ff6aad5fc30a",
+ "created": "2022-07-02T19:59:12.729758Z",
+ "modified": "2022-07-02T19:59:12.729758Z",
"name": "Encourage Physical Violence",
- "description": "TA10",
+ "description": "An influence operation may Encourage others to engage in Physical Violence to achieve campaign goals. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7555,7 +7555,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2098d78b-89f8-49cd-9f5c-72041e533a9f"
+ "marking-definition--7c9476a4-ca41-4ec5-936a-4ff3e579f594"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7568,12 +7568,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--e4737241-ecc0-4ca1-a029-0ecd8b710862",
- "created_by_ref": "identity--57957b2f-1e95-4526-997a-d8b1794a0d49",
- "created": "2022-07-02T17:28:37.005548Z",
- "modified": "2022-07-02T17:28:37.005548Z",
+ "id": "attack-pattern--a18dda94-01e8-413a-98c4-125f28091614",
+ "created_by_ref": "identity--57d46698-88d9-4a9c-965c-e490522af3a9",
+ "created": "2022-07-02T19:59:12.730137Z",
+ "modified": "2022-07-02T19:59:12.730137Z",
"name": "Conceal People",
- "description": "TA11",
+ "description": "Conceal the identity or provenance of a campaign's account and people assets to avoid takedown and attribution.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7588,7 +7588,7 @@
}
],
"object_marking_refs": [
- "marking-definition--640186d3-0dda-4b06-b69b-0c9d63ce44c9"
+ "marking-definition--bc374c8b-e7e6-46fe-b3b6-927bf6aef187"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -7601,12 +7601,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--9772c4cc-18fd-4563-8119-0d295f90b088",
- "created_by_ref": "identity--e3db6a0e-9b6a-469b-86ad-3b69acc4b624",
- "created": "2022-07-02T17:28:37.005865Z",
- "modified": "2022-07-02T17:28:37.005865Z",
+ "id": "attack-pattern--973f4b45-2d71-4d57-a1c4-58411b90fa5c",
+ "created_by_ref": "identity--fd2ee5ff-2e67-43f9-9a23-ece8438413c3",
+ "created": "2022-07-02T19:59:12.730481Z",
+ "modified": "2022-07-02T19:59:12.730481Z",
"name": "Use Pseudonyms",
- "description": "TA11",
+ "description": "An operation may use pseudonyms, or fake names, to mask the identity of operation accounts, publish anonymous content, or otherwise use falsified personas to conceal identity of the operation. An operation may coordinate pseudonyms across multiple platforms, for example, by writing an article under a pseudonym and then posting a link to the article on social media on an account with the same falsified name. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7621,7 +7621,7 @@
}
],
"object_marking_refs": [
- "marking-definition--18f6391e-73b6-4092-a633-96d6fa6f7b95"
+ "marking-definition--59fc4478-4c10-493e-9a23-3c04a961614e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7634,12 +7634,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a495269c-e4e5-4a1a-88f4-7554c43a8a56",
- "created_by_ref": "identity--560f6a8e-3053-487f-9baf-38857f2c2bb3",
- "created": "2022-07-02T17:28:37.006182Z",
- "modified": "2022-07-02T17:28:37.006182Z",
+ "id": "attack-pattern--3ab5afb2-e07d-4086-a010-89f351caf489",
+ "created_by_ref": "identity--bc8634ab-8ba3-4010-8924-301270e19062",
+ "created": "2022-07-02T19:59:12.730809Z",
+ "modified": "2022-07-02T19:59:12.730809Z",
"name": "Conceal Network Identity",
- "description": "TA11",
+ "description": "Concealing network identity aims to hide the existence an influence operation\u2019s network completely. Unlike concealing sponsorship, concealing network identity denies the existence of any sort of organization. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7654,7 +7654,7 @@
}
],
"object_marking_refs": [
- "marking-definition--26276921-f8b8-4529-b52e-671b315ee689"
+ "marking-definition--7647cf2f-58cb-4620-be30-42bb625f8974"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7667,12 +7667,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--692ddfe6-92da-4b8a-8c1e-7371c6eb0da5",
- "created_by_ref": "identity--85293c5a-bdf3-41c9-b2ab-8cf5d19ed149",
- "created": "2022-07-02T17:28:37.006531Z",
- "modified": "2022-07-02T17:28:37.006531Z",
+ "id": "attack-pattern--883a64c8-1f75-49ee-9cba-8e042c284993",
+ "created_by_ref": "identity--94709e13-84d4-4877-aa44-dd3973d8c83c",
+ "created": "2022-07-02T19:59:12.731145Z",
+ "modified": "2022-07-02T19:59:12.731145Z",
"name": "Distance Reputable Individuals from Operation",
- "description": "TA11",
+ "description": "Distancing reputable individuals from the operation occurs when enlisted individuals, such as celebrities or subject matter experts, actively disengage themselves from operation activities and messaging. Individuals may distance themselves from the operation by deleting old posts or statements, unfollowing operation information assets, or otherwise detaching themselves from the operation\u2019s timeline. An influence operation may want reputable individuals to distance themselves from the operation to reduce operation exposure, particularly if the operation aims to remove all evidence.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7687,7 +7687,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7ffdbb57-4ff3-425a-b87d-50bcbd7cc868"
+ "marking-definition--b11aaead-f5c0-4d34-9117-fcbdf854afce"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7700,12 +7700,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--d9e51370-28b8-47a2-bf15-9436aa2f8c1b",
- "created_by_ref": "identity--1170e770-82e2-45d3-b0e0-29e41084951a",
- "created": "2022-07-02T17:28:37.00685Z",
- "modified": "2022-07-02T17:28:37.00685Z",
+ "id": "attack-pattern--107e3180-34f6-4e11-a952-705df35b52f7",
+ "created_by_ref": "identity--9b2c579f-fdf5-4585-ba48-f4bfdcf6e703",
+ "created": "2022-07-02T19:59:12.731474Z",
+ "modified": "2022-07-02T19:59:12.731474Z",
"name": "Launder Accounts",
- "description": "TA11",
+ "description": "Account laundering occurs when an influence operation acquires control of previously legitimate online accounts from third parties through sale or exchange and often in contravention of terms of use. Influence operations use laundered accounts to reach target audience members from an existing information channel and complicate attribution. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7720,7 +7720,7 @@
}
],
"object_marking_refs": [
- "marking-definition--88e18d1d-9102-4ffc-a8a7-81042933a8a2"
+ "marking-definition--1f97face-a051-4873-be69-61a6fb53fc4a"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7733,12 +7733,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--1397b0db-f680-4e24-a827-b0f25e18e56c",
- "created_by_ref": "identity--62a17978-9671-4a26-b098-91102fab98a3",
- "created": "2022-07-02T17:28:37.007169Z",
- "modified": "2022-07-02T17:28:37.007169Z",
+ "id": "attack-pattern--5b0e4950-7343-480f-b585-e6673e65d8c6",
+ "created_by_ref": "identity--26837773-209a-489a-b31f-1706291e6747",
+ "created": "2022-07-02T19:59:12.731795Z",
+ "modified": "2022-07-02T19:59:12.731795Z",
"name": "Change Names of Accounts",
- "description": "TA11",
+ "description": "Changing names of accounts occurs when an operation changes the name of an existing social media account. An operation may change the names of its accounts throughout an operation to avoid detection or alter the names of newly acquired or repurposed accounts to fit operational narratives. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7753,7 +7753,7 @@
}
],
"object_marking_refs": [
- "marking-definition--827375e7-a703-44fd-90cc-9a09056576dd"
+ "marking-definition--224afd89-3fa7-4484-b27f-6089b1cbc669"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7766,12 +7766,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0",
- "created_by_ref": "identity--92b95175-60dc-418e-b042-7018fadd3845",
- "created": "2022-07-02T17:28:37.007491Z",
- "modified": "2022-07-02T17:28:37.007491Z",
+ "id": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b",
+ "created_by_ref": "identity--7d1b1243-797f-431e-9cad-f3c2e13c0a61",
+ "created": "2022-07-02T19:59:12.73212Z",
+ "modified": "2022-07-02T19:59:12.73212Z",
"name": "Conceal Operational Activity",
- "description": "TA11",
+ "description": "Conceal the campaign's operational activity to avoid takedown and attribution.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7786,7 +7786,7 @@
}
],
"object_marking_refs": [
- "marking-definition--354b696b-d52c-4a16-bf8e-cc469605a1cb"
+ "marking-definition--74bc890b-1a79-435f-ba35-09c5b98ed6a8"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -7799,12 +7799,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--f963fd61-4dc3-4267-8aad-ac14a6a3937d",
- "created_by_ref": "identity--8419d22c-344a-44c7-bf89-d297c97001a7",
- "created": "2022-07-02T17:28:37.007808Z",
- "modified": "2022-07-02T17:28:37.007808Z",
+ "id": "attack-pattern--9e6db77c-67e3-49ce-9cd2-15fdef67464f",
+ "created_by_ref": "identity--cb3eb4d0-eca5-4d07-bcda-d3bcba0d8698",
+ "created": "2022-07-02T19:59:12.73245Z",
+ "modified": "2022-07-02T19:59:12.73245Z",
"name": "Conceal Network Identity",
- "description": "TA11",
+ "description": "Concealing network identity aims to hide the existence an influence operation\u2019s network completely. Unlike concealing sponsorship, concealing network identity denies the existence of any sort of organization. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7819,7 +7819,7 @@
}
],
"object_marking_refs": [
- "marking-definition--1e9baecf-6dde-4915-bc57-9c87fa6740dd"
+ "marking-definition--b0d30afe-cd0b-439a-940e-8b11b65c8f2a"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7832,12 +7832,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b410c8af-d88e-483e-bf89-594d70de8f11",
- "created_by_ref": "identity--3566747b-7b21-41c1-95a7-c0ab276cbdec",
- "created": "2022-07-02T17:28:37.008126Z",
- "modified": "2022-07-02T17:28:37.008126Z",
+ "id": "attack-pattern--3ce95024-49f8-4fa3-b333-8819ef562fa8",
+ "created_by_ref": "identity--61799769-30a3-4ff1-9076-2049eec8bf5e",
+ "created": "2022-07-02T19:59:12.732774Z",
+ "modified": "2022-07-02T19:59:12.732774Z",
"name": "Generate Content Unrelated to Narrative",
- "description": "TA11",
+ "description": "An influence operation may mix its own operation content with legitimate news or external unrelated content to disguise operational objectives, narratives, or existence. For example, an operation may generate \"lifestyle\" or \"cuisine\" content alongside regular operation content. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7852,7 +7852,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a4fb08cc-e841-4231-88f1-c15c4d3f9867"
+ "marking-definition--e9b02971-490f-474b-a5de-7a1088a1d337"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7865,12 +7865,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--6e237bc1-7a16-49c4-ad7a-4d3849e26109",
- "created_by_ref": "identity--604a3383-4562-4196-b013-a7fbc9dbb0dc",
- "created": "2022-07-02T17:28:37.008444Z",
- "modified": "2022-07-02T17:28:37.008444Z",
+ "id": "attack-pattern--6743a7f5-1cbd-470a-afcc-bbd48afdcfc0",
+ "created_by_ref": "identity--f55e0eec-6590-40c3-aa3b-cd84634db7a8",
+ "created": "2022-07-02T19:59:12.733096Z",
+ "modified": "2022-07-02T19:59:12.733096Z",
"name": "Break Association with Content",
- "description": "TA11",
+ "description": "Breaking association with content occurs when an influence operation actively separates itself from its own content. An influence operation may break association with content by unfollowing, unliking, or unsharing its content, removing attribution from its content, or otherwise taking actions that distance the operation from its messaging. An influence operation may break association with its content to complicate attribution or regain credibility for a new operation. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7885,7 +7885,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c4f67ffb-b823-4780-b372-46d2cb172a1d"
+ "marking-definition--0226fda4-6260-495d-84be-fdbfe17e2d6a"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7898,12 +7898,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--be9355e4-570e-4252-8a1a-8f517f0487b8",
- "created_by_ref": "identity--9b0804c8-c838-471e-a466-18d9fbd9b3cb",
- "created": "2022-07-02T17:28:37.00876Z",
- "modified": "2022-07-02T17:28:37.00876Z",
+ "id": "attack-pattern--7c5ee3f1-be04-4a22-a9ee-b0474b78df40",
+ "created_by_ref": "identity--0ec158d9-87dd-4bb8-984d-5dbb764385f1",
+ "created": "2022-07-02T19:59:12.733418Z",
+ "modified": "2022-07-02T19:59:12.733418Z",
"name": "Delete URLs",
- "description": "TA11",
+ "description": "URL deletion occurs when an influence operation completely removes its website registration, rendering the URL inaccessible. An influence operation may delete its URLs to complicate attribution or remove online documentation that the operation ever occurred.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7918,7 +7918,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2a5f8ea8-a3cf-4061-91ff-c56192e6e036"
+ "marking-definition--d4de3887-ce43-4338-80f5-8bdea3225bfb"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7931,12 +7931,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--06e0d30d-fddb-4d25-842e-622d8911f444",
- "created_by_ref": "identity--6be95dd8-9091-428e-873f-c335c19e5466",
- "created": "2022-07-02T17:28:37.009088Z",
- "modified": "2022-07-02T17:28:37.009088Z",
- "name": "Coordinate on encrypted/ closed networks",
- "description": "TA11",
+ "id": "attack-pattern--710c216a-b1f4-409f-ad57-3c57fa5bad9b",
+ "created_by_ref": "identity--54d1cc5a-fc43-4abd-93df-b38db250fd12",
+ "created": "2022-07-02T19:59:12.733732Z",
+ "modified": "2022-07-02T19:59:12.733732Z",
+ "name": "Coordinate on encrypted/closed networks",
+ "description": "Coordinate on encrypted/ closed networks",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7951,7 +7951,7 @@
}
],
"object_marking_refs": [
- "marking-definition--23d2be14-aae3-4064-8dff-b35787efed6b"
+ "marking-definition--14dc7170-f863-4950-880c-3fca06f48723"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7964,12 +7964,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--19641024-86e4-435e-8f10-6f6fcac96da9",
- "created_by_ref": "identity--a1988b57-6179-44ec-a26c-9383f424accd",
- "created": "2022-07-02T17:28:37.009411Z",
- "modified": "2022-07-02T17:28:37.009411Z",
+ "id": "attack-pattern--22aa8f48-20f8-4b96-bd44-2ae1b1621447",
+ "created_by_ref": "identity--7b17dc40-be8e-4280-8c5c-55d1dcfe0a5d",
+ "created": "2022-07-02T19:59:12.734051Z",
+ "modified": "2022-07-02T19:59:12.734051Z",
"name": "Deny involvement",
- "description": "TA11",
+ "description": "Without \"smoking gun\" proof (and even with proof), incident creator can or will deny involvement. This technique also leverages the attacker advantages outlined in \"Demand insurmountable proof\", specifically the asymmetric disadvantage for truth-tellers in a \"firehose of misinformation\" environment.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -7984,7 +7984,7 @@
}
],
"object_marking_refs": [
- "marking-definition--46a9162f-5fe4-440f-909e-921dd01170ab"
+ "marking-definition--f860ae0f-7260-49e6-b668-e719a787a52e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -7997,12 +7997,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--8c2967be-eca2-4a8e-948c-b94e0ca8e436",
- "created_by_ref": "identity--03da93ff-db58-418f-8f65-46c5a6a0e76d",
- "created": "2022-07-02T17:28:37.009731Z",
- "modified": "2022-07-02T17:28:37.009731Z",
+ "id": "attack-pattern--41b86953-289e-4960-87a5-45549ce47a5e",
+ "created_by_ref": "identity--ef611905-b883-4c53-82b7-cb151de4f236",
+ "created": "2022-07-02T19:59:12.734399Z",
+ "modified": "2022-07-02T19:59:12.734399Z",
"name": "Delete Accounts/Account Activity",
- "description": "TA11",
+ "description": "Deleting accounts and account activity occurs when an influence operation removes its online social media assets, including social media accounts, posts, likes, comments, and other online artifacts. An influence operation may delete its accounts and account activity to complicate attribution or remove online documentation that the operation ever occurred. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8017,7 +8017,7 @@
}
],
"object_marking_refs": [
- "marking-definition--602595fb-1aa1-483c-bd2c-db588c5ed584"
+ "marking-definition--a675116a-3372-4519-b074-ba907f725455"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8030,12 +8030,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--758bf258-2fad-4905-b920-aa3a1ae3fe0e",
- "created_by_ref": "identity--72a8f06f-bd17-4d14-8083-8c766065e38f",
- "created": "2022-07-02T17:28:37.010067Z",
- "modified": "2022-07-02T17:28:37.010067Z",
+ "id": "attack-pattern--a8cbd92a-bf04-4f6c-85d2-2d8802d3905e",
+ "created_by_ref": "identity--5122aed8-f506-421b-be45-cc121d92c6c6",
+ "created": "2022-07-02T19:59:12.734746Z",
+ "modified": "2022-07-02T19:59:12.734746Z",
"name": "Redirect URLs",
- "description": "TA11",
+ "description": "An influence operation may redirect its falsified or typosquatted URLs to legitimate websites to increase the operation's appearance of legitimacy, complicate attribution, and avoid detection. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8050,7 +8050,7 @@
}
],
"object_marking_refs": [
- "marking-definition--5f53e8cf-b8a2-49e8-8777-393f98e60b3c"
+ "marking-definition--8be12637-7a31-4c0f-8d1e-49c0c04f957c"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8063,12 +8063,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--38ac5a3d-12b5-46e5-9875-00514da8587a",
- "created_by_ref": "identity--5fa8da8d-6fbd-4155-9d06-a0dcc3b6dd7d",
- "created": "2022-07-02T17:28:37.01039Z",
- "modified": "2022-07-02T17:28:37.01039Z",
+ "id": "attack-pattern--9a82c606-3876-4821-94a2-25aee12190d4",
+ "created_by_ref": "identity--0594a168-24ea-4308-8e12-14888e6dde54",
+ "created": "2022-07-02T19:59:12.735092Z",
+ "modified": "2022-07-02T19:59:12.735092Z",
"name": "Remove Post Origins",
- "description": "TA11",
+ "description": "Removing post origins refers to the elimination of evidence that indicates the initial source of operation content, often to complicate attribution. An influence operation may remove post origins by deleting watermarks, renaming files, or removing embedded links in its content. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8083,7 +8083,7 @@
}
],
"object_marking_refs": [
- "marking-definition--9abfc32c-4daa-440b-a6ad-439fb022dfc6"
+ "marking-definition--abe202d5-080b-45a2-a95e-ad9ed0287b88"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8096,12 +8096,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--0caea8dd-90d8-4652-97cb-261c62065cf5",
- "created_by_ref": "identity--f3725b38-62d8-42f0-84be-2495e5df48da",
- "created": "2022-07-02T17:28:37.010707Z",
- "modified": "2022-07-02T17:28:37.010707Z",
+ "id": "attack-pattern--4c1c82a2-472b-4b47-8c5e-21d2bfee7d2e",
+ "created_by_ref": "identity--a8e469c7-4cdc-48e5-8a70-ac9062394b80",
+ "created": "2022-07-02T19:59:12.735522Z",
+ "modified": "2022-07-02T19:59:12.735522Z",
"name": "Misattribute Activity",
- "description": "TA11",
+ "description": "Misattributed activity refers to incorrectly attributed operation activity. For example, a state sponsored influence operation may conduct operation activity in a way that mimics another state so that external entities misattribute activity to the incorrect state. An operation may misattribute their activities to complicate attribution, avoid detection, or frame an adversary for negative behavior. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8116,7 +8116,7 @@
}
],
"object_marking_refs": [
- "marking-definition--49250ba5-810e-4c89-b0b7-06f630363296"
+ "marking-definition--89701ab3-0436-4c2b-a1a0-ef84381ac1d7"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8129,12 +8129,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c236acce-da3a-44b6-ab3a-24268c897c0e",
- "created_by_ref": "identity--5f43354b-d187-4d24-91f6-5a71e1a50b66",
- "created": "2022-07-02T17:28:37.011027Z",
- "modified": "2022-07-02T17:28:37.011027Z",
+ "id": "attack-pattern--3c2e9e26-3af7-44f8-b046-694d9efbcd14",
+ "created_by_ref": "identity--0fdbda64-2d2e-478b-b6d6-1ae14a86d525",
+ "created": "2022-07-02T19:59:12.735943Z",
+ "modified": "2022-07-02T19:59:12.735943Z",
"name": "Conceal Infrastructure",
- "description": "TA11",
+ "description": "Conceal the campaign's infrastructure to avoid takedown and attribution.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8149,7 +8149,7 @@
}
],
"object_marking_refs": [
- "marking-definition--bbd3d08c-0698-4f3d-bd93-467164c30207"
+ "marking-definition--414309e6-3d26-4b07-9639-a1d999be20cc"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -8162,12 +8162,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--beefe7f3-62e4-4422-9c8a-a8b6da01f0a3",
- "created_by_ref": "identity--4cbbca38-9619-4d4d-9746-8487ac4ca21c",
- "created": "2022-07-02T17:28:37.01134Z",
- "modified": "2022-07-02T17:28:37.01134Z",
+ "id": "attack-pattern--07425155-0f00-47cd-8e61-01da0fd19388",
+ "created_by_ref": "identity--e62d7526-5ab3-4857-858e-d3c59b24e6d0",
+ "created": "2022-07-02T19:59:12.736272Z",
+ "modified": "2022-07-02T19:59:12.736272Z",
"name": "Conceal Sponsorship",
- "description": "TA11",
+ "description": "Concealing sponsorship aims to mislead or obscure the identity of the hidden sponsor behind an operation rather than entity publicly running the operation. Operations that conceal sponsorship may maintain visible falsified groups, news outlets, non-profits, or other organizations, but seek to mislead or obscure the identity sponsoring, funding, or otherwise supporting these entities. \nInfluence operations may use a variety of techniques to mask the location of their social media accounts to complicate attribution and conceal evidence of foreign interference. Operation accounts may set their location to a false place, often the location of the operation\u2019s target audience, and post in the region\u2019s language",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8182,7 +8182,7 @@
}
],
"object_marking_refs": [
- "marking-definition--dcf879db-bfbb-4f2b-9399-4b4dcf5d92ec"
+ "marking-definition--e4618e60-e5ec-4c05-9e07-227378c85027"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8195,12 +8195,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--0fc791e6-cc20-4280-9a53-251d88b940c5",
- "created_by_ref": "identity--0b71bdf6-0f28-40df-ac4d-ccbc480b24e2",
- "created": "2022-07-02T17:28:37.011653Z",
- "modified": "2022-07-02T17:28:37.011653Z",
+ "id": "attack-pattern--38ceb33f-7654-48dd-ac72-d0d596c2123b",
+ "created_by_ref": "identity--a5561d28-3e53-41d8-91ce-f979d458f92b",
+ "created": "2022-07-02T19:59:12.736613Z",
+ "modified": "2022-07-02T19:59:12.736613Z",
"name": "Utilize Bulletproof Hosting",
- "description": "TA11",
+ "description": "Hosting refers to services through which storage and computing resources are provided to an individual or organization for the accommodation and maintenance of one or more websites and related services. Services may include web hosting, file sharing, and email distribution. Bulletproof hosting refers to services provided by an entity, such as a domain hosting or web hosting firm, that allows its customer considerable leniency in use of the service. An influence operation may utilize bulletproof hosting to maintain continuity of service for suspicious, illegal, or disruptive operation activities that stricter hosting services would limit, report, or suspend. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8215,7 +8215,7 @@
}
],
"object_marking_refs": [
- "marking-definition--3c23d001-ee41-49e8-b3ae-39b9b06e6a5f"
+ "marking-definition--1eaea2c0-838c-430a-a517-994fd5825b77"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8228,12 +8228,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b129dcda-0956-4c1b-a856-02f5f03cf86e",
- "created_by_ref": "identity--fbd6434b-bd92-44a3-acf0-f027f9ca693b",
- "created": "2022-07-02T17:28:37.011971Z",
- "modified": "2022-07-02T17:28:37.011971Z",
+ "id": "attack-pattern--d4254a49-6d3a-46cc-9b41-e56a1c0ea8f6",
+ "created_by_ref": "identity--56ecd0d7-2c77-4daa-afe7-6e811d9e456b",
+ "created": "2022-07-02T19:59:12.736942Z",
+ "modified": "2022-07-02T19:59:12.736942Z",
"name": "Use Shell Organizations",
- "description": "TA11",
+ "description": "Use Shell Organizations to conceal sponsorship.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8248,7 +8248,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e299223e-ee40-4180-886c-6c7ecda43a57"
+ "marking-definition--8c38a88c-17da-4495-b5f3-7e1ebf6e9b8d"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8261,12 +8261,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--d6d1b5a1-b4b2-4743-913a-ae241a3ffab4",
- "created_by_ref": "identity--dc346130-8ba4-4f4b-ac09-9aa2ac21d8a2",
- "created": "2022-07-02T17:28:37.012289Z",
- "modified": "2022-07-02T17:28:37.012289Z",
+ "id": "attack-pattern--13e7f270-5796-40dd-b5b5-f36d84beef48",
+ "created_by_ref": "identity--faff4808-9c88-4a8b-977c-eb2a81e4cef9",
+ "created": "2022-07-02T19:59:12.737293Z",
+ "modified": "2022-07-02T19:59:12.737293Z",
"name": "Use Cryptocurrency",
- "description": "TA11",
+ "description": "Use Cryptocurrency to conceal sponsorship. Examples include Bitcoin, Monero, and Etherium. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8281,7 +8281,7 @@
}
],
"object_marking_refs": [
- "marking-definition--593ceb76-1ee7-44b7-a399-92d65c8d0142"
+ "marking-definition--baeec09c-f65f-409a-8ccf-5653503ea414"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8294,12 +8294,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--6edfcca7-7816-4f40-b22b-88567ca6a84e",
- "created_by_ref": "identity--357a76bf-0a55-4a94-97c6-1c6d5351db82",
- "created": "2022-07-02T17:28:37.012608Z",
- "modified": "2022-07-02T17:28:37.012608Z",
+ "id": "attack-pattern--aefa40c5-77b1-4716-b1c4-2f45bfa68813",
+ "created_by_ref": "identity--7b9c2c5f-cd04-4ff2-8b25-e1ac4a842e5c",
+ "created": "2022-07-02T19:59:12.737625Z",
+ "modified": "2022-07-02T19:59:12.737625Z",
"name": "Obfuscate Payment",
- "description": "TA11",
+ "description": "Obfuscate Payment",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8314,7 +8314,7 @@
}
],
"object_marking_refs": [
- "marking-definition--4ee2ffe4-c50b-4bda-bf32-a779fbe97814"
+ "marking-definition--39ad4f0e-4f2e-4680-99fd-28ddd4d24da7"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8327,12 +8327,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b7a97f05-92a6-434d-922b-9be6f49225c7",
- "created_by_ref": "identity--5530bea1-b0e1-4113-bcb8-14148c0055d2",
- "created": "2022-07-02T17:28:37.012927Z",
- "modified": "2022-07-02T17:28:37.012927Z",
+ "id": "attack-pattern--6632ab1a-e798-45f7-8703-e09c110f11ea",
+ "created_by_ref": "identity--fb417f9a-c4ea-446c-8e69-b17ec5f2f1f4",
+ "created": "2022-07-02T19:59:12.737944Z",
+ "modified": "2022-07-02T19:59:12.737944Z",
"name": "Exploit TOS/Content Moderation",
- "description": "TA11",
+ "description": "Exploiting weaknesses in platforms' terms of service and content moderation policies to avoid takedowns and platform actions.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8347,7 +8347,7 @@
}
],
"object_marking_refs": [
- "marking-definition--6dd5fbdb-24d2-4444-bb42-d0b949f9f593"
+ "marking-definition--5ef9eab3-8a48-42f7-b1da-1675e5e39de0"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -8360,12 +8360,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--e88bb789-d3a3-48ce-9861-d1b486cb86d1",
- "created_by_ref": "identity--4068bbb0-4c02-4b5a-93ad-bdf6b44bb53c",
- "created": "2022-07-02T17:28:37.013244Z",
- "modified": "2022-07-02T17:28:37.013244Z",
+ "id": "attack-pattern--0c87b14d-385e-44f7-a180-ecb389949bb4",
+ "created_by_ref": "identity--133a6974-87ef-4fd4-81df-07f2db5db17c",
+ "created": "2022-07-02T19:59:12.73827Z",
+ "modified": "2022-07-02T19:59:12.73827Z",
"name": "Legacy web content",
- "description": "TA11",
+ "description": "Make incident content visible for a long time, e.g. by exploiting platform terms of service, or placing it where it's hard to remove or unlikely to be removed.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8380,7 +8380,7 @@
}
],
"object_marking_refs": [
- "marking-definition--fafcf05f-1657-4cca-930e-fb17d83b43f7"
+ "marking-definition--6ca4f426-8216-4d0b-8e69-8bef70364209"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8393,12 +8393,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--d0cadcb4-3f75-43cf-9124-86e7caf7ee45",
- "created_by_ref": "identity--a2fb8caa-de6e-4d3d-9267-23a941d8455d",
- "created": "2022-07-02T17:28:37.013559Z",
- "modified": "2022-07-02T17:28:37.013559Z",
+ "id": "attack-pattern--dce18434-811e-4284-9e14-a7a1bac3fc23",
+ "created_by_ref": "identity--80b042e9-4a3f-48d6-8a1e-c73aaf5325dc",
+ "created": "2022-07-02T19:59:12.738602Z",
+ "modified": "2022-07-02T19:59:12.738602Z",
"name": "Post Borderline Content",
- "description": "TA11",
+ "description": "Post Borderline Content",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8413,7 +8413,7 @@
}
],
"object_marking_refs": [
- "marking-definition--9a4a24a5-fe80-4058-823f-7796be2262d1"
+ "marking-definition--4be88932-d5ca-4757-9074-c28cb5107b12"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8426,12 +8426,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--ab2961c1-e1bc-4b0d-aae1-7ba73ced39ba",
- "created_by_ref": "identity--db9e1991-3620-4daa-a54e-2c6ae9c87690",
- "created": "2022-07-02T17:28:37.013877Z",
- "modified": "2022-07-02T17:28:37.013877Z",
+ "id": "attack-pattern--bde29c42-3bce-4ba4-b09a-c2d6d685a5a0",
+ "created_by_ref": "identity--6cd0f621-8c6d-470a-8b32-a514b0b6ec92",
+ "created": "2022-07-02T19:59:12.738925Z",
+ "modified": "2022-07-02T19:59:12.738925Z",
"name": "Measure Performance",
- "description": "TA12",
+ "description": "A metric used to determine the accomplishment of actions. \u201cAre the actions being executed as planned?\u201d",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8446,7 +8446,7 @@
}
],
"object_marking_refs": [
- "marking-definition--bcdb1ca0-f93f-465f-9eda-d5a1569e1676"
+ "marking-definition--2d7419a6-bc36-482e-8d4c-6aa769539380"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -8459,12 +8459,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--dee53229-382c-48ab-bad6-1e53ab0c24e4",
- "created_by_ref": "identity--9262c905-9863-4bcd-b7a9-4548af382516",
- "created": "2022-07-02T17:28:37.014195Z",
- "modified": "2022-07-02T17:28:37.014195Z",
+ "id": "attack-pattern--aa0a3435-a9b6-4b5e-9874-0aa4a4a828d0",
+ "created_by_ref": "identity--b5842654-85cf-41e8-b44e-cb5cdf196894",
+ "created": "2022-07-02T19:59:12.739246Z",
+ "modified": "2022-07-02T19:59:12.739246Z",
"name": "People Focused",
- "description": "TA12",
+ "description": "Measure the performance individuals in achieving campaign goals",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8479,7 +8479,7 @@
}
],
"object_marking_refs": [
- "marking-definition--de1a8231-5c57-4a3e-8c70-f490a64fb9b0"
+ "marking-definition--967d0916-58ec-48d3-98d7-1f6b7917da21"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8492,12 +8492,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--9d00ac60-7376-4db3-b5d4-43c8864a5b06",
- "created_by_ref": "identity--cac35478-7b37-41ba-a8ed-0eb027038d53",
- "created": "2022-07-02T17:28:37.014513Z",
- "modified": "2022-07-02T17:28:37.014513Z",
+ "id": "attack-pattern--49b98725-5779-44e4-afd0-2602525a9f63",
+ "created_by_ref": "identity--610c5092-f4ef-48a6-bf10-c9e2c0589c42",
+ "created": "2022-07-02T19:59:12.739566Z",
+ "modified": "2022-07-02T19:59:12.739566Z",
"name": "Content Focused",
- "description": "TA12",
+ "description": "Measure the performance of campaign content",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8512,7 +8512,7 @@
}
],
"object_marking_refs": [
- "marking-definition--5853a9a6-2d91-4162-ac41-d7193156f272"
+ "marking-definition--eba3b183-00a1-461d-a7ef-80c1948e4823"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8525,12 +8525,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--d6094ec0-284e-458d-9b26-ff22b5f1f09c",
- "created_by_ref": "identity--7d875338-0a95-409b-87cd-8b86b5142845",
- "created": "2022-07-02T17:28:37.014834Z",
- "modified": "2022-07-02T17:28:37.014834Z",
+ "id": "attack-pattern--428ae731-7efc-4a69-9da4-a7399e76e3ee",
+ "created_by_ref": "identity--36cafddb-0259-4c61-934f-3bf91229afd6",
+ "created": "2022-07-02T19:59:12.739896Z",
+ "modified": "2022-07-02T19:59:12.739896Z",
"name": "View Focused",
- "description": "TA12",
+ "description": "View Focused",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8545,7 +8545,7 @@
}
],
"object_marking_refs": [
- "marking-definition--46c6a5bf-1bf9-41ef-af18-e4c8467e6449"
+ "marking-definition--9d4537a2-0e1f-4c94-a12b-dbb224406b72"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8558,12 +8558,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--0c3753ba-ec86-4186-97c8-242aa9d53b0f",
- "created_by_ref": "identity--349fb903-bc56-4256-af39-dd9b2333b029",
- "created": "2022-07-02T17:28:37.015177Z",
- "modified": "2022-07-02T17:28:37.015177Z",
+ "id": "attack-pattern--47939552-d779-467a-b393-92d25b0f9561",
+ "created_by_ref": "identity--02560f30-a08f-4df8-b33c-a254c0279573",
+ "created": "2022-07-02T19:59:12.74022Z",
+ "modified": "2022-07-02T19:59:12.74022Z",
"name": "Measure Effectiveness",
- "description": "TA12",
+ "description": "A metric used to measure a current system state. \u201cAre we on track to achieve the intended new system state within the planned timescale?\u201d",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8578,7 +8578,7 @@
}
],
"object_marking_refs": [
- "marking-definition--ca502497-d901-4f77-876b-0215dda1fc01"
+ "marking-definition--b21e9780-10f4-4870-9f43-4e625f0d5a78"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -8591,12 +8591,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--0b7d2ef1-9719-410e-9ae3-10c646709317",
- "created_by_ref": "identity--bb67574b-d3c9-4645-a15c-a2388848dc4a",
- "created": "2022-07-02T17:28:37.015495Z",
- "modified": "2022-07-02T17:28:37.015495Z",
+ "id": "attack-pattern--6a6e6893-a55f-4437-befd-e3cf4af8fa96",
+ "created_by_ref": "identity--78201d30-efee-4de6-8158-f253faf474f8",
+ "created": "2022-07-02T19:59:12.74055Z",
+ "modified": "2022-07-02T19:59:12.74055Z",
"name": "Behavior changes",
- "description": "TA12",
+ "description": "Monitor and evaluate behaviour changes from misinformation incidents. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8611,7 +8611,7 @@
}
],
"object_marking_refs": [
- "marking-definition--f6c963e8-cd4d-4fa2-b394-52a6371e9fe9"
+ "marking-definition--5c204f25-7e6e-4e54-b5c2-bd2d6264ce8e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8624,12 +8624,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--8d9f0257-a14c-4397-92e5-0ee58ab9ece2",
- "created_by_ref": "identity--28f79bf4-ca54-4369-bb8e-2aa06c8ec461",
- "created": "2022-07-02T17:28:37.015814Z",
- "modified": "2022-07-02T17:28:37.015814Z",
+ "id": "attack-pattern--99be4349-8c12-4f07-aef1-22feb299c85b",
+ "created_by_ref": "identity--99a2b473-0f53-4df6-923a-447e598430bc",
+ "created": "2022-07-02T19:59:12.74087Z",
+ "modified": "2022-07-02T19:59:12.74087Z",
"name": "Content",
- "description": "TA12",
+ "description": "Measure current system state with respect to the effectiveness of campaign content. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8644,7 +8644,7 @@
}
],
"object_marking_refs": [
- "marking-definition--6c3d9c6a-ee60-4607-9e7f-cbcb54078a4b"
+ "marking-definition--62af16ad-6756-4b0f-b3a2-5a6b99577cee"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8657,12 +8657,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--9b2e19bc-c4ef-4ce5-9e67-55be58b13579",
- "created_by_ref": "identity--1cd0ef6f-ba83-411f-9c70-e983119f471e",
- "created": "2022-07-02T17:28:37.016133Z",
- "modified": "2022-07-02T17:28:37.016133Z",
+ "id": "attack-pattern--501987ea-c8a7-494e-a250-f5f25314959c",
+ "created_by_ref": "identity--2fc3a9cf-526d-4780-9d84-e6dc9076cf69",
+ "created": "2022-07-02T19:59:12.741193Z",
+ "modified": "2022-07-02T19:59:12.741193Z",
"name": "Awareness",
- "description": "TA12",
+ "description": "Measure current system state with respect to the effectiveness of influencing awareness. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8677,7 +8677,7 @@
}
],
"object_marking_refs": [
- "marking-definition--ab43a7ff-211b-40ca-8852-9b4898a084fd"
+ "marking-definition--19a0c7d3-34c8-4e1b-b54a-33cda63a82fc"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8690,12 +8690,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--d7644818-db53-4599-aacb-8d8957496406",
- "created_by_ref": "identity--8bd3298d-fef1-40d3-a45f-eab90bb1f58e",
- "created": "2022-07-02T17:28:37.01645Z",
- "modified": "2022-07-02T17:28:37.01645Z",
+ "id": "attack-pattern--a029c72f-ec8a-4c9e-a5b6-25cd78f37cec",
+ "created_by_ref": "identity--705989cf-5835-48c4-a16f-864aba8df5ab",
+ "created": "2022-07-02T19:59:12.741513Z",
+ "modified": "2022-07-02T19:59:12.741513Z",
"name": "Knowledge",
- "description": "TA12",
+ "description": "Measure current system state with respect to the effectiveness of influencing knowledge. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8710,7 +8710,7 @@
}
],
"object_marking_refs": [
- "marking-definition--8b25f549-8c2a-4789-9d74-11aa8bf05eb4"
+ "marking-definition--1f439f9e-194d-4aee-8a76-4b527fea7424"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8723,12 +8723,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--2da637f8-4277-4a95-8dc4-c17a92be1281",
- "created_by_ref": "identity--f782b122-e140-49b5-9788-e6b26fdc6d24",
- "created": "2022-07-02T17:28:37.01677Z",
- "modified": "2022-07-02T17:28:37.01677Z",
+ "id": "attack-pattern--dd6a5e38-a8cd-48a7-9f76-c320cb8305b7",
+ "created_by_ref": "identity--a8c616e1-c75d-45a5-814e-6faf15c3f49e",
+ "created": "2022-07-02T19:59:12.741833Z",
+ "modified": "2022-07-02T19:59:12.741833Z",
"name": "Action/attitude",
- "description": "TA12",
+ "description": "Measure current system state with respect to the effectiveness of influencing action/attitude. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8743,7 +8743,7 @@
}
],
"object_marking_refs": [
- "marking-definition--94db7dbd-42e7-4cd0-9274-c1d979b4c123"
+ "marking-definition--0f227a86-f2bb-42fa-9b2c-ab90e1115259"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8756,12 +8756,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--cbf66a9a-6f05-4508-9ab9-c0f6a2ecdcc6",
- "created_by_ref": "identity--19bcbfa6-e969-4f3b-8cc3-7c586ef709f4",
- "created": "2022-07-02T17:28:37.017102Z",
- "modified": "2022-07-02T17:28:37.017102Z",
+ "id": "attack-pattern--074dec50-3fd1-4427-81cc-6d42c4774a53",
+ "created_by_ref": "identity--33cff0c9-a11b-4adf-8e48-a5998f749bf6",
+ "created": "2022-07-02T19:59:12.742178Z",
+ "modified": "2022-07-02T19:59:12.742178Z",
"name": "Measure Effectiveness Indicators (or KPIs)",
- "description": "TA12",
+ "description": "Ensuring that Key Performace Indicators are identified and tracked, so that the performance and effectivess of campaigns, and elements of campaigns, can be measured, during and after their execution",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8776,7 +8776,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c5932dee-667e-468b-ade7-86647fdd5e8f"
+ "marking-definition--3dfd8539-e2f0-4d40-a4db-d925980e3e01"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
@@ -8789,12 +8789,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--f8b62817-d507-4c49-a766-00057ef21734",
- "created_by_ref": "identity--ef1f8a2e-af87-4639-abb7-28b64bb8fefd",
- "created": "2022-07-02T17:28:37.017431Z",
- "modified": "2022-07-02T17:28:37.017431Z",
+ "id": "attack-pattern--35486a04-35f6-4737-a554-7465e4d842ff",
+ "created_by_ref": "identity--c861ec49-201c-45c7-b71e-0cf8eb01e51a",
+ "created": "2022-07-02T19:59:12.742514Z",
+ "modified": "2022-07-02T19:59:12.742514Z",
"name": "Message reach",
- "description": "TA12",
+ "description": "Monitor and evaluate message reach in misinformation incidents. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8809,7 +8809,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2c5fa877-3dfd-4757-ad4e-e66483ab7828"
+ "marking-definition--71c14eba-3866-44d5-9634-be84a40a1f46"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8822,12 +8822,12 @@
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--38a623d7-b925-49be-ac03-cae2586cea18",
- "created_by_ref": "identity--c61a981a-70e8-4a9c-9859-7ec335a6f1ab",
- "created": "2022-07-02T17:28:37.017787Z",
- "modified": "2022-07-02T17:28:37.017787Z",
+ "id": "attack-pattern--95eff1c5-0c9e-460e-9078-f45922ee4ee3",
+ "created_by_ref": "identity--b3cfa1ff-c664-40e0-a529-c1afbbeb2788",
+ "created": "2022-07-02T19:59:12.742835Z",
+ "modified": "2022-07-02T19:59:12.742835Z",
"name": "Social media engagement",
- "description": "TA12",
+ "description": "Monitor and evaluate social media engagement in misinformation incidents.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -8842,7 +8842,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e84d6ddf-8e22-4eba-8a3c-f124b697d642"
+ "marking-definition--c2ee7399-e98d-41bc-8677-b35df56be6b7"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
@@ -8855,1628 +8855,1628 @@
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--1c921d26-d04f-474f-9f1f-e07cad2d2de4",
- "created": "2022-07-02T17:28:37.018112Z",
- "modified": "2022-07-02T17:28:37.018112Z",
+ "id": "relationship--8f70a12c-6ffa-4c0a-8105-f2c5772b206d",
+ "created": "2022-07-02T19:59:12.743151Z",
+ "modified": "2022-07-02T19:59:12.743151Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--5c17929e-b059-4547-8151-769797eba5d5",
- "target_ref": "attack-pattern--aad83719-2b04-4a3e-9664-bf9aa2350e2f"
+ "source_ref": "attack-pattern--bb0a5dd6-ce06-4ed2-adb7-bd1e95890005",
+ "target_ref": "attack-pattern--c1adbb6d-74e6-4698-b856-ffbf21ede197"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--0f774314-921a-416f-a82f-2ec655b41a1d",
- "created": "2022-07-02T17:28:37.018206Z",
- "modified": "2022-07-02T17:28:37.018206Z",
+ "id": "relationship--b0223488-0819-46d8-97cc-31a010225aff",
+ "created": "2022-07-02T19:59:12.743441Z",
+ "modified": "2022-07-02T19:59:12.743441Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--400167bb-0e28-4499-93f5-984882266303",
- "target_ref": "attack-pattern--f8d9b96f-0edc-419e-b5f0-557f4588bf90"
+ "source_ref": "attack-pattern--06504d3c-f7cc-46fd-a6a4-5f1fb3291232",
+ "target_ref": "attack-pattern--04f0b6bb-47f6-430e-ae9d-0a4188eb9388"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--bcb0b08d-beba-4fb3-b4cc-3e60b556de54",
- "created": "2022-07-02T17:28:37.018286Z",
- "modified": "2022-07-02T17:28:37.018286Z",
+ "id": "relationship--3e20f39b-85cf-44f0-9f36-25ecefd597b7",
+ "created": "2022-07-02T19:59:12.743526Z",
+ "modified": "2022-07-02T19:59:12.743526Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--cbb1d58a-133a-45ff-8e58-1e96660d647d",
- "target_ref": "attack-pattern--f8d9b96f-0edc-419e-b5f0-557f4588bf90"
+ "source_ref": "attack-pattern--15ee8dc7-f009-425f-afa3-294ba94b64e2",
+ "target_ref": "attack-pattern--04f0b6bb-47f6-430e-ae9d-0a4188eb9388"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--e654a272-fad6-4b5e-8c84-a22065c69f52",
- "created": "2022-07-02T17:28:37.018367Z",
- "modified": "2022-07-02T17:28:37.018367Z",
+ "id": "relationship--1d5e3f56-8626-45e5-ab5f-c99c88723dfa",
+ "created": "2022-07-02T19:59:12.743606Z",
+ "modified": "2022-07-02T19:59:12.743606Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--c5333233-57a6-460d-858d-9503d840d8cc",
- "target_ref": "attack-pattern--a922b4a9-b5c1-479e-b471-a06a94320842"
+ "source_ref": "attack-pattern--caaa3a7a-e35b-4f5f-94e3-0e25061dd4de",
+ "target_ref": "attack-pattern--36203197-90da-4681-b394-0bad48a2dea5"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--c0539e77-1139-45d0-b05b-35c6453a0e26",
- "created": "2022-07-02T17:28:37.018447Z",
- "modified": "2022-07-02T17:28:37.018447Z",
+ "id": "relationship--78ea6982-4b7b-41c7-a44d-e6c1c92fccee",
+ "created": "2022-07-02T19:59:12.743686Z",
+ "modified": "2022-07-02T19:59:12.743686Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--c11289f8-7f05-4975-a789-a089d34d96dd",
- "target_ref": "attack-pattern--63ecf892-add4-4423-a27f-e49e63406771"
+ "source_ref": "attack-pattern--0c14a9d8-4304-4468-800b-c3c1d84dff5f",
+ "target_ref": "attack-pattern--08b0624d-4db7-4d38-838d-c7e970dbb292"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--3ec45e24-5fa0-4320-8bf4-4f520ad3a054",
- "created": "2022-07-02T17:28:37.018517Z",
- "modified": "2022-07-02T17:28:37.018517Z",
+ "id": "relationship--8168547d-7d5c-4b49-b0a6-bd4f18265362",
+ "created": "2022-07-02T19:59:12.743774Z",
+ "modified": "2022-07-02T19:59:12.743774Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--a632a961-4906-4e38-9e9d-fe2f0d523776",
- "target_ref": "attack-pattern--63ecf892-add4-4423-a27f-e49e63406771"
+ "source_ref": "attack-pattern--da37527d-398a-4ada-b5e8-d4712b696fb6",
+ "target_ref": "attack-pattern--08b0624d-4db7-4d38-838d-c7e970dbb292"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--3ceb2e4e-c591-49b6-b51f-8e902a3cd0ec",
- "created": "2022-07-02T17:28:37.018587Z",
- "modified": "2022-07-02T17:28:37.018587Z",
+ "id": "relationship--3edb86b2-8f62-41c9-b82a-c9142a98ff08",
+ "created": "2022-07-02T19:59:12.743848Z",
+ "modified": "2022-07-02T19:59:12.743848Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--fb5f79c5-0642-4e08-bd45-35b68c5e3a0b",
- "target_ref": "attack-pattern--8f344f67-cc73-4826-9edf-9d9a202f1127"
+ "source_ref": "attack-pattern--f63ac640-cfd8-481d-b873-a79ab0f360d8",
+ "target_ref": "attack-pattern--74a90d3f-f426-4832-9cf7-5e9ec799bec0"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--d9757e38-8535-4ef7-829c-d04cb9aaeaf4",
- "created": "2022-07-02T17:28:37.018656Z",
- "modified": "2022-07-02T17:28:37.018656Z",
+ "id": "relationship--cd940d81-abe9-470f-9d61-0240e57e0743",
+ "created": "2022-07-02T19:59:12.743921Z",
+ "modified": "2022-07-02T19:59:12.743921Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--c423ab99-cdc3-4abf-bf4e-880a1011dd2c",
- "target_ref": "attack-pattern--8f344f67-cc73-4826-9edf-9d9a202f1127"
+ "source_ref": "attack-pattern--fbd5b3c6-7f47-4bdc-afeb-206d430abd9b",
+ "target_ref": "attack-pattern--74a90d3f-f426-4832-9cf7-5e9ec799bec0"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--dd6b0219-b6ca-41f7-85fb-3f5ae21e39bd",
- "created": "2022-07-02T17:28:37.018726Z",
- "modified": "2022-07-02T17:28:37.018726Z",
+ "id": "relationship--b90eb555-d31e-4e98-b337-fe622f08bd5d",
+ "created": "2022-07-02T19:59:12.743997Z",
+ "modified": "2022-07-02T19:59:12.743997Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--cee96770-2751-43aa-9ce9-23012235ae8b",
- "target_ref": "attack-pattern--c6118c1f-e163-4eb0-a647-44a9d4074bb0"
+ "source_ref": "attack-pattern--dd4a7b60-a845-46d7-a189-dc05fc8a247c",
+ "target_ref": "attack-pattern--6fc3a1a6-7989-4d46-8dc5-25ec1be29106"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--df7d3e12-4497-432f-8843-d1453fd5449b",
- "created": "2022-07-02T17:28:37.018796Z",
- "modified": "2022-07-02T17:28:37.018796Z",
+ "id": "relationship--298e9ba1-9e37-47a8-800c-d36b4d2e706b",
+ "created": "2022-07-02T19:59:12.744079Z",
+ "modified": "2022-07-02T19:59:12.744079Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--782d58da-2c24-4520-a283-b89b54b5e59a",
- "target_ref": "attack-pattern--c6118c1f-e163-4eb0-a647-44a9d4074bb0"
+ "source_ref": "attack-pattern--2400f6a0-b97e-4640-877d-946f68712265",
+ "target_ref": "attack-pattern--6fc3a1a6-7989-4d46-8dc5-25ec1be29106"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--cdb46ac3-0e9c-42b5-9b0a-c20f62b8d6c4",
- "created": "2022-07-02T17:28:37.018866Z",
- "modified": "2022-07-02T17:28:37.018866Z",
+ "id": "relationship--8820e913-8a80-4488-a84b-cd99f8013385",
+ "created": "2022-07-02T19:59:12.744182Z",
+ "modified": "2022-07-02T19:59:12.744182Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--4c383d4a-da5d-4730-82a5-93901362e4e4",
- "target_ref": "attack-pattern--a94b4289-5956-4b89-a3a8-d1ed9b604840"
+ "source_ref": "attack-pattern--bdc9c3fd-6f34-4a70-b9a4-d028bce2ea8a",
+ "target_ref": "attack-pattern--a1035e5a-489e-48e5-9a08-4c02118440dc"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--20494c92-f04f-420e-ae0e-68b01103ccfe",
- "created": "2022-07-02T17:28:37.018935Z",
- "modified": "2022-07-02T17:28:37.018935Z",
+ "id": "relationship--2ac69e4e-a745-42c1-95f8-314e415bfa74",
+ "created": "2022-07-02T19:59:12.744258Z",
+ "modified": "2022-07-02T19:59:12.744258Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--42bc5436-0436-4120-81f3-ebc41c61a157",
- "target_ref": "attack-pattern--a94b4289-5956-4b89-a3a8-d1ed9b604840"
+ "source_ref": "attack-pattern--a0a40ba8-5a7f-46a5-8bcc-8ea5f9bdd832",
+ "target_ref": "attack-pattern--a1035e5a-489e-48e5-9a08-4c02118440dc"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--c9505ac0-dd73-4821-ba07-9af8bd3abacc",
- "created": "2022-07-02T17:28:37.019006Z",
- "modified": "2022-07-02T17:28:37.019006Z",
+ "id": "relationship--33dc61a0-f25d-4674-8c1d-fefe91fc827a",
+ "created": "2022-07-02T19:59:12.744342Z",
+ "modified": "2022-07-02T19:59:12.744342Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--1d8883bc-3e8c-406d-ad8e-f7d660d05494",
- "target_ref": "attack-pattern--c96daf1f-ac43-40d9-88a7-0f6244a38c3c"
+ "source_ref": "attack-pattern--0678242b-030c-4ff5-8f9f-73a97253c8dc",
+ "target_ref": "attack-pattern--46b33983-93aa-40b2-b70f-cbcf47e346e3"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--7c9cf66f-ab0c-44d6-a32c-e40fb46a0af5",
- "created": "2022-07-02T17:28:37.019075Z",
- "modified": "2022-07-02T17:28:37.019075Z",
+ "id": "relationship--8a8568b2-aefb-4a73-9fd4-1f972b8ffa5c",
+ "created": "2022-07-02T19:59:12.744439Z",
+ "modified": "2022-07-02T19:59:12.744439Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--1b11a06d-2772-4b32-a70d-e64f6434bd3c",
- "target_ref": "attack-pattern--c96daf1f-ac43-40d9-88a7-0f6244a38c3c"
+ "source_ref": "attack-pattern--dd6177db-6803-454a-9ab5-0ab7dcfacde6",
+ "target_ref": "attack-pattern--46b33983-93aa-40b2-b70f-cbcf47e346e3"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--58bc53d2-1971-40ea-a52b-56c1b2b813ab",
- "created": "2022-07-02T17:28:37.019147Z",
- "modified": "2022-07-02T17:28:37.019147Z",
+ "id": "relationship--1aaeea25-2663-4e34-bf5c-4f310a635c41",
+ "created": "2022-07-02T19:59:12.744538Z",
+ "modified": "2022-07-02T19:59:12.744538Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--c800d67d-07dd-4e61-8b9f-0ebd477c9afb",
- "target_ref": "attack-pattern--c96daf1f-ac43-40d9-88a7-0f6244a38c3c"
+ "source_ref": "attack-pattern--0388aa19-891a-4849-87c0-ec074291bb94",
+ "target_ref": "attack-pattern--46b33983-93aa-40b2-b70f-cbcf47e346e3"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--4c18c034-ebef-4b03-9926-f194ef25e0a8",
- "created": "2022-07-02T17:28:37.019216Z",
- "modified": "2022-07-02T17:28:37.019216Z",
+ "id": "relationship--19f4ef65-4336-4b32-a185-faa0a635228b",
+ "created": "2022-07-02T19:59:12.744625Z",
+ "modified": "2022-07-02T19:59:12.744625Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--964713f6-d78e-4795-a89f-a4700996614a",
- "target_ref": "attack-pattern--c96daf1f-ac43-40d9-88a7-0f6244a38c3c"
+ "source_ref": "attack-pattern--9fbaa5a6-9bbd-4819-866b-22d1a11f8592",
+ "target_ref": "attack-pattern--46b33983-93aa-40b2-b70f-cbcf47e346e3"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--05e0595e-7b3f-4350-a5d6-7fe13d4ebadd",
- "created": "2022-07-02T17:28:37.019285Z",
- "modified": "2022-07-02T17:28:37.019285Z",
+ "id": "relationship--c3b1b730-6b60-4e76-b233-93b51e0320ce",
+ "created": "2022-07-02T19:59:12.744702Z",
+ "modified": "2022-07-02T19:59:12.744702Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--2c7e9fd6-8fe3-448e-99e5-81d4cc6fa9e4",
- "target_ref": "attack-pattern--2f9be5f3-9474-46c1-9bf8-038577c4b6a8"
+ "source_ref": "attack-pattern--7cab144f-1942-4393-8f30-25d1f73160b6",
+ "target_ref": "attack-pattern--1059cdf7-3b45-40e6-93d3-b25ef3b6afac"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--59d36efd-2a7e-471e-8ab8-173986940b3a",
- "created": "2022-07-02T17:28:37.019355Z",
- "modified": "2022-07-02T17:28:37.019355Z",
+ "id": "relationship--f807240d-0ac5-4eec-9955-6786d8345683",
+ "created": "2022-07-02T19:59:12.744779Z",
+ "modified": "2022-07-02T19:59:12.744779Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--ad2ca7cc-3998-441a-b042-a004c07f4b54",
- "target_ref": "attack-pattern--2f9be5f3-9474-46c1-9bf8-038577c4b6a8"
+ "source_ref": "attack-pattern--748bd382-1819-41d9-addc-de7081097b73",
+ "target_ref": "attack-pattern--1059cdf7-3b45-40e6-93d3-b25ef3b6afac"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--ae2a3a7f-194d-46be-a4ee-435a188a86df",
- "created": "2022-07-02T17:28:37.019424Z",
- "modified": "2022-07-02T17:28:37.019424Z",
+ "id": "relationship--83cc71a7-11d5-4815-b235-618d1d712493",
+ "created": "2022-07-02T19:59:12.744857Z",
+ "modified": "2022-07-02T19:59:12.744857Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--095aa344-86dc-4488-a1d7-a8a7c1363d4a",
- "target_ref": "attack-pattern--2f9be5f3-9474-46c1-9bf8-038577c4b6a8"
+ "source_ref": "attack-pattern--a6e4691f-4907-4270-ab84-fbb1b01be00c",
+ "target_ref": "attack-pattern--1059cdf7-3b45-40e6-93d3-b25ef3b6afac"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--d3ac33ff-8066-497a-860b-f0c9a5d9242b",
- "created": "2022-07-02T17:28:37.019493Z",
- "modified": "2022-07-02T17:28:37.019493Z",
+ "id": "relationship--f98c67cd-097a-4f56-89a8-d5944c74992d",
+ "created": "2022-07-02T19:59:12.744934Z",
+ "modified": "2022-07-02T19:59:12.744934Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--f16b324b-cb5f-496e-8575-f3ff97963e54",
- "target_ref": "attack-pattern--2f9be5f3-9474-46c1-9bf8-038577c4b6a8"
+ "source_ref": "attack-pattern--e8bb5015-934a-41d1-8bf9-812973ea34ac",
+ "target_ref": "attack-pattern--1059cdf7-3b45-40e6-93d3-b25ef3b6afac"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--4f3638c1-9025-4d82-9031-5379afbffd7e",
- "created": "2022-07-02T17:28:37.019562Z",
- "modified": "2022-07-02T17:28:37.019562Z",
+ "id": "relationship--e41d4699-606d-4b16-b2f7-61e52bec9b47",
+ "created": "2022-07-02T19:59:12.745009Z",
+ "modified": "2022-07-02T19:59:12.745009Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--a2053dcc-f24c-4aa9-8a84-4f5b3d3b2a95",
- "target_ref": "attack-pattern--2f9be5f3-9474-46c1-9bf8-038577c4b6a8"
+ "source_ref": "attack-pattern--86a9f2a7-2d8c-4d82-9b68-60c133cbe662",
+ "target_ref": "attack-pattern--1059cdf7-3b45-40e6-93d3-b25ef3b6afac"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--ff46138e-b5c1-4483-866c-613579dc24be",
- "created": "2022-07-02T17:28:37.019631Z",
- "modified": "2022-07-02T17:28:37.019631Z",
+ "id": "relationship--4ba9ec33-da92-481d-b834-740612400de7",
+ "created": "2022-07-02T19:59:12.745085Z",
+ "modified": "2022-07-02T19:59:12.745085Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--13942c8f-1337-4de0-8b7b-3802fa4c7276",
- "target_ref": "attack-pattern--2f9be5f3-9474-46c1-9bf8-038577c4b6a8"
+ "source_ref": "attack-pattern--13ff62f6-6719-4ec4-b786-0a19eef53709",
+ "target_ref": "attack-pattern--1059cdf7-3b45-40e6-93d3-b25ef3b6afac"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--1691e0dd-97ab-4192-b71e-ce98c96d960b",
- "created": "2022-07-02T17:28:37.019699Z",
- "modified": "2022-07-02T17:28:37.019699Z",
+ "id": "relationship--fc15eab0-aef9-4105-b892-9a6544dcbbf1",
+ "created": "2022-07-02T19:59:12.74516Z",
+ "modified": "2022-07-02T19:59:12.74516Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--a921ea75-6d2f-4c29-a2ab-2710e554af59",
- "target_ref": "attack-pattern--2f9be5f3-9474-46c1-9bf8-038577c4b6a8"
+ "source_ref": "attack-pattern--01ca6965-45eb-49e0-85c3-64092e2fc7cf",
+ "target_ref": "attack-pattern--1059cdf7-3b45-40e6-93d3-b25ef3b6afac"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--eb65272a-c0f5-4cd6-b05e-df67b95a9367",
- "created": "2022-07-02T17:28:37.019768Z",
- "modified": "2022-07-02T17:28:37.019768Z",
+ "id": "relationship--c30bb10b-8aea-4d45-b827-a57ca8d0dcc8",
+ "created": "2022-07-02T19:59:12.745236Z",
+ "modified": "2022-07-02T19:59:12.745236Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--c472a384-f73e-4d83-b22d-6b42fb25a2e7",
- "target_ref": "attack-pattern--7565c59e-0831-42ce-a211-25058d5159bf"
+ "source_ref": "attack-pattern--3cdec22a-d46b-4fab-b15a-20db08e58221",
+ "target_ref": "attack-pattern--e8310cb2-e346-47a7-8410-7f0dc34f2ac2"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--fcd19cdc-236e-407f-ba10-89fa65ac6ee0",
- "created": "2022-07-02T17:28:37.019836Z",
- "modified": "2022-07-02T17:28:37.019836Z",
+ "id": "relationship--11b196fc-a414-4c23-b5cd-71548f67ad9b",
+ "created": "2022-07-02T19:59:12.745317Z",
+ "modified": "2022-07-02T19:59:12.745317Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--4e5b4790-3f96-44c5-9fb4-24cd84d57c31",
- "target_ref": "attack-pattern--7565c59e-0831-42ce-a211-25058d5159bf"
+ "source_ref": "attack-pattern--8799f5ac-c50d-4e5f-8117-fb242b7617be",
+ "target_ref": "attack-pattern--e8310cb2-e346-47a7-8410-7f0dc34f2ac2"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--dbf6c56a-6e00-4fb0-a6e2-a2a622c780d6",
- "created": "2022-07-02T17:28:37.019905Z",
- "modified": "2022-07-02T17:28:37.019905Z",
+ "id": "relationship--12c405c3-8776-4f79-82da-2127e6d7d0e9",
+ "created": "2022-07-02T19:59:12.745389Z",
+ "modified": "2022-07-02T19:59:12.745389Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--3603a527-d7c9-4562-ae2d-e66c49d597c5",
- "target_ref": "attack-pattern--e99f96c7-38d4-4fa9-b337-984da5ff0e9c"
+ "source_ref": "attack-pattern--7f3088ee-6c4b-48d3-894e-2b33db9d6260",
+ "target_ref": "attack-pattern--1df3f525-2142-439a-94c1-a600464e1e6e"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--e6881e5d-abdf-4ec0-a708-8ed9abbb0475",
- "created": "2022-07-02T17:28:37.019974Z",
- "modified": "2022-07-02T17:28:37.019974Z",
+ "id": "relationship--758986c5-a31f-4b64-b486-9f8ec496ca48",
+ "created": "2022-07-02T19:59:12.745462Z",
+ "modified": "2022-07-02T19:59:12.745462Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--734be066-e37f-4e86-b819-a868c2c4d798",
- "target_ref": "attack-pattern--c2651250-61d5-4cfa-92f2-4745198e0c29"
+ "source_ref": "attack-pattern--b8e80736-22ad-481d-9ea0-eebd0944187e",
+ "target_ref": "attack-pattern--8e486393-6d94-4855-989e-9a9fa9acdd13"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--3b351e90-b747-4e96-a538-8e2ebb24331c",
- "created": "2022-07-02T17:28:37.020048Z",
- "modified": "2022-07-02T17:28:37.020048Z",
+ "id": "relationship--226e87ae-da03-4471-bc41-c1c353a5ff32",
+ "created": "2022-07-02T19:59:12.745532Z",
+ "modified": "2022-07-02T19:59:12.745532Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--da6adc03-a37d-45bf-973c-1297375f3f94",
- "target_ref": "attack-pattern--c2651250-61d5-4cfa-92f2-4745198e0c29"
+ "source_ref": "attack-pattern--a87a01a1-ae12-4859-8ad3-faeb0dd458af",
+ "target_ref": "attack-pattern--8e486393-6d94-4855-989e-9a9fa9acdd13"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--c8c9776e-7041-412a-96d9-81a8a81464e2",
- "created": "2022-07-02T17:28:37.020118Z",
- "modified": "2022-07-02T17:28:37.020118Z",
+ "id": "relationship--20d89476-ccd8-4ec7-ba7f-9871c3226c2a",
+ "created": "2022-07-02T19:59:12.745603Z",
+ "modified": "2022-07-02T19:59:12.745603Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--96893208-0e96-4154-b045-4fc1bdaf4af3",
- "target_ref": "attack-pattern--c2651250-61d5-4cfa-92f2-4745198e0c29"
+ "source_ref": "attack-pattern--15bd2bb3-531e-4a14-8650-613bf8dda25c",
+ "target_ref": "attack-pattern--8e486393-6d94-4855-989e-9a9fa9acdd13"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--e2c6e14f-2851-4c74-bba8-ce53c0445616",
- "created": "2022-07-02T17:28:37.020187Z",
- "modified": "2022-07-02T17:28:37.020187Z",
+ "id": "relationship--67709935-64b9-48c4-aa84-9cdb5d9c7149",
+ "created": "2022-07-02T19:59:12.745675Z",
+ "modified": "2022-07-02T19:59:12.745675Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--d4a81525-7093-4cf1-8a25-5f65270f9663",
- "target_ref": "attack-pattern--c2651250-61d5-4cfa-92f2-4745198e0c29"
+ "source_ref": "attack-pattern--c3f5bd0d-a29b-43ba-b455-ec9ef00f05b1",
+ "target_ref": "attack-pattern--8e486393-6d94-4855-989e-9a9fa9acdd13"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--fb1e0672-97e6-429b-ac88-790b3d3316d5",
- "created": "2022-07-02T17:28:37.020256Z",
- "modified": "2022-07-02T17:28:37.020256Z",
+ "id": "relationship--5fcdc73a-db6f-4f2e-9532-919f7c2d8990",
+ "created": "2022-07-02T19:59:12.745754Z",
+ "modified": "2022-07-02T19:59:12.745754Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--3ff7e5b9-ac4b-44f9-81d7-1475ee208c20",
- "target_ref": "attack-pattern--c2651250-61d5-4cfa-92f2-4745198e0c29"
+ "source_ref": "attack-pattern--57be87ef-21e0-478e-9afc-996a244602f2",
+ "target_ref": "attack-pattern--8e486393-6d94-4855-989e-9a9fa9acdd13"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--2a3c34c2-09f8-4867-ad8f-900b3dc56ba3",
- "created": "2022-07-02T17:28:37.020325Z",
- "modified": "2022-07-02T17:28:37.020325Z",
+ "id": "relationship--84129a03-e70a-4b8e-95e5-b77ccc494c26",
+ "created": "2022-07-02T19:59:12.745827Z",
+ "modified": "2022-07-02T19:59:12.745827Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--11300333-274b-4c70-84a7-c0d5ba379d34",
- "target_ref": "attack-pattern--1b7f7c35-42b5-4fd3-828d-aff89f941850"
+ "source_ref": "attack-pattern--cf6ea412-b1f5-46ef-839b-9a550418d5c0",
+ "target_ref": "attack-pattern--1899a266-350e-4e86-ba2a-d783744ff76d"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--7b9b76dc-40bf-46e4-ba01-8c2aeb9ec253",
- "created": "2022-07-02T17:28:37.020395Z",
- "modified": "2022-07-02T17:28:37.020395Z",
+ "id": "relationship--40ce0237-1667-4805-bf9d-f91dcf0a8d3f",
+ "created": "2022-07-02T19:59:12.745902Z",
+ "modified": "2022-07-02T19:59:12.745902Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--e5d4cc77-8a4c-4121-aafd-f8683a9d322c",
- "target_ref": "attack-pattern--ccde7e48-1f25-46dd-a38f-39758274a024"
+ "source_ref": "attack-pattern--e7adceed-2079-48db-b7d8-9d93ad960f37",
+ "target_ref": "attack-pattern--2b2b06d9-26d3-4e69-93b3-5a3f37363b5f"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--9069c9d2-ded1-41b7-8d33-8c78fb54a292",
- "created": "2022-07-02T17:28:37.020464Z",
- "modified": "2022-07-02T17:28:37.020464Z",
+ "id": "relationship--92bfa6bf-279e-4852-855f-80c98ef0868f",
+ "created": "2022-07-02T19:59:12.745972Z",
+ "modified": "2022-07-02T19:59:12.745972Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--5d3ed9dc-6f1f-43c0-b3d3-3da63a7192d6",
- "target_ref": "attack-pattern--ccde7e48-1f25-46dd-a38f-39758274a024"
+ "source_ref": "attack-pattern--bb7f412a-6e4e-4799-a32c-5ee05016e8b5",
+ "target_ref": "attack-pattern--2b2b06d9-26d3-4e69-93b3-5a3f37363b5f"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--6954e70f-4def-4f65-bce4-12bf2c7bb3f6",
- "created": "2022-07-02T17:28:37.020532Z",
- "modified": "2022-07-02T17:28:37.020532Z",
+ "id": "relationship--cd10fb9a-d155-4308-ad3f-b3ad9e309a51",
+ "created": "2022-07-02T19:59:12.746043Z",
+ "modified": "2022-07-02T19:59:12.746043Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--838d2d28-0c80-4742-b60d-ceb63c1c864b",
- "target_ref": "attack-pattern--ccde7e48-1f25-46dd-a38f-39758274a024"
+ "source_ref": "attack-pattern--7285bc0e-2e3f-4ee7-ab50-637c84d538e2",
+ "target_ref": "attack-pattern--2b2b06d9-26d3-4e69-93b3-5a3f37363b5f"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--58f16d5b-1cf7-4dd0-b333-530b659fcada",
- "created": "2022-07-02T17:28:37.020601Z",
- "modified": "2022-07-02T17:28:37.020601Z",
+ "id": "relationship--ec2ec364-1838-48cf-8377-f8b206e28a88",
+ "created": "2022-07-02T19:59:12.746114Z",
+ "modified": "2022-07-02T19:59:12.746114Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--173741da-6c65-45a2-8b72-4692e694c345",
- "target_ref": "attack-pattern--ccde7e48-1f25-46dd-a38f-39758274a024"
+ "source_ref": "attack-pattern--20d348c8-0ed6-46b8-adea-6f82f154b5d4",
+ "target_ref": "attack-pattern--2b2b06d9-26d3-4e69-93b3-5a3f37363b5f"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--379bcc56-db1d-4620-ada7-ce6d72e98935",
- "created": "2022-07-02T17:28:37.02067Z",
- "modified": "2022-07-02T17:28:37.02067Z",
+ "id": "relationship--22c78274-59c8-4ae9-9d02-dc1b104b413e",
+ "created": "2022-07-02T19:59:12.74619Z",
+ "modified": "2022-07-02T19:59:12.74619Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--8f41068e-fa56-4853-b6ae-2806d49f7027",
- "target_ref": "attack-pattern--ccde7e48-1f25-46dd-a38f-39758274a024"
+ "source_ref": "attack-pattern--10d6f181-cf76-42b1-a021-37949a0574bc",
+ "target_ref": "attack-pattern--2b2b06d9-26d3-4e69-93b3-5a3f37363b5f"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--dc093239-f871-48ed-a9a5-bcd6d64e5356",
- "created": "2022-07-02T17:28:37.020739Z",
- "modified": "2022-07-02T17:28:37.020739Z",
+ "id": "relationship--752e46a3-f1b6-4e99-a9ae-19a704b6ff7d",
+ "created": "2022-07-02T19:59:12.746261Z",
+ "modified": "2022-07-02T19:59:12.746261Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--cd282f8b-686c-44c1-af4d-02ce5b4c707a",
- "target_ref": "attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334"
+ "source_ref": "attack-pattern--68c24d5c-02f4-4dda-b876-da222c052d86",
+ "target_ref": "attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--619f8bd8-c5ed-4cf1-9515-8448dbdc1363",
- "created": "2022-07-02T17:28:37.020809Z",
- "modified": "2022-07-02T17:28:37.020809Z",
+ "id": "relationship--4d610dcb-926e-4adc-8605-aec54795a265",
+ "created": "2022-07-02T19:59:12.746331Z",
+ "modified": "2022-07-02T19:59:12.746331Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--aaeceb4e-5f3a-48c9-8e79-5c8e1424ab6d",
- "target_ref": "attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334"
+ "source_ref": "attack-pattern--b8eb2c66-3523-4b3c-9996-060178842282",
+ "target_ref": "attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--3ea8dc34-086c-4a93-90b9-e7ccfac18e54",
- "created": "2022-07-02T17:28:37.020877Z",
- "modified": "2022-07-02T17:28:37.020877Z",
+ "id": "relationship--4ece5245-b7eb-4c9b-88a0-e9fd573fe1b9",
+ "created": "2022-07-02T19:59:12.746404Z",
+ "modified": "2022-07-02T19:59:12.746404Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--59223888-b348-45cf-a4f7-577ba5778641",
- "target_ref": "attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334"
+ "source_ref": "attack-pattern--de168abd-3a95-4dbc-a673-6756ba2bc3fc",
+ "target_ref": "attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--acc9e3ec-1d4b-4fe1-9704-f39322e91cb0",
- "created": "2022-07-02T17:28:37.020946Z",
- "modified": "2022-07-02T17:28:37.020946Z",
+ "id": "relationship--ccf9d6cd-ec91-425d-89ef-c1f331567040",
+ "created": "2022-07-02T19:59:12.746474Z",
+ "modified": "2022-07-02T19:59:12.746474Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--d673e8b6-858b-4b8e-b396-4bf840217fc1",
- "target_ref": "attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334"
+ "source_ref": "attack-pattern--b75f97dd-e18e-4555-8c9e-97680b398ae3",
+ "target_ref": "attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--af49029d-64f3-44fd-ab74-15f41e2b23f5",
- "created": "2022-07-02T17:28:37.021014Z",
- "modified": "2022-07-02T17:28:37.021014Z",
+ "id": "relationship--09ea4a4f-e4e6-4dbc-92f8-45f0e2d4926f",
+ "created": "2022-07-02T19:59:12.746544Z",
+ "modified": "2022-07-02T19:59:12.746544Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--4db9874c-0b6b-4159-8ef9-1ecae17677cc",
- "target_ref": "attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334"
+ "source_ref": "attack-pattern--b7c84415-9ce4-431c-8419-1c9dc3b4927f",
+ "target_ref": "attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--5cdb0e73-919f-4109-a77c-cefcaa5e6ee6",
- "created": "2022-07-02T17:28:37.021083Z",
- "modified": "2022-07-02T17:28:37.021083Z",
+ "id": "relationship--ba583f86-e5e5-43f8-b0aa-17b95c18caba",
+ "created": "2022-07-02T19:59:12.746614Z",
+ "modified": "2022-07-02T19:59:12.746614Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--9175c5c5-5e10-492c-823d-17178bdd1406",
- "target_ref": "attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334"
+ "source_ref": "attack-pattern--0f3f9883-6db6-4936-94ce-e89e0f994f6d",
+ "target_ref": "attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--0ef401cb-fe9b-4469-ba7a-8b09ee682ff1",
- "created": "2022-07-02T17:28:37.021152Z",
- "modified": "2022-07-02T17:28:37.021152Z",
+ "id": "relationship--a46759f8-d062-4480-9231-f3d2a480275d",
+ "created": "2022-07-02T19:59:12.746683Z",
+ "modified": "2022-07-02T19:59:12.746683Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--76f1c6e2-e4b9-4bc1-ae6a-02fe7345325a",
- "target_ref": "attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334"
+ "source_ref": "attack-pattern--74722b9d-d4cc-4d80-8261-d4e53b3b7af2",
+ "target_ref": "attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--7aa82e22-3008-4f04-a3f8-691c67fcdc92",
- "created": "2022-07-02T17:28:37.02122Z",
- "modified": "2022-07-02T17:28:37.02122Z",
+ "id": "relationship--6e073edd-2d88-4b2c-95ff-f4dbeb0250ce",
+ "created": "2022-07-02T19:59:12.746753Z",
+ "modified": "2022-07-02T19:59:12.746753Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--3ff18f87-55ce-47c5-822d-94f2cd6aeb9f",
- "target_ref": "attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334"
+ "source_ref": "attack-pattern--695e41fe-b084-4065-953c-e2cffd80ea5f",
+ "target_ref": "attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--d29bff70-edf6-4b8b-8f0b-aa6e865a3ab3",
- "created": "2022-07-02T17:28:37.021291Z",
- "modified": "2022-07-02T17:28:37.021291Z",
+ "id": "relationship--cb5ce666-b123-4c1b-a913-6e7b79dd88d3",
+ "created": "2022-07-02T19:59:12.746825Z",
+ "modified": "2022-07-02T19:59:12.746825Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--8e21ea76-776b-4113-ab50-0ced1178fd21",
- "target_ref": "attack-pattern--de5a467e-4326-4909-9c2d-d123830edca6"
+ "source_ref": "attack-pattern--cadb4dca-7f14-4616-a515-c211d418c4c9",
+ "target_ref": "attack-pattern--acb35a90-5c38-42f4-a32e-5e96bacf0e33"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--d14107f5-d97f-48de-b561-3ab682a6ecc0",
- "created": "2022-07-02T17:28:37.021361Z",
- "modified": "2022-07-02T17:28:37.021361Z",
+ "id": "relationship--da26624e-11e1-411c-af3d-26f82e6e885b",
+ "created": "2022-07-02T19:59:12.746895Z",
+ "modified": "2022-07-02T19:59:12.746895Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--2b86f30b-02d0-4759-9ccd-7abff53714a2",
- "target_ref": "attack-pattern--de5a467e-4326-4909-9c2d-d123830edca6"
+ "source_ref": "attack-pattern--c7076dd5-bc90-466a-9bd5-6cdd3d0d6be7",
+ "target_ref": "attack-pattern--acb35a90-5c38-42f4-a32e-5e96bacf0e33"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--33a1cbe6-4998-4ab1-81bc-2eb2af015d56",
- "created": "2022-07-02T17:28:37.02143Z",
- "modified": "2022-07-02T17:28:37.02143Z",
+ "id": "relationship--edf52749-5c11-4fad-baec-3ad9c4f8ea2c",
+ "created": "2022-07-02T19:59:12.746963Z",
+ "modified": "2022-07-02T19:59:12.746963Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--c79c0902-20ea-4efb-b6b5-0659f19c035b",
- "target_ref": "attack-pattern--de5a467e-4326-4909-9c2d-d123830edca6"
+ "source_ref": "attack-pattern--c77cddbe-3859-4fbb-ba3f-ce9a9c19497f",
+ "target_ref": "attack-pattern--acb35a90-5c38-42f4-a32e-5e96bacf0e33"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--2b71df13-0f6a-4143-b392-a61970dea0cd",
- "created": "2022-07-02T17:28:37.021498Z",
- "modified": "2022-07-02T17:28:37.021498Z",
+ "id": "relationship--bed17d47-3230-4493-b9f7-3a0883f7d9a8",
+ "created": "2022-07-02T19:59:12.747036Z",
+ "modified": "2022-07-02T19:59:12.747036Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--4b2a1b42-547b-459a-97b9-7fb7915359dc",
- "target_ref": "attack-pattern--de5a467e-4326-4909-9c2d-d123830edca6"
+ "source_ref": "attack-pattern--1d658549-c2db-4d51-805e-7f2577fe1a95",
+ "target_ref": "attack-pattern--acb35a90-5c38-42f4-a32e-5e96bacf0e33"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--fe180c6c-ad99-4ec5-95ca-b2db9b0424c1",
- "created": "2022-07-02T17:28:37.021568Z",
- "modified": "2022-07-02T17:28:37.021568Z",
+ "id": "relationship--a0b188b3-0e74-4944-8b62-732d446d1e89",
+ "created": "2022-07-02T19:59:12.747107Z",
+ "modified": "2022-07-02T19:59:12.747107Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--203756a5-ac3d-4a82-a096-25d01609571b",
- "target_ref": "attack-pattern--89258f59-9d58-42c6-9fbb-ceffd2530a76"
+ "source_ref": "attack-pattern--02b93bbb-3137-4ffe-8644-599e9a3bec76",
+ "target_ref": "attack-pattern--24bd7bc9-64dc-4ec9-b0e0-551c00666462"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--00faa9af-d98e-4627-b621-9fa0fed776da",
- "created": "2022-07-02T17:28:37.021636Z",
- "modified": "2022-07-02T17:28:37.021636Z",
+ "id": "relationship--9f79b9d0-8312-4b4a-a70b-3b19557e90fd",
+ "created": "2022-07-02T19:59:12.747178Z",
+ "modified": "2022-07-02T19:59:12.747178Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--e977dd1f-45db-4762-a34d-2f06c2bd788b",
- "target_ref": "attack-pattern--89258f59-9d58-42c6-9fbb-ceffd2530a76"
+ "source_ref": "attack-pattern--88a99ab0-5135-4c6b-9832-74260b6c1dbd",
+ "target_ref": "attack-pattern--24bd7bc9-64dc-4ec9-b0e0-551c00666462"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--c081b526-ed45-488c-bd37-ef4a3fb7036b",
- "created": "2022-07-02T17:28:37.021706Z",
- "modified": "2022-07-02T17:28:37.021706Z",
+ "id": "relationship--5605fb56-4135-4ec2-9527-c8995eb9b3f3",
+ "created": "2022-07-02T19:59:12.747247Z",
+ "modified": "2022-07-02T19:59:12.747247Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--12cd627c-2617-486e-bcbf-a5bf5f467286",
- "target_ref": "attack-pattern--89258f59-9d58-42c6-9fbb-ceffd2530a76"
+ "source_ref": "attack-pattern--c9ce8866-87ec-4489-8a95-8e89ad2ae135",
+ "target_ref": "attack-pattern--24bd7bc9-64dc-4ec9-b0e0-551c00666462"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--5abc706f-dd49-4300-849c-aeebb6fb6de7",
- "created": "2022-07-02T17:28:37.021781Z",
- "modified": "2022-07-02T17:28:37.021781Z",
+ "id": "relationship--0cc8f83c-b818-4dd6-92b2-555de6a7680f",
+ "created": "2022-07-02T19:59:12.747317Z",
+ "modified": "2022-07-02T19:59:12.747317Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--c9b162f1-ae90-4ccb-acb0-c2a4d7c9979d",
- "target_ref": "attack-pattern--b3c2db10-3666-4b0b-a8f2-c97506382de0"
+ "source_ref": "attack-pattern--e67aac85-903e-4a76-8c8f-ea20eea7fb57",
+ "target_ref": "attack-pattern--fc6efd97-7618-4ea6-81bb-f83cc4d5f608"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--6da393bd-2e54-4117-95a8-a9af89ba4a8d",
- "created": "2022-07-02T17:28:37.021852Z",
- "modified": "2022-07-02T17:28:37.021852Z",
+ "id": "relationship--2b984590-9666-4db0-9c72-993abb5ba2c8",
+ "created": "2022-07-02T19:59:12.747388Z",
+ "modified": "2022-07-02T19:59:12.747388Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--b0eb15ea-d4c2-49b9-a9e3-1fbf5c8dc11e",
- "target_ref": "attack-pattern--b3c2db10-3666-4b0b-a8f2-c97506382de0"
+ "source_ref": "attack-pattern--bde3b6dd-3bfd-42cc-9f6f-b3750dd4b94c",
+ "target_ref": "attack-pattern--fc6efd97-7618-4ea6-81bb-f83cc4d5f608"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--fa7ff5ef-7a36-42b8-a63b-0363c0aa8318",
- "created": "2022-07-02T17:28:37.021924Z",
- "modified": "2022-07-02T17:28:37.021924Z",
+ "id": "relationship--7894c853-588c-45e4-8aff-00253b24eaad",
+ "created": "2022-07-02T19:59:12.747457Z",
+ "modified": "2022-07-02T19:59:12.747457Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--a500a0b8-2780-497c-82cf-6b053542e489",
- "target_ref": "attack-pattern--b3c2db10-3666-4b0b-a8f2-c97506382de0"
+ "source_ref": "attack-pattern--3984387e-adea-4ccd-88d3-8a481e41a045",
+ "target_ref": "attack-pattern--fc6efd97-7618-4ea6-81bb-f83cc4d5f608"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--2162b88b-8b4c-4967-8572-0b92ac9cf854",
- "created": "2022-07-02T17:28:37.021993Z",
- "modified": "2022-07-02T17:28:37.021993Z",
+ "id": "relationship--32362f7f-3011-4f8a-beab-7683dd30e063",
+ "created": "2022-07-02T19:59:12.74753Z",
+ "modified": "2022-07-02T19:59:12.74753Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--06a4372a-4911-4569-9d5a-513bfaf1abc9",
- "target_ref": "attack-pattern--b3c2db10-3666-4b0b-a8f2-c97506382de0"
+ "source_ref": "attack-pattern--84a6b4f6-67e3-41e8-b99c-96bd5a4741da",
+ "target_ref": "attack-pattern--fc6efd97-7618-4ea6-81bb-f83cc4d5f608"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--6184905c-fa4c-4e2e-ba4a-5a345f01f37e",
- "created": "2022-07-02T17:28:37.022062Z",
- "modified": "2022-07-02T17:28:37.022062Z",
+ "id": "relationship--25e2aabb-7078-4c06-9c2b-ee197041ca11",
+ "created": "2022-07-02T19:59:12.747599Z",
+ "modified": "2022-07-02T19:59:12.747599Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--70885523-55fd-46ff-aa6f-59ff4810dfe5",
- "target_ref": "attack-pattern--b5a8668d-e35e-406f-b2a9-62bc4aa25cfe"
+ "source_ref": "attack-pattern--231b3ff6-8ecb-4cd8-b9eb-ca7740298c61",
+ "target_ref": "attack-pattern--acdb4254-8f84-4ae5-b26a-b4e19f29b6f0"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--970cbe10-1cd6-40f2-b384-63ebd57dfe8f",
- "created": "2022-07-02T17:28:37.022132Z",
- "modified": "2022-07-02T17:28:37.022132Z",
+ "id": "relationship--eb5d6ef7-87f4-4d7f-b8ed-1dd268276a1c",
+ "created": "2022-07-02T19:59:12.747669Z",
+ "modified": "2022-07-02T19:59:12.747669Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--18dfaddc-b4d8-43dc-baff-e92c4ad7b6c1",
- "target_ref": "attack-pattern--b5a8668d-e35e-406f-b2a9-62bc4aa25cfe"
+ "source_ref": "attack-pattern--2cf97da8-f92c-49f3-bc58-d2527ce2a931",
+ "target_ref": "attack-pattern--acdb4254-8f84-4ae5-b26a-b4e19f29b6f0"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--ad7f42f8-d02b-4911-880c-3741e145d59e",
- "created": "2022-07-02T17:28:37.022204Z",
- "modified": "2022-07-02T17:28:37.022204Z",
+ "id": "relationship--78533ee5-ce9c-4650-8063-ea60b7e69a60",
+ "created": "2022-07-02T19:59:12.74774Z",
+ "modified": "2022-07-02T19:59:12.74774Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--87790d44-0beb-434e-bfae-178a7765a765",
- "target_ref": "attack-pattern--75b32a49-e97e-4f8d-884a-870fad05bcc6"
+ "source_ref": "attack-pattern--28efce68-0e87-431b-920f-9d678eb6f444",
+ "target_ref": "attack-pattern--2e57c2b3-f885-4684-bc08-47d334463c48"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--70021da0-bc4b-4de3-a1b4-d5bf19430820",
- "created": "2022-07-02T17:28:37.022272Z",
- "modified": "2022-07-02T17:28:37.022272Z",
+ "id": "relationship--7cf4cf86-1a83-4aac-b91a-c76711cf9276",
+ "created": "2022-07-02T19:59:12.747814Z",
+ "modified": "2022-07-02T19:59:12.747814Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--d230f9c5-757d-4a27-a808-fa5a60b42824",
- "target_ref": "attack-pattern--75b32a49-e97e-4f8d-884a-870fad05bcc6"
+ "source_ref": "attack-pattern--ca7f1d3a-ee55-49d4-824f-1f060d97db12",
+ "target_ref": "attack-pattern--2e57c2b3-f885-4684-bc08-47d334463c48"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--d505e7a3-e42f-4d5c-a181-eaa9da73d67c",
- "created": "2022-07-02T17:28:37.022342Z",
- "modified": "2022-07-02T17:28:37.022342Z",
+ "id": "relationship--7b0f214d-6696-4b3d-ae68-0aea07152e55",
+ "created": "2022-07-02T19:59:12.747887Z",
+ "modified": "2022-07-02T19:59:12.747887Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--a224996d-effe-42ed-b7a6-78a7d86c662d",
- "target_ref": "attack-pattern--8f74ba8b-807b-4b71-81fd-d1fa6edcc1a7"
+ "source_ref": "attack-pattern--762233df-b2a8-404c-9136-d97611361d28",
+ "target_ref": "attack-pattern--81984c05-802f-4dc7-9288-fb3abb263ef5"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--1935ff83-cb47-44d3-85f1-0f66e50727e8",
- "created": "2022-07-02T17:28:37.022413Z",
- "modified": "2022-07-02T17:28:37.022413Z",
+ "id": "relationship--f04a6f5a-4c33-43e8-ac8d-534c764d0209",
+ "created": "2022-07-02T19:59:12.74796Z",
+ "modified": "2022-07-02T19:59:12.74796Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--ec885090-0bb5-4d21-9f0a-0b62f22d1de0",
- "target_ref": "attack-pattern--8f74ba8b-807b-4b71-81fd-d1fa6edcc1a7"
+ "source_ref": "attack-pattern--fb297eec-3fc8-4599-bc41-60f5b0d71cb5",
+ "target_ref": "attack-pattern--81984c05-802f-4dc7-9288-fb3abb263ef5"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--aca119ff-0bf4-44b7-a4f1-add1574787c4",
- "created": "2022-07-02T17:28:37.022485Z",
- "modified": "2022-07-02T17:28:37.022485Z",
+ "id": "relationship--536b8334-a158-4805-a1c1-56d5fd26ddf8",
+ "created": "2022-07-02T19:59:12.748033Z",
+ "modified": "2022-07-02T19:59:12.748033Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--7b6755fc-a945-4ee8-9547-34be9f979b92",
- "target_ref": "attack-pattern--8f74ba8b-807b-4b71-81fd-d1fa6edcc1a7"
+ "source_ref": "attack-pattern--d75214cd-118d-4ce4-ba64-f1a0ef15b953",
+ "target_ref": "attack-pattern--81984c05-802f-4dc7-9288-fb3abb263ef5"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--9b3f4e38-0e7b-4181-8fa6-cccba11a1589",
- "created": "2022-07-02T17:28:37.022557Z",
- "modified": "2022-07-02T17:28:37.022557Z",
+ "id": "relationship--155ce50c-07cd-472f-9ccb-a2ca513051fb",
+ "created": "2022-07-02T19:59:12.748105Z",
+ "modified": "2022-07-02T19:59:12.748105Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--2fd5387c-c9c4-4de2-bcb7-0ef7364b819c",
- "target_ref": "attack-pattern--dc48b236-a1f8-4631-9645-bf76dd558c29"
+ "source_ref": "attack-pattern--72b26317-80d3-4149-9161-708c83549ac1",
+ "target_ref": "attack-pattern--9ae37313-f374-4007-bf44-91d0b85d8e1a"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--35cfba86-d2b7-4f49-9e5e-0a9ca38cbbca",
- "created": "2022-07-02T17:28:37.022626Z",
- "modified": "2022-07-02T17:28:37.022626Z",
+ "id": "relationship--9d638174-d542-4279-be8f-5c617346a51f",
+ "created": "2022-07-02T19:59:12.748179Z",
+ "modified": "2022-07-02T19:59:12.748179Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--1d4bebe8-8bab-4066-91ad-45a3fef5161f",
- "target_ref": "attack-pattern--dc48b236-a1f8-4631-9645-bf76dd558c29"
+ "source_ref": "attack-pattern--a0a9b00c-cd91-4bbb-bfe7-546b64d8334d",
+ "target_ref": "attack-pattern--9ae37313-f374-4007-bf44-91d0b85d8e1a"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--86719bf6-bcc0-4812-b8c5-dc6e41406e8f",
- "created": "2022-07-02T17:28:37.022695Z",
- "modified": "2022-07-02T17:28:37.022695Z",
+ "id": "relationship--b78482dd-9587-4e46-97c0-fa72ed89f96a",
+ "created": "2022-07-02T19:59:12.748255Z",
+ "modified": "2022-07-02T19:59:12.748255Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--e63da0fd-83f8-443b-9767-eb50759f36c0",
- "target_ref": "attack-pattern--dc48b236-a1f8-4631-9645-bf76dd558c29"
+ "source_ref": "attack-pattern--7be98bc2-6d02-413b-bf2d-cd3f71a72526",
+ "target_ref": "attack-pattern--9ae37313-f374-4007-bf44-91d0b85d8e1a"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--a411eee5-77be-4bd4-be84-4b60275c441c",
- "created": "2022-07-02T17:28:37.022764Z",
- "modified": "2022-07-02T17:28:37.022764Z",
+ "id": "relationship--585dfc3f-8c82-4429-8d64-b82856a75f49",
+ "created": "2022-07-02T19:59:12.74833Z",
+ "modified": "2022-07-02T19:59:12.74833Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--3dc7575f-3242-497a-a47c-23d50e05cbfc",
- "target_ref": "attack-pattern--dc48b236-a1f8-4631-9645-bf76dd558c29"
+ "source_ref": "attack-pattern--7e30b889-c9f9-4932-aa0d-82d5f1d79e45",
+ "target_ref": "attack-pattern--9ae37313-f374-4007-bf44-91d0b85d8e1a"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--e2aaf14e-ea67-40ab-92dc-1a9fef33a473",
- "created": "2022-07-02T17:28:37.022833Z",
- "modified": "2022-07-02T17:28:37.022833Z",
+ "id": "relationship--336e6292-1658-400d-ab79-4a94a7d98df4",
+ "created": "2022-07-02T19:59:12.748406Z",
+ "modified": "2022-07-02T19:59:12.748406Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--1d35a05b-99d7-4efb-8619-c0bfc4ef13a7",
- "target_ref": "attack-pattern--c8096e1e-bd17-43e9-b7cf-138cf344d73d"
+ "source_ref": "attack-pattern--437280b4-4445-456f-ab6c-2ef6d9913c4d",
+ "target_ref": "attack-pattern--aa3dd7f6-b16f-4ee4-850a-91394b33622a"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--79a74354-02ab-4bd5-a439-d40a7891737f",
- "created": "2022-07-02T17:28:37.022902Z",
- "modified": "2022-07-02T17:28:37.022902Z",
+ "id": "relationship--4a163170-5474-40b3-aa7a-c29ec513bc2e",
+ "created": "2022-07-02T19:59:12.748481Z",
+ "modified": "2022-07-02T19:59:12.748481Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--52d6fdeb-d6c6-4a0b-bf8e-6bc7b29e37ec",
- "target_ref": "attack-pattern--c8096e1e-bd17-43e9-b7cf-138cf344d73d"
+ "source_ref": "attack-pattern--9e3cb11b-78e4-4ff3-9040-0a14d5b20951",
+ "target_ref": "attack-pattern--aa3dd7f6-b16f-4ee4-850a-91394b33622a"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--5df29faa-8129-4b3d-aef7-ea02c332c066",
- "created": "2022-07-02T17:28:37.02297Z",
- "modified": "2022-07-02T17:28:37.02297Z",
+ "id": "relationship--cefa3cb3-9aa7-4dbe-b9a8-894093b5ada1",
+ "created": "2022-07-02T19:59:12.748584Z",
+ "modified": "2022-07-02T19:59:12.748584Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--b2c9d68e-04f9-4219-89e8-f4b625d53842",
- "target_ref": "attack-pattern--c8096e1e-bd17-43e9-b7cf-138cf344d73d"
+ "source_ref": "attack-pattern--09c83f74-e10c-452e-b55b-37807cc79c95",
+ "target_ref": "attack-pattern--aa3dd7f6-b16f-4ee4-850a-91394b33622a"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--bce4d833-715a-4235-9b0e-e93243269189",
- "created": "2022-07-02T17:28:37.023039Z",
- "modified": "2022-07-02T17:28:37.023039Z",
+ "id": "relationship--595c478b-7493-4b67-a63f-16ba80f9a156",
+ "created": "2022-07-02T19:59:12.74866Z",
+ "modified": "2022-07-02T19:59:12.74866Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--4cf400f0-0874-4b3f-86ac-5e55dda4506e",
- "target_ref": "attack-pattern--939d0f04-b080-47cc-ad3a-c971084d37ca"
+ "source_ref": "attack-pattern--e455a715-d6ae-4bb7-938c-0087e929ede0",
+ "target_ref": "attack-pattern--a5d16185-7fbd-41e8-b549-f8534a570ca9"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--1478755e-6ed4-429a-9425-96a9860a3e4b",
- "created": "2022-07-02T17:28:37.023141Z",
- "modified": "2022-07-02T17:28:37.023141Z",
+ "id": "relationship--9fe85056-8731-4a6f-96ef-3fe1eee2f18f",
+ "created": "2022-07-02T19:59:12.748735Z",
+ "modified": "2022-07-02T19:59:12.748735Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--841a7027-21e2-47f0-a8be-cc43d0e85faf",
- "target_ref": "attack-pattern--939d0f04-b080-47cc-ad3a-c971084d37ca"
+ "source_ref": "attack-pattern--0f5cbbee-3e87-4cdc-b544-ee9374919426",
+ "target_ref": "attack-pattern--a5d16185-7fbd-41e8-b549-f8534a570ca9"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--ecc9fe70-68da-44c8-8a33-4dd7d0c5c088",
- "created": "2022-07-02T17:28:37.023211Z",
- "modified": "2022-07-02T17:28:37.023211Z",
+ "id": "relationship--293dce24-1455-46a3-ab98-935beb321e2e",
+ "created": "2022-07-02T19:59:12.748811Z",
+ "modified": "2022-07-02T19:59:12.748811Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--b802c014-90dc-4e3f-8ee8-9c77ccc07f7c",
- "target_ref": "attack-pattern--939d0f04-b080-47cc-ad3a-c971084d37ca"
+ "source_ref": "attack-pattern--ad3872bc-e727-44fb-9f7b-6afc4a54958c",
+ "target_ref": "attack-pattern--a5d16185-7fbd-41e8-b549-f8534a570ca9"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--22b6955b-a25d-4a1d-97f8-49273eaa1854",
- "created": "2022-07-02T17:28:37.023282Z",
- "modified": "2022-07-02T17:28:37.023282Z",
+ "id": "relationship--6454298d-e34d-4aa8-af05-9e3769ed45f0",
+ "created": "2022-07-02T19:59:12.748887Z",
+ "modified": "2022-07-02T19:59:12.748887Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--30d1076a-9f74-4aba-a61a-20339888ef0f",
- "target_ref": "attack-pattern--82e0d266-415c-495b-989e-9c029298646f"
+ "source_ref": "attack-pattern--7763a745-0e8f-4319-b877-440860e304e7",
+ "target_ref": "attack-pattern--76e6a962-860b-461c-a6ed-6de2e9922be1"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--226d2ea1-be32-4ae8-b477-d10e5fe438b7",
- "created": "2022-07-02T17:28:37.023351Z",
- "modified": "2022-07-02T17:28:37.023351Z",
+ "id": "relationship--d583545d-0d60-40dc-a750-e79dfce59e57",
+ "created": "2022-07-02T19:59:12.748963Z",
+ "modified": "2022-07-02T19:59:12.748963Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--edc140d7-fd0f-40f1-b85c-78c1599da3e1",
- "target_ref": "attack-pattern--82e0d266-415c-495b-989e-9c029298646f"
+ "source_ref": "attack-pattern--8591e263-fb0c-4a9b-bcb6-ac1c940ff152",
+ "target_ref": "attack-pattern--76e6a962-860b-461c-a6ed-6de2e9922be1"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--a805d9df-80c1-4f0b-b2e4-5f6e1350878d",
- "created": "2022-07-02T17:28:37.023421Z",
- "modified": "2022-07-02T17:28:37.023421Z",
+ "id": "relationship--7629b504-7f57-4c4c-9fd4-4fa1930ee87a",
+ "created": "2022-07-02T19:59:12.749037Z",
+ "modified": "2022-07-02T19:59:12.749037Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--070ebd8c-f578-4334-8f77-06b59315438e",
- "target_ref": "attack-pattern--78c65ad8-b96c-48b2-857d-f9952f3bcb7e"
+ "source_ref": "attack-pattern--23b92b9a-d1e2-4049-ac91-99c5f094a84e",
+ "target_ref": "attack-pattern--d6f1b55e-ccb2-4cd6-9ed0-84d326e51a89"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--6e13a795-4ba6-40a0-af82-f14b7e5c6da9",
- "created": "2022-07-02T17:28:37.023491Z",
- "modified": "2022-07-02T17:28:37.023491Z",
+ "id": "relationship--a2e4e8e1-1e4e-43c3-8217-7bfc530b7943",
+ "created": "2022-07-02T19:59:12.749113Z",
+ "modified": "2022-07-02T19:59:12.749113Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--ba8f2965-53cc-410b-81c5-ecb749a85a25",
- "target_ref": "attack-pattern--78c65ad8-b96c-48b2-857d-f9952f3bcb7e"
+ "source_ref": "attack-pattern--3b04c334-059e-4983-80c7-c602062352c4",
+ "target_ref": "attack-pattern--d6f1b55e-ccb2-4cd6-9ed0-84d326e51a89"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--23792467-2a96-44f7-8fb3-0bc5ba8572c7",
- "created": "2022-07-02T17:28:37.023566Z",
- "modified": "2022-07-02T17:28:37.023566Z",
+ "id": "relationship--2d6f0a0e-a7ed-445f-a0e9-bc535bf5d059",
+ "created": "2022-07-02T19:59:12.749188Z",
+ "modified": "2022-07-02T19:59:12.749188Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--f4a97cf7-af47-4138-8fd4-b45f63b73c9a",
- "target_ref": "attack-pattern--a6c98a38-b972-4c1b-aaba-27bf7be9afe8"
+ "source_ref": "attack-pattern--8571126c-cb8e-4ef5-945a-83f7af3d599d",
+ "target_ref": "attack-pattern--dc5fe86d-bf2c-4e17-8d7b-9e3cfa6a0683"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--78e34073-7af0-40f7-9bc9-bd4a0e3a8aaf",
- "created": "2022-07-02T17:28:37.023638Z",
- "modified": "2022-07-02T17:28:37.023638Z",
+ "id": "relationship--c41e1f2d-ddff-4058-a616-07d02bd9a4e7",
+ "created": "2022-07-02T19:59:12.74926Z",
+ "modified": "2022-07-02T19:59:12.74926Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--fe3d67af-3f3c-4cc0-9514-2feef326b494",
- "target_ref": "attack-pattern--a6c98a38-b972-4c1b-aaba-27bf7be9afe8"
+ "source_ref": "attack-pattern--4163a8ac-c555-49bf-a17e-b9e15036b667",
+ "target_ref": "attack-pattern--dc5fe86d-bf2c-4e17-8d7b-9e3cfa6a0683"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--88153cd7-5a23-478f-81f2-b57b3ca3cbf1",
- "created": "2022-07-02T17:28:37.02371Z",
- "modified": "2022-07-02T17:28:37.02371Z",
+ "id": "relationship--85379809-5fc5-4e03-96bc-44b3be12fef8",
+ "created": "2022-07-02T19:59:12.749336Z",
+ "modified": "2022-07-02T19:59:12.749336Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--04158d63-8072-48ae-a05a-23809682cd1f",
- "target_ref": "attack-pattern--3006fa0c-25d6-4ea8-a9fa-bcaa272fbc1d"
+ "source_ref": "attack-pattern--970f666f-aa3b-4cea-9ca6-c8e2410dedbb",
+ "target_ref": "attack-pattern--771a4024-a91e-4b1e-8744-c91b32196d63"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--c7ce46fa-e539-4e6e-bf88-ae92835f65e4",
- "created": "2022-07-02T17:28:37.023779Z",
- "modified": "2022-07-02T17:28:37.023779Z",
+ "id": "relationship--36496091-f20c-442a-a539-380b942b1d48",
+ "created": "2022-07-02T19:59:12.749411Z",
+ "modified": "2022-07-02T19:59:12.749411Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--ed4f4eb5-994b-45b3-9018-7a8cd5d6f16a",
- "target_ref": "attack-pattern--fbff3e68-3833-46aa-8b05-223b16c12608"
+ "source_ref": "attack-pattern--6eb226f3-9e7d-4404-ad97-44fdf562de9b",
+ "target_ref": "attack-pattern--2707372c-26a1-4c1f-8875-65a2433cda70"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--0fcfe97d-993c-445f-8310-1e6ba5496c71",
- "created": "2022-07-02T17:28:37.023848Z",
- "modified": "2022-07-02T17:28:37.023848Z",
+ "id": "relationship--62d7839f-63ff-4d75-85c9-ec035819a3b1",
+ "created": "2022-07-02T19:59:12.749486Z",
+ "modified": "2022-07-02T19:59:12.749486Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--d444b0b1-16b3-4e73-a94c-dc47a3a1ed5b",
- "target_ref": "attack-pattern--fbff3e68-3833-46aa-8b05-223b16c12608"
+ "source_ref": "attack-pattern--11af0d9d-1e5c-4b28-b586-cffc7b2e68fc",
+ "target_ref": "attack-pattern--2707372c-26a1-4c1f-8875-65a2433cda70"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--2771be52-3e6d-4098-9980-9c3678ca29d0",
- "created": "2022-07-02T17:28:37.023917Z",
- "modified": "2022-07-02T17:28:37.023917Z",
+ "id": "relationship--106ed9cb-d2f6-4032-a0d0-25c26265c034",
+ "created": "2022-07-02T19:59:12.749562Z",
+ "modified": "2022-07-02T19:59:12.749562Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--84a417d1-ee53-43cc-ae7b-440a3e1ba555",
- "target_ref": "attack-pattern--41bdae21-3938-47e4-81e9-a4ffa5cffb61"
+ "source_ref": "attack-pattern--9e00d7b6-72ac-4e51-85cc-ed39df4de126",
+ "target_ref": "attack-pattern--35550613-e5ec-4d78-8518-1990ade69aec"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--b508e8c0-b951-4c4c-98fe-d9a465dd6f48",
- "created": "2022-07-02T17:28:37.023986Z",
- "modified": "2022-07-02T17:28:37.023986Z",
+ "id": "relationship--2e4eda94-7153-4c31-bee3-ccfeb2912cb9",
+ "created": "2022-07-02T19:59:12.749636Z",
+ "modified": "2022-07-02T19:59:12.749636Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--edea2df0-2c56-46b7-9264-1622a44476e2",
- "target_ref": "attack-pattern--41bdae21-3938-47e4-81e9-a4ffa5cffb61"
+ "source_ref": "attack-pattern--35c84f14-34e0-479a-b6b4-043750313fc4",
+ "target_ref": "attack-pattern--35550613-e5ec-4d78-8518-1990ade69aec"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--0e908a0b-c9ae-4d57-9168-ac416c7b336e",
- "created": "2022-07-02T17:28:37.024054Z",
- "modified": "2022-07-02T17:28:37.024054Z",
+ "id": "relationship--3ad4e92b-15f5-4d0b-90d3-f19775d8270c",
+ "created": "2022-07-02T19:59:12.749713Z",
+ "modified": "2022-07-02T19:59:12.749713Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--337c05bc-515b-48e0-bf5c-d4cdd5bc7bba",
- "target_ref": "attack-pattern--78596a5d-9d80-4993-81dd-b89edd68cf21"
+ "source_ref": "attack-pattern--25990799-9c4f-4941-aa2c-5deab1946ef1",
+ "target_ref": "attack-pattern--91a26229-8c2f-46da-b4fb-5dc291ca84ad"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--8146d70a-3a30-48e4-a204-741d7ccc7a4b",
- "created": "2022-07-02T17:28:37.024124Z",
- "modified": "2022-07-02T17:28:37.024124Z",
+ "id": "relationship--2ed42747-06bc-4d7f-8a1a-7b3f274b32bb",
+ "created": "2022-07-02T19:59:12.749789Z",
+ "modified": "2022-07-02T19:59:12.749789Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--1880ffbe-6164-4bb5-9986-7a5fb0d10751",
- "target_ref": "attack-pattern--78596a5d-9d80-4993-81dd-b89edd68cf21"
+ "source_ref": "attack-pattern--4fe2d898-b1ec-4de1-bbd0-c42de0e2bda7",
+ "target_ref": "attack-pattern--91a26229-8c2f-46da-b4fb-5dc291ca84ad"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--1787f8ec-dc55-4754-85eb-5a76ca2dbf3f",
- "created": "2022-07-02T17:28:37.024193Z",
- "modified": "2022-07-02T17:28:37.024193Z",
+ "id": "relationship--90a3f031-8444-4774-a609-11fe325d64c5",
+ "created": "2022-07-02T19:59:12.749864Z",
+ "modified": "2022-07-02T19:59:12.749864Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--28de0362-57a1-4c91-afe7-991a2cdce07e",
- "target_ref": "attack-pattern--78596a5d-9d80-4993-81dd-b89edd68cf21"
+ "source_ref": "attack-pattern--fa57c091-0ea0-4961-a1f4-99c34eaab23a",
+ "target_ref": "attack-pattern--91a26229-8c2f-46da-b4fb-5dc291ca84ad"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--e1634fcd-0df1-4287-b235-04146ea2c793",
- "created": "2022-07-02T17:28:37.024262Z",
- "modified": "2022-07-02T17:28:37.024262Z",
+ "id": "relationship--4a3e9a27-4f67-4b63-a4ea-07dafd9a0984",
+ "created": "2022-07-02T19:59:12.749939Z",
+ "modified": "2022-07-02T19:59:12.749939Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--88a55935-0548-48cc-9062-53a501a2afa6",
- "target_ref": "attack-pattern--d1f4502a-e10b-4854-a5d2-92a8400bb55f"
+ "source_ref": "attack-pattern--f98165a2-f2a6-4ddb-9766-4defcdf0f9cc",
+ "target_ref": "attack-pattern--6dccbf81-1fb1-47c3-b6c5-4d1d6286be19"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--fedaec4d-1eb5-484c-abd2-4db0da3705d3",
- "created": "2022-07-02T17:28:37.024334Z",
- "modified": "2022-07-02T17:28:37.024334Z",
+ "id": "relationship--1fe9b625-6f79-44c2-ac39-70acc63868f5",
+ "created": "2022-07-02T19:59:12.750013Z",
+ "modified": "2022-07-02T19:59:12.750013Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--5460ed5f-dec4-4a99-8430-809244e2c236",
- "target_ref": "attack-pattern--d1f4502a-e10b-4854-a5d2-92a8400bb55f"
+ "source_ref": "attack-pattern--f59e1ae5-2275-4568-a5fe-d06d7ba9a2c9",
+ "target_ref": "attack-pattern--6dccbf81-1fb1-47c3-b6c5-4d1d6286be19"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--587caeb0-8e1e-48ed-a555-418ae8b436d1",
- "created": "2022-07-02T17:28:37.024406Z",
- "modified": "2022-07-02T17:28:37.024406Z",
+ "id": "relationship--0e9460d6-691d-4f98-a046-bf892f82a957",
+ "created": "2022-07-02T19:59:12.750087Z",
+ "modified": "2022-07-02T19:59:12.750087Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--4c41d3b8-b60c-428a-b728-24e58c506687",
- "target_ref": "attack-pattern--d1f4502a-e10b-4854-a5d2-92a8400bb55f"
+ "source_ref": "attack-pattern--4dd718fa-805c-44c9-a65b-25ac3414d433",
+ "target_ref": "attack-pattern--6dccbf81-1fb1-47c3-b6c5-4d1d6286be19"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--4f67d148-811a-4d4f-a932-418e203b988b",
- "created": "2022-07-02T17:28:37.024474Z",
- "modified": "2022-07-02T17:28:37.024474Z",
+ "id": "relationship--367da26e-d35a-4aa2-86d2-fe87b72b724d",
+ "created": "2022-07-02T19:59:12.75017Z",
+ "modified": "2022-07-02T19:59:12.75017Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--50034ce6-d21e-4320-8d8b-c5fdba371a8a",
- "target_ref": "attack-pattern--e4eec620-e076-447d-9d6c-2e63edf671da"
+ "source_ref": "attack-pattern--14565357-ef35-4f2c-b54b-e1010ed772ab",
+ "target_ref": "attack-pattern--1a85979f-226f-4f03-bd53-4bd81807bd7b"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--6aac7ced-9c38-488b-884f-afd05b5271ab",
- "created": "2022-07-02T17:28:37.024543Z",
- "modified": "2022-07-02T17:28:37.024543Z",
+ "id": "relationship--06a22e2e-19b2-4d4c-af0a-8498b82a2b48",
+ "created": "2022-07-02T19:59:12.750245Z",
+ "modified": "2022-07-02T19:59:12.750245Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--02b28a12-df83-4b45-8d7a-39498b54719b",
- "target_ref": "attack-pattern--e4eec620-e076-447d-9d6c-2e63edf671da"
+ "source_ref": "attack-pattern--cf798771-8d4d-4625-ae5a-113244b67c1f",
+ "target_ref": "attack-pattern--1a85979f-226f-4f03-bd53-4bd81807bd7b"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--730a112d-75ac-461c-82c4-150f2b4a7fa5",
- "created": "2022-07-02T17:28:37.024612Z",
- "modified": "2022-07-02T17:28:37.024612Z",
+ "id": "relationship--b9b54052-f207-45dd-88d1-fb00048e6f51",
+ "created": "2022-07-02T19:59:12.750321Z",
+ "modified": "2022-07-02T19:59:12.750321Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--055ffd5d-4aa8-4ce4-8b6b-e91872d4b77d",
- "target_ref": "attack-pattern--09c7c07b-108f-41a6-82e1-a5fff2b8182b"
+ "source_ref": "attack-pattern--98966f30-7ef7-4620-a9b1-20869084b669",
+ "target_ref": "attack-pattern--6565d00e-6281-4157-b050-3974e3c55616"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--8afe82df-9ec9-49e7-93d5-7d86e37e424e",
- "created": "2022-07-02T17:28:37.02468Z",
- "modified": "2022-07-02T17:28:37.02468Z",
+ "id": "relationship--d66ee555-abc0-46ce-8086-24aae3ac6916",
+ "created": "2022-07-02T19:59:12.750397Z",
+ "modified": "2022-07-02T19:59:12.750397Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--91a9dfee-6096-44b3-a266-9bbcf2ddb079",
- "target_ref": "attack-pattern--09c7c07b-108f-41a6-82e1-a5fff2b8182b"
+ "source_ref": "attack-pattern--afdce902-18af-40c1-955a-1355cbdd99d7",
+ "target_ref": "attack-pattern--6565d00e-6281-4157-b050-3974e3c55616"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--938a4b44-c067-4385-9637-db131728fd8c",
- "created": "2022-07-02T17:28:37.024749Z",
- "modified": "2022-07-02T17:28:37.024749Z",
+ "id": "relationship--9a49ce83-a049-4314-8483-539222063246",
+ "created": "2022-07-02T19:59:12.750471Z",
+ "modified": "2022-07-02T19:59:12.750471Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--2bd6c575-4b68-4623-bc01-6964c53476cc",
- "target_ref": "attack-pattern--09c7c07b-108f-41a6-82e1-a5fff2b8182b"
+ "source_ref": "attack-pattern--2c7bded2-3bf3-4c5b-8c70-958b3856dc7a",
+ "target_ref": "attack-pattern--6565d00e-6281-4157-b050-3974e3c55616"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--7ca7095e-f6d4-4812-83b5-b1c711f48fbb",
- "created": "2022-07-02T17:28:37.024818Z",
- "modified": "2022-07-02T17:28:37.024818Z",
+ "id": "relationship--a61bbf54-ae7d-4e65-a61d-c32fcd0c9e7a",
+ "created": "2022-07-02T19:59:12.750545Z",
+ "modified": "2022-07-02T19:59:12.750545Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--0361e3a0-398d-4cc5-a610-394919a8496a",
- "target_ref": "attack-pattern--09c7c07b-108f-41a6-82e1-a5fff2b8182b"
+ "source_ref": "attack-pattern--c753d5bf-9336-4115-8c8a-18d5a417b6a5",
+ "target_ref": "attack-pattern--6565d00e-6281-4157-b050-3974e3c55616"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--d5a129d8-b38f-4f43-ad8f-173f2b114ef7",
- "created": "2022-07-02T17:28:37.024888Z",
- "modified": "2022-07-02T17:28:37.024888Z",
+ "id": "relationship--5479c3ed-555e-4291-b0a7-64b9f97e8130",
+ "created": "2022-07-02T19:59:12.750619Z",
+ "modified": "2022-07-02T19:59:12.750619Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--05dc1204-4147-4a09-a017-2484ee5fdc6b",
- "target_ref": "attack-pattern--09c7c07b-108f-41a6-82e1-a5fff2b8182b"
+ "source_ref": "attack-pattern--33e2b7b3-b9d0-47d4-ab63-fcd15740a325",
+ "target_ref": "attack-pattern--6565d00e-6281-4157-b050-3974e3c55616"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--8d34c19c-cfc7-4855-9c4f-a7370513b1f6",
- "created": "2022-07-02T17:28:37.024956Z",
- "modified": "2022-07-02T17:28:37.024956Z",
+ "id": "relationship--e096acbd-8409-4540-8162-a5be690b369a",
+ "created": "2022-07-02T19:59:12.750695Z",
+ "modified": "2022-07-02T19:59:12.750695Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--962602ec-2602-4224-b6bd-413c2c8ec4bf",
- "target_ref": "attack-pattern--09c7c07b-108f-41a6-82e1-a5fff2b8182b"
+ "source_ref": "attack-pattern--ac315aea-b839-437d-8b28-4ae7c1cdeed8",
+ "target_ref": "attack-pattern--6565d00e-6281-4157-b050-3974e3c55616"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--c58d0428-1fef-47a9-81f9-76e604d7866b",
- "created": "2022-07-02T17:28:37.025025Z",
- "modified": "2022-07-02T17:28:37.025025Z",
+ "id": "relationship--e76ea0cb-28ff-4c9f-9818-2c055cde0421",
+ "created": "2022-07-02T19:59:12.750773Z",
+ "modified": "2022-07-02T19:59:12.750773Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--494544eb-fb55-41f6-82f2-c2a180ebd8b4",
- "target_ref": "attack-pattern--cb89181b-cb31-4902-ba50-930ca46b86fc"
+ "source_ref": "attack-pattern--a7cfa600-2359-4fdd-8c5f-d6efef64b498",
+ "target_ref": "attack-pattern--dee6a0f9-6e1c-40fb-b347-b0d181d37c32"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--f2ab8b67-e366-480e-b0bf-b401f28e19b2",
- "created": "2022-07-02T17:28:37.025094Z",
- "modified": "2022-07-02T17:28:37.025094Z",
+ "id": "relationship--d34afb15-b90c-490e-b7f3-fc22dabb91e9",
+ "created": "2022-07-02T19:59:12.750851Z",
+ "modified": "2022-07-02T19:59:12.750851Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--467c2c32-1353-4c04-b5cc-3707f88885eb",
- "target_ref": "attack-pattern--cb89181b-cb31-4902-ba50-930ca46b86fc"
+ "source_ref": "attack-pattern--7aa9d580-7c3e-4e10-ac50-4fd541c7b7f2",
+ "target_ref": "attack-pattern--dee6a0f9-6e1c-40fb-b347-b0d181d37c32"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--d0ebea8c-7d76-45de-a7f9-2d61750b3f04",
- "created": "2022-07-02T17:28:37.025162Z",
- "modified": "2022-07-02T17:28:37.025162Z",
+ "id": "relationship--ba4e3f23-5568-4f00-971e-4049569e6e11",
+ "created": "2022-07-02T19:59:12.75093Z",
+ "modified": "2022-07-02T19:59:12.75093Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--8342730a-496e-460b-9a2f-bad4316b43d7",
- "target_ref": "attack-pattern--cb89181b-cb31-4902-ba50-930ca46b86fc"
+ "source_ref": "attack-pattern--809f414f-c81e-448a-8e2b-14704a0b743a",
+ "target_ref": "attack-pattern--dee6a0f9-6e1c-40fb-b347-b0d181d37c32"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--8d5130c3-68c5-48f1-bd1c-237795f94693",
- "created": "2022-07-02T17:28:37.025236Z",
- "modified": "2022-07-02T17:28:37.025236Z",
+ "id": "relationship--bb6c0c2d-df2e-49bd-afd5-7b5536770bb7",
+ "created": "2022-07-02T19:59:12.751009Z",
+ "modified": "2022-07-02T19:59:12.751009Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--1360c84b-8b09-49e5-8950-9d8362008311",
- "target_ref": "attack-pattern--00b0e33d-257e-44e0-9195-0c0c3f290d2c"
+ "source_ref": "attack-pattern--71f9d8d7-d6c4-4815-a56a-7dfee6d18c30",
+ "target_ref": "attack-pattern--92b5c39b-f162-482d-8704-e109b453f35f"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--29657691-3e45-4708-8f26-4c9f33795bd3",
- "created": "2022-07-02T17:28:37.025305Z",
- "modified": "2022-07-02T17:28:37.025305Z",
+ "id": "relationship--40bc98e2-7130-4623-be16-514a05a4c374",
+ "created": "2022-07-02T19:59:12.751088Z",
+ "modified": "2022-07-02T19:59:12.751088Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--a3f80665-0ad7-4321-bcea-dfd1f45e8e4c",
- "target_ref": "attack-pattern--bceb35c5-c32f-48fd-b02d-69c1170a0565"
+ "source_ref": "attack-pattern--649f96b3-7163-4b98-9aa6-0276e2336371",
+ "target_ref": "attack-pattern--bc05d8a7-e306-4112-9826-75687e7cba5c"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--d2121220-e99a-4f58-b5fb-4593d5077216",
- "created": "2022-07-02T17:28:37.025374Z",
- "modified": "2022-07-02T17:28:37.025374Z",
+ "id": "relationship--b33881ef-90a4-48b9-8174-6321b3ff37dd",
+ "created": "2022-07-02T19:59:12.751163Z",
+ "modified": "2022-07-02T19:59:12.751163Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--709c2d40-c1c8-4a87-b63b-35968701d12c",
- "target_ref": "attack-pattern--bceb35c5-c32f-48fd-b02d-69c1170a0565"
+ "source_ref": "attack-pattern--539ad344-a6e3-4cff-aae8-bc592d7404a1",
+ "target_ref": "attack-pattern--bc05d8a7-e306-4112-9826-75687e7cba5c"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--eaa297b9-2aab-481d-a89a-055c0d21b8f1",
- "created": "2022-07-02T17:28:37.025443Z",
- "modified": "2022-07-02T17:28:37.025443Z",
+ "id": "relationship--436cd39b-eede-4a26-82cb-5038763bb129",
+ "created": "2022-07-02T19:59:12.751239Z",
+ "modified": "2022-07-02T19:59:12.751239Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--f0252e68-f05e-4284-b9da-1f406874c630",
- "target_ref": "attack-pattern--bceb35c5-c32f-48fd-b02d-69c1170a0565"
+ "source_ref": "attack-pattern--1b073cb4-f884-4e16-9fdf-df9fbf44840b",
+ "target_ref": "attack-pattern--bc05d8a7-e306-4112-9826-75687e7cba5c"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--f6cbea72-80e9-4bd9-9e47-e986eba95a02",
- "created": "2022-07-02T17:28:37.025513Z",
- "modified": "2022-07-02T17:28:37.025513Z",
+ "id": "relationship--a8ae8984-adc0-4f88-a940-bdc5caf92f9e",
+ "created": "2022-07-02T19:59:12.751316Z",
+ "modified": "2022-07-02T19:59:12.751316Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--33b83d49-01b3-452e-a68a-abd77118353c",
- "target_ref": "attack-pattern--4faa614b-8a0a-4e5e-8492-59d12b08df18"
+ "source_ref": "attack-pattern--dc7b3aae-7df9-405d-a530-3a753a776a9a",
+ "target_ref": "attack-pattern--4c396c44-aafa-4651-9478-9db90638238d"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--587176bb-1301-4c41-b0b4-97eae628125b",
- "created": "2022-07-02T17:28:37.025581Z",
- "modified": "2022-07-02T17:28:37.025581Z",
+ "id": "relationship--1c107402-40b1-4720-b6d6-841f64684a96",
+ "created": "2022-07-02T19:59:12.75139Z",
+ "modified": "2022-07-02T19:59:12.75139Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--b8caa5f9-fcf8-4ec4-a288-22c0e04db8ab",
- "target_ref": "attack-pattern--4faa614b-8a0a-4e5e-8492-59d12b08df18"
+ "source_ref": "attack-pattern--55a851b9-86a9-4d24-b361-78d22e942057",
+ "target_ref": "attack-pattern--4c396c44-aafa-4651-9478-9db90638238d"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--7043d4cf-29cb-477d-b9c3-e1f2b00ed32b",
- "created": "2022-07-02T17:28:37.02565Z",
- "modified": "2022-07-02T17:28:37.02565Z",
+ "id": "relationship--4cca1a3b-2121-4e0d-9cf7-22da94357f2a",
+ "created": "2022-07-02T19:59:12.751464Z",
+ "modified": "2022-07-02T19:59:12.751464Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--a9e19bbd-eceb-4167-a6e9-3de030befeff",
- "target_ref": "attack-pattern--2aeca1ac-da54-4744-a23e-c2b1641dac28"
+ "source_ref": "attack-pattern--226290e1-b4f4-4efc-97d9-66bb4b23ca75",
+ "target_ref": "attack-pattern--82052da3-7f68-471c-9991-f1e09eaf8cb2"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--6f857529-a76a-48fc-8f87-40b5fbb3d8b1",
- "created": "2022-07-02T17:28:37.025718Z",
- "modified": "2022-07-02T17:28:37.025718Z",
+ "id": "relationship--de9ca95a-598a-47b2-b188-f6580e4c3980",
+ "created": "2022-07-02T19:59:12.751539Z",
+ "modified": "2022-07-02T19:59:12.751539Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--e8cb072b-23ac-468f-b9c8-78a69e1f6be8",
- "target_ref": "attack-pattern--2aeca1ac-da54-4744-a23e-c2b1641dac28"
+ "source_ref": "attack-pattern--063e1fbb-d23c-404a-a9b0-bfb3bf2b9c8d",
+ "target_ref": "attack-pattern--82052da3-7f68-471c-9991-f1e09eaf8cb2"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--dd9de432-df86-48a1-ade5-4db6d0740781",
- "created": "2022-07-02T17:28:37.025787Z",
- "modified": "2022-07-02T17:28:37.025787Z",
+ "id": "relationship--d8bf935e-cac0-4384-ada9-63f8925b5823",
+ "created": "2022-07-02T19:59:12.751614Z",
+ "modified": "2022-07-02T19:59:12.751614Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--eb58a67d-72ef-4b62-8d0c-e14dcfc6032d",
- "target_ref": "attack-pattern--2aeca1ac-da54-4744-a23e-c2b1641dac28"
+ "source_ref": "attack-pattern--5927a58a-2416-4205-9000-e4a7824ade15",
+ "target_ref": "attack-pattern--82052da3-7f68-471c-9991-f1e09eaf8cb2"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--abc8e022-6d45-4440-8f0b-9e5828699097",
- "created": "2022-07-02T17:28:37.025856Z",
- "modified": "2022-07-02T17:28:37.025856Z",
+ "id": "relationship--be604ddd-4851-416c-b4c9-3c4f9e25803e",
+ "created": "2022-07-02T19:59:12.75169Z",
+ "modified": "2022-07-02T19:59:12.75169Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--37b3cf33-f0bf-40ed-9b97-0bb74ede8923",
- "target_ref": "attack-pattern--9fd0219a-66d7-49a1-ab9e-856ea5e25c98"
+ "source_ref": "attack-pattern--0d6d9eb1-1113-46a5-a518-ac21258eb513",
+ "target_ref": "attack-pattern--bbb40d99-27b8-4bea-b294-92a07a8121b1"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--0cf62ed5-6b1f-498d-a558-91154e4a8508",
- "created": "2022-07-02T17:28:37.025926Z",
- "modified": "2022-07-02T17:28:37.025926Z",
+ "id": "relationship--01347495-5a08-4fcd-9da6-c6de885760a6",
+ "created": "2022-07-02T19:59:12.751765Z",
+ "modified": "2022-07-02T19:59:12.751765Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--0aac6482-f7b2-4cd4-8661-ae692c84a188",
- "target_ref": "attack-pattern--2f2745b8-801a-41b5-b85a-ffba5caf53c4"
+ "source_ref": "attack-pattern--c6cfb4ba-463c-4bcc-a981-9b8db1114fd7",
+ "target_ref": "attack-pattern--2506b127-497f-4c10-80ee-6ccfebea2fda"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--67a54ea2-4e88-430a-a0a8-3449b83a6fe2",
- "created": "2022-07-02T17:28:37.025999Z",
- "modified": "2022-07-02T17:28:37.025999Z",
+ "id": "relationship--02704463-c268-49d4-9e02-bc664ce30e1a",
+ "created": "2022-07-02T19:59:12.751839Z",
+ "modified": "2022-07-02T19:59:12.751839Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--ff934521-e3f4-4f11-871c-8e7aa23574fe",
- "target_ref": "attack-pattern--2f2745b8-801a-41b5-b85a-ffba5caf53c4"
+ "source_ref": "attack-pattern--65eced1b-ac40-47db-a9ac-9b4fbfdf73ac",
+ "target_ref": "attack-pattern--2506b127-497f-4c10-80ee-6ccfebea2fda"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--aeeb4ff8-62cb-491e-acdf-b7b973a470de",
- "created": "2022-07-02T17:28:37.026068Z",
- "modified": "2022-07-02T17:28:37.026068Z",
+ "id": "relationship--a2d71b61-4a22-4158-9fe0-6216a3005b94",
+ "created": "2022-07-02T19:59:12.751913Z",
+ "modified": "2022-07-02T19:59:12.751913Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--08ee90a4-5d68-4c14-bd0a-583535d27b92",
- "target_ref": "attack-pattern--2f2745b8-801a-41b5-b85a-ffba5caf53c4"
+ "source_ref": "attack-pattern--471067d8-da62-4984-b4f6-e5e8f297babe",
+ "target_ref": "attack-pattern--2506b127-497f-4c10-80ee-6ccfebea2fda"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--0ef4cdcd-91f5-490c-ab5b-fd936661c803",
- "created": "2022-07-02T17:28:37.026136Z",
- "modified": "2022-07-02T17:28:37.026136Z",
+ "id": "relationship--b733ce71-9f73-414a-b92d-c3195feafe13",
+ "created": "2022-07-02T19:59:12.751985Z",
+ "modified": "2022-07-02T19:59:12.751985Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--429a7e7f-98f4-48e9-a5a0-a2a8d7038f4d",
- "target_ref": "attack-pattern--75e85269-638d-4f45-8d25-af320dcb016f"
+ "source_ref": "attack-pattern--90b784fc-b681-48ab-a15e-f9e38ff64f27",
+ "target_ref": "attack-pattern--8b1caa97-3fa6-4615-8646-30234d0399ce"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--6499c0aa-e954-4b27-9dee-4e6632a0bca2",
- "created": "2022-07-02T17:28:37.026205Z",
- "modified": "2022-07-02T17:28:37.026205Z",
+ "id": "relationship--1a84fdd2-2ed9-4c75-bce3-8b64187a6f7c",
+ "created": "2022-07-02T19:59:12.752061Z",
+ "modified": "2022-07-02T19:59:12.752061Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--c4b88244-71f7-4309-bae5-8f00976457a4",
- "target_ref": "attack-pattern--75e85269-638d-4f45-8d25-af320dcb016f"
+ "source_ref": "attack-pattern--0b98e731-1c93-49ef-9f07-0377be20ff34",
+ "target_ref": "attack-pattern--8b1caa97-3fa6-4615-8646-30234d0399ce"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--85b299df-8f4d-4e1c-95c0-521a36b2ecdd",
- "created": "2022-07-02T17:28:37.026274Z",
- "modified": "2022-07-02T17:28:37.026274Z",
+ "id": "relationship--64742552-a3dd-4a06-8884-dcd129646dbe",
+ "created": "2022-07-02T19:59:12.752136Z",
+ "modified": "2022-07-02T19:59:12.752136Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--233e4edf-3f30-456f-9875-2e0965434706",
- "target_ref": "attack-pattern--80cb8777-deb6-4071-8413-7e23f8dfb273"
+ "source_ref": "attack-pattern--0d5e2457-30e9-4934-8197-651dbc00dc82",
+ "target_ref": "attack-pattern--5f5ff744-b5d2-45c2-a45a-412c2d43cbdf"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--f4378ddc-7483-435b-98ce-bcdcdb45ec17",
- "created": "2022-07-02T17:28:37.026345Z",
- "modified": "2022-07-02T17:28:37.026345Z",
+ "id": "relationship--d8e2e61e-3caa-481c-b560-7a657ac08528",
+ "created": "2022-07-02T19:59:12.752212Z",
+ "modified": "2022-07-02T19:59:12.752212Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--b474bed9-be50-493e-a336-73adff0ec24d",
- "target_ref": "attack-pattern--5621af39-db87-4673-9840-9125cc4a17c4"
+ "source_ref": "attack-pattern--cd25a2d2-5102-4666-932c-5bd7de061504",
+ "target_ref": "attack-pattern--d1bed9f5-c57a-463b-a7e0-1217d5e91eeb"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--42373c21-a9e1-4b7b-96ce-d8890e092973",
- "created": "2022-07-02T17:28:37.026415Z",
- "modified": "2022-07-02T17:28:37.026415Z",
+ "id": "relationship--788aa98d-8858-4c4f-974b-f91578fd00eb",
+ "created": "2022-07-02T19:59:12.752289Z",
+ "modified": "2022-07-02T19:59:12.752289Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--429b3cc3-e187-450a-948e-49ef80c5b824",
- "target_ref": "attack-pattern--5621af39-db87-4673-9840-9125cc4a17c4"
+ "source_ref": "attack-pattern--20e97210-a216-42aa-9a31-da2961f5dfa7",
+ "target_ref": "attack-pattern--d1bed9f5-c57a-463b-a7e0-1217d5e91eeb"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--5f224ec1-73b3-4a87-bf36-0989c7dc3bd6",
- "created": "2022-07-02T17:28:37.026484Z",
- "modified": "2022-07-02T17:28:37.026484Z",
+ "id": "relationship--c4f5f409-9bd0-4883-b2e6-0807612c3d0b",
+ "created": "2022-07-02T19:59:12.752366Z",
+ "modified": "2022-07-02T19:59:12.752366Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--9c09e7a7-25f0-4d75-bab7-cf7d87dc6aff",
- "target_ref": "attack-pattern--5621af39-db87-4673-9840-9125cc4a17c4"
+ "source_ref": "attack-pattern--8409255c-b2a4-41c4-8a32-784dab41e289",
+ "target_ref": "attack-pattern--d1bed9f5-c57a-463b-a7e0-1217d5e91eeb"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--d5a8e541-cc9a-43f2-9d6d-86a31c5e794e",
- "created": "2022-07-02T17:28:37.026553Z",
- "modified": "2022-07-02T17:28:37.026553Z",
+ "id": "relationship--edd1fe3b-600b-427c-9e4d-6c8a1e9e328a",
+ "created": "2022-07-02T19:59:12.752441Z",
+ "modified": "2022-07-02T19:59:12.752441Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--cc032d4b-b84c-46f7-ba6f-6b04fdf20299",
- "target_ref": "attack-pattern--5621af39-db87-4673-9840-9125cc4a17c4"
+ "source_ref": "attack-pattern--a463f183-d98c-4bfb-ae1c-7614958be7be",
+ "target_ref": "attack-pattern--d1bed9f5-c57a-463b-a7e0-1217d5e91eeb"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--49e6de4d-64bd-4a94-903a-f81b173b6ba2",
- "created": "2022-07-02T17:28:37.026622Z",
- "modified": "2022-07-02T17:28:37.026622Z",
+ "id": "relationship--b2777be2-15ab-4732-aa7e-9ddbac1f85db",
+ "created": "2022-07-02T19:59:12.752544Z",
+ "modified": "2022-07-02T19:59:12.752544Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--e15ab7c3-84da-4b2b-89e6-600d89b41bb2",
- "target_ref": "attack-pattern--b6db16cc-bbe2-44fe-99b4-c074b3b9595f"
+ "source_ref": "attack-pattern--aa481717-27f3-4896-a28e-44cb68291a6f",
+ "target_ref": "attack-pattern--72e298d1-2ba8-47cb-839a-3a4c06a75de4"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--68f3d66e-5d0b-4f76-b802-c5a380138bfa",
- "created": "2022-07-02T17:28:37.02669Z",
- "modified": "2022-07-02T17:28:37.02669Z",
+ "id": "relationship--5c65bd19-7e1f-48ec-ba4e-15be100aa2ba",
+ "created": "2022-07-02T19:59:12.752699Z",
+ "modified": "2022-07-02T19:59:12.752699Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--7acde6e3-f824-4ba8-bb8d-ef8018935e3c",
- "target_ref": "attack-pattern--b6db16cc-bbe2-44fe-99b4-c074b3b9595f"
+ "source_ref": "attack-pattern--6a0c006b-9572-4983-8e5c-074cf837fc20",
+ "target_ref": "attack-pattern--72e298d1-2ba8-47cb-839a-3a4c06a75de4"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--e3488d27-4126-485c-bd22-ec8d8a6e02d3",
- "created": "2022-07-02T17:28:37.026758Z",
- "modified": "2022-07-02T17:28:37.026758Z",
+ "id": "relationship--d48ad4af-6e19-4943-b1fb-b677988c5ce3",
+ "created": "2022-07-02T19:59:12.752793Z",
+ "modified": "2022-07-02T19:59:12.752793Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--1f5bb3dc-8ad8-4e32-9ac5-d408197bb1b1",
- "target_ref": "attack-pattern--b6db16cc-bbe2-44fe-99b4-c074b3b9595f"
+ "source_ref": "attack-pattern--3d6c883e-34bb-4c1a-8784-6d3265683039",
+ "target_ref": "attack-pattern--72e298d1-2ba8-47cb-839a-3a4c06a75de4"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--ea9d4cac-e526-42d2-b482-d9c1afc6a7bf",
- "created": "2022-07-02T17:28:37.026827Z",
- "modified": "2022-07-02T17:28:37.026827Z",
+ "id": "relationship--96358892-060a-44ab-b15f-d6e8fc3739d2",
+ "created": "2022-07-02T19:59:12.752875Z",
+ "modified": "2022-07-02T19:59:12.752875Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--58368496-c7b3-443a-80a8-636157faa954",
- "target_ref": "attack-pattern--27bd786c-eb5e-4e88-9786-b4cea8789542"
+ "source_ref": "attack-pattern--0950f50e-8b4d-4c16-93ed-5e52562fc1a7",
+ "target_ref": "attack-pattern--a9ec183d-c4dc-4c17-8571-f6e9dbdc643f"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--3022930d-4c18-4ce8-93e5-f080193fca2d",
- "created": "2022-07-02T17:28:37.026896Z",
- "modified": "2022-07-02T17:28:37.026896Z",
+ "id": "relationship--3ea8b518-cf7a-4018-96ae-377d36b67728",
+ "created": "2022-07-02T19:59:12.752953Z",
+ "modified": "2022-07-02T19:59:12.752953Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--5d997782-dd27-4c59-a2e2-ba5220dc555e",
- "target_ref": "attack-pattern--27bd786c-eb5e-4e88-9786-b4cea8789542"
+ "source_ref": "attack-pattern--7c5fcef9-4dac-4231-8065-97b5af4a187c",
+ "target_ref": "attack-pattern--a9ec183d-c4dc-4c17-8571-f6e9dbdc643f"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--48d08bd2-04fa-4ed1-a206-23c6d59b73ff",
- "created": "2022-07-02T17:28:37.026965Z",
- "modified": "2022-07-02T17:28:37.026965Z",
+ "id": "relationship--83bfce9a-5a23-4e2f-86de-5321ec87bfed",
+ "created": "2022-07-02T19:59:12.753031Z",
+ "modified": "2022-07-02T19:59:12.753031Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--4a3f721a-82a7-43b6-9889-acacda9e7617",
- "target_ref": "attack-pattern--418a55bf-5c5e-4a90-8f10-a18fc80a2964"
+ "source_ref": "attack-pattern--7e2d4014-b049-4d8a-b902-2f08fd820ef8",
+ "target_ref": "attack-pattern--05792c90-5f5a-42e3-b7bf-b50284f7225e"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--f5a02c77-f51f-46d4-a515-dd02d28e91b9",
- "created": "2022-07-02T17:28:37.027034Z",
- "modified": "2022-07-02T17:28:37.027034Z",
+ "id": "relationship--88c5bc5b-bbfc-4538-b7e5-675897307630",
+ "created": "2022-07-02T19:59:12.753108Z",
+ "modified": "2022-07-02T19:59:12.753108Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--6bc7f315-d082-49de-b664-9fb7b9b1184c",
- "target_ref": "attack-pattern--418a55bf-5c5e-4a90-8f10-a18fc80a2964"
+ "source_ref": "attack-pattern--29f4ee70-1a5c-4fcd-b76b-07b7a99b356a",
+ "target_ref": "attack-pattern--05792c90-5f5a-42e3-b7bf-b50284f7225e"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--a9cb1f85-5c94-47e3-b6a4-ffd9d5a0ab79",
- "created": "2022-07-02T17:28:37.027102Z",
- "modified": "2022-07-02T17:28:37.027102Z",
+ "id": "relationship--dc40a578-1cb9-4f65-ad87-1b18fec5a26a",
+ "created": "2022-07-02T19:59:12.753185Z",
+ "modified": "2022-07-02T19:59:12.753185Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--9772c4cc-18fd-4563-8119-0d295f90b088",
- "target_ref": "attack-pattern--e4737241-ecc0-4ca1-a029-0ecd8b710862"
+ "source_ref": "attack-pattern--973f4b45-2d71-4d57-a1c4-58411b90fa5c",
+ "target_ref": "attack-pattern--a18dda94-01e8-413a-98c4-125f28091614"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--b1ffcd2c-358d-4e76-855b-7b63f706f3fc",
- "created": "2022-07-02T17:28:37.027172Z",
- "modified": "2022-07-02T17:28:37.027172Z",
+ "id": "relationship--0f18dacb-84c1-44a8-9d85-5d8a340de483",
+ "created": "2022-07-02T19:59:12.753263Z",
+ "modified": "2022-07-02T19:59:12.753263Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--a495269c-e4e5-4a1a-88f4-7554c43a8a56",
- "target_ref": "attack-pattern--e4737241-ecc0-4ca1-a029-0ecd8b710862"
+ "source_ref": "attack-pattern--3ab5afb2-e07d-4086-a010-89f351caf489",
+ "target_ref": "attack-pattern--a18dda94-01e8-413a-98c4-125f28091614"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--d8a019a4-8db4-422a-86c0-b7f56c866616",
- "created": "2022-07-02T17:28:37.027241Z",
- "modified": "2022-07-02T17:28:37.027241Z",
+ "id": "relationship--65a50d47-0e61-4095-85de-6506f71969f6",
+ "created": "2022-07-02T19:59:12.753374Z",
+ "modified": "2022-07-02T19:59:12.753374Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--692ddfe6-92da-4b8a-8c1e-7371c6eb0da5",
- "target_ref": "attack-pattern--e4737241-ecc0-4ca1-a029-0ecd8b710862"
+ "source_ref": "attack-pattern--883a64c8-1f75-49ee-9cba-8e042c284993",
+ "target_ref": "attack-pattern--a18dda94-01e8-413a-98c4-125f28091614"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--fbe75a4b-9b52-4c4a-88ec-a52f1a3e1362",
- "created": "2022-07-02T17:28:37.027309Z",
- "modified": "2022-07-02T17:28:37.027309Z",
+ "id": "relationship--ba28b76a-677e-4358-994d-09fff02d0be5",
+ "created": "2022-07-02T19:59:12.753566Z",
+ "modified": "2022-07-02T19:59:12.753566Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--d9e51370-28b8-47a2-bf15-9436aa2f8c1b",
- "target_ref": "attack-pattern--e4737241-ecc0-4ca1-a029-0ecd8b710862"
+ "source_ref": "attack-pattern--107e3180-34f6-4e11-a952-705df35b52f7",
+ "target_ref": "attack-pattern--a18dda94-01e8-413a-98c4-125f28091614"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--8818e2a9-bb27-4659-a0a7-c0f4253bec83",
- "created": "2022-07-02T17:28:37.027377Z",
- "modified": "2022-07-02T17:28:37.027377Z",
+ "id": "relationship--5801ed07-9292-4b4d-8386-1a96f393ae4d",
+ "created": "2022-07-02T19:59:12.753668Z",
+ "modified": "2022-07-02T19:59:12.753668Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--1397b0db-f680-4e24-a827-b0f25e18e56c",
- "target_ref": "attack-pattern--e4737241-ecc0-4ca1-a029-0ecd8b710862"
+ "source_ref": "attack-pattern--5b0e4950-7343-480f-b585-e6673e65d8c6",
+ "target_ref": "attack-pattern--a18dda94-01e8-413a-98c4-125f28091614"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--610daa2b-25e6-4990-9681-b37e5e2c6774",
- "created": "2022-07-02T17:28:37.027446Z",
- "modified": "2022-07-02T17:28:37.027446Z",
+ "id": "relationship--564deab7-0986-403f-aa75-a71217d2acd7",
+ "created": "2022-07-02T19:59:12.753757Z",
+ "modified": "2022-07-02T19:59:12.753757Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--f963fd61-4dc3-4267-8aad-ac14a6a3937d",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
+ "source_ref": "attack-pattern--9e6db77c-67e3-49ce-9cd2-15fdef67464f",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--ae8f316d-e39f-4d84-a58d-ce2dd1c588dc",
- "created": "2022-07-02T17:28:37.027515Z",
- "modified": "2022-07-02T17:28:37.027515Z",
+ "id": "relationship--35d17037-15b8-489d-8b4f-28147301535a",
+ "created": "2022-07-02T19:59:12.753838Z",
+ "modified": "2022-07-02T19:59:12.753838Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--b410c8af-d88e-483e-bf89-594d70de8f11",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
+ "source_ref": "attack-pattern--3ce95024-49f8-4fa3-b333-8819ef562fa8",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--0fe11334-4de9-4904-9841-50038fc28883",
- "created": "2022-07-02T17:28:37.027591Z",
- "modified": "2022-07-02T17:28:37.027591Z",
+ "id": "relationship--ad859dbe-9bc0-4f8a-8174-38f290412c56",
+ "created": "2022-07-02T19:59:12.753919Z",
+ "modified": "2022-07-02T19:59:12.753919Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--6e237bc1-7a16-49c4-ad7a-4d3849e26109",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
+ "source_ref": "attack-pattern--6743a7f5-1cbd-470a-afcc-bbd48afdcfc0",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--13c57e50-5291-419f-a4f3-33f21a30ec86",
- "created": "2022-07-02T17:28:37.02766Z",
- "modified": "2022-07-02T17:28:37.02766Z",
+ "id": "relationship--48c1c482-aa1b-4ebd-9a06-f5b7b3341bae",
+ "created": "2022-07-02T19:59:12.753996Z",
+ "modified": "2022-07-02T19:59:12.753996Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--be9355e4-570e-4252-8a1a-8f517f0487b8",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
+ "source_ref": "attack-pattern--7c5ee3f1-be04-4a22-a9ee-b0474b78df40",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--439ad1ba-8209-445e-956a-08572e2c2c6b",
- "created": "2022-07-02T17:28:37.027729Z",
- "modified": "2022-07-02T17:28:37.027729Z",
+ "id": "relationship--d17a1df5-e3e1-4436-86ec-bdf158c03317",
+ "created": "2022-07-02T19:59:12.754074Z",
+ "modified": "2022-07-02T19:59:12.754074Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--06e0d30d-fddb-4d25-842e-622d8911f444",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
+ "source_ref": "attack-pattern--710c216a-b1f4-409f-ad57-3c57fa5bad9b",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--d5eeef10-2feb-4b53-92d5-10063cc7edd0",
- "created": "2022-07-02T17:28:37.027801Z",
- "modified": "2022-07-02T17:28:37.027801Z",
+ "id": "relationship--b3e9ba68-6e98-4703-af2f-f76bff5ae91e",
+ "created": "2022-07-02T19:59:12.754183Z",
+ "modified": "2022-07-02T19:59:12.754183Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--19641024-86e4-435e-8f10-6f6fcac96da9",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
+ "source_ref": "attack-pattern--22aa8f48-20f8-4b96-bd44-2ae1b1621447",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--bcdb111d-6ec8-4607-ae1f-5753493e3cb3",
- "created": "2022-07-02T17:28:37.027869Z",
- "modified": "2022-07-02T17:28:37.027869Z",
+ "id": "relationship--33fcfcb5-4b28-4cde-974b-e57832aac89b",
+ "created": "2022-07-02T19:59:12.754261Z",
+ "modified": "2022-07-02T19:59:12.754261Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--8c2967be-eca2-4a8e-948c-b94e0ca8e436",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
+ "source_ref": "attack-pattern--41b86953-289e-4960-87a5-45549ce47a5e",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--275aaa0b-b2bd-4ebf-bc68-9d46090ccfe8",
- "created": "2022-07-02T17:28:37.027961Z",
- "modified": "2022-07-02T17:28:37.027961Z",
+ "id": "relationship--a0300cf6-6307-411f-b911-da7c7f2c7741",
+ "created": "2022-07-02T19:59:12.754339Z",
+ "modified": "2022-07-02T19:59:12.754339Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--758bf258-2fad-4905-b920-aa3a1ae3fe0e",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
+ "source_ref": "attack-pattern--a8cbd92a-bf04-4f6c-85d2-2d8802d3905e",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--96eb0cc5-8863-488f-85b8-13a6a5ca7e2b",
- "created": "2022-07-02T17:28:37.028034Z",
- "modified": "2022-07-02T17:28:37.028034Z",
+ "id": "relationship--e15091ce-4f1f-4a09-81b9-1da13d4ccba8",
+ "created": "2022-07-02T19:59:12.754417Z",
+ "modified": "2022-07-02T19:59:12.754417Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--38ac5a3d-12b5-46e5-9875-00514da8587a",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
+ "source_ref": "attack-pattern--9a82c606-3876-4821-94a2-25aee12190d4",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--00c4c6a7-3ff8-4763-82b5-a4f34bd27178",
- "created": "2022-07-02T17:28:37.028102Z",
- "modified": "2022-07-02T17:28:37.028102Z",
+ "id": "relationship--16222372-7996-4cfe-8976-f99bf2753333",
+ "created": "2022-07-02T19:59:12.754494Z",
+ "modified": "2022-07-02T19:59:12.754494Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--0caea8dd-90d8-4652-97cb-261c62065cf5",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
+ "source_ref": "attack-pattern--4c1c82a2-472b-4b47-8c5e-21d2bfee7d2e",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--d3818506-a1ec-46bc-831f-333ed0e1c1c7",
- "created": "2022-07-02T17:28:37.028172Z",
- "modified": "2022-07-02T17:28:37.028172Z",
+ "id": "relationship--dc039675-1b8c-4581-a9f3-9d834092b339",
+ "created": "2022-07-02T19:59:12.754569Z",
+ "modified": "2022-07-02T19:59:12.754569Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--beefe7f3-62e4-4422-9c8a-a8b6da01f0a3",
- "target_ref": "attack-pattern--c236acce-da3a-44b6-ab3a-24268c897c0e"
+ "source_ref": "attack-pattern--07425155-0f00-47cd-8e61-01da0fd19388",
+ "target_ref": "attack-pattern--3c2e9e26-3af7-44f8-b046-694d9efbcd14"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--40925abf-04b2-44c2-bc58-d4df74c79fde",
- "created": "2022-07-02T17:28:37.02824Z",
- "modified": "2022-07-02T17:28:37.02824Z",
+ "id": "relationship--467da11a-017f-4b85-95ae-be37ceedc7b6",
+ "created": "2022-07-02T19:59:12.754646Z",
+ "modified": "2022-07-02T19:59:12.754646Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--0fc791e6-cc20-4280-9a53-251d88b940c5",
- "target_ref": "attack-pattern--c236acce-da3a-44b6-ab3a-24268c897c0e"
+ "source_ref": "attack-pattern--38ceb33f-7654-48dd-ac72-d0d596c2123b",
+ "target_ref": "attack-pattern--3c2e9e26-3af7-44f8-b046-694d9efbcd14"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--ef700340-f9ca-4e34-869a-05b73e3c2bce",
- "created": "2022-07-02T17:28:37.028309Z",
- "modified": "2022-07-02T17:28:37.028309Z",
+ "id": "relationship--54b98139-e0b0-4ece-868a-f7b256a84efc",
+ "created": "2022-07-02T19:59:12.754723Z",
+ "modified": "2022-07-02T19:59:12.754723Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--b129dcda-0956-4c1b-a856-02f5f03cf86e",
- "target_ref": "attack-pattern--c236acce-da3a-44b6-ab3a-24268c897c0e"
+ "source_ref": "attack-pattern--d4254a49-6d3a-46cc-9b41-e56a1c0ea8f6",
+ "target_ref": "attack-pattern--3c2e9e26-3af7-44f8-b046-694d9efbcd14"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--babe3471-e21b-49f8-b75a-c60873287e78",
- "created": "2022-07-02T17:28:37.028381Z",
- "modified": "2022-07-02T17:28:37.028381Z",
+ "id": "relationship--6b35c101-8b66-4c5e-b638-939c4ce3c676",
+ "created": "2022-07-02T19:59:12.754798Z",
+ "modified": "2022-07-02T19:59:12.754798Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--d6d1b5a1-b4b2-4743-913a-ae241a3ffab4",
- "target_ref": "attack-pattern--c236acce-da3a-44b6-ab3a-24268c897c0e"
+ "source_ref": "attack-pattern--13e7f270-5796-40dd-b5b5-f36d84beef48",
+ "target_ref": "attack-pattern--3c2e9e26-3af7-44f8-b046-694d9efbcd14"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--25b36eee-061c-47b9-9007-fe9d47bf7d7f",
- "created": "2022-07-02T17:28:37.028451Z",
- "modified": "2022-07-02T17:28:37.028451Z",
+ "id": "relationship--1ac8b38b-2bc0-4447-8fe0-9d4233fdb69c",
+ "created": "2022-07-02T19:59:12.754874Z",
+ "modified": "2022-07-02T19:59:12.754874Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--6edfcca7-7816-4f40-b22b-88567ca6a84e",
- "target_ref": "attack-pattern--c236acce-da3a-44b6-ab3a-24268c897c0e"
+ "source_ref": "attack-pattern--aefa40c5-77b1-4716-b1c4-2f45bfa68813",
+ "target_ref": "attack-pattern--3c2e9e26-3af7-44f8-b046-694d9efbcd14"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--cf7aa95d-d732-41a5-b0ef-8205b1690696",
- "created": "2022-07-02T17:28:37.028521Z",
- "modified": "2022-07-02T17:28:37.028521Z",
+ "id": "relationship--4bf5f0e8-c7ce-46ad-9732-8635dd5571d7",
+ "created": "2022-07-02T19:59:12.754951Z",
+ "modified": "2022-07-02T19:59:12.754951Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--e88bb789-d3a3-48ce-9861-d1b486cb86d1",
- "target_ref": "attack-pattern--b7a97f05-92a6-434d-922b-9be6f49225c7"
+ "source_ref": "attack-pattern--0c87b14d-385e-44f7-a180-ecb389949bb4",
+ "target_ref": "attack-pattern--6632ab1a-e798-45f7-8703-e09c110f11ea"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--a59f901c-d475-48f0-b6c8-15350aa9e5a3",
- "created": "2022-07-02T17:28:37.028591Z",
- "modified": "2022-07-02T17:28:37.028591Z",
+ "id": "relationship--b1116d3b-722e-4413-bad5-33d5d876b52d",
+ "created": "2022-07-02T19:59:12.755029Z",
+ "modified": "2022-07-02T19:59:12.755029Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--d0cadcb4-3f75-43cf-9124-86e7caf7ee45",
- "target_ref": "attack-pattern--b7a97f05-92a6-434d-922b-9be6f49225c7"
+ "source_ref": "attack-pattern--dce18434-811e-4284-9e14-a7a1bac3fc23",
+ "target_ref": "attack-pattern--6632ab1a-e798-45f7-8703-e09c110f11ea"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--85613672-8f04-479b-8d73-a0034a910968",
- "created": "2022-07-02T17:28:37.02866Z",
- "modified": "2022-07-02T17:28:37.02866Z",
+ "id": "relationship--ac006c4f-4fba-4351-9fe7-c3b21ca6b803",
+ "created": "2022-07-02T19:59:12.755105Z",
+ "modified": "2022-07-02T19:59:12.755105Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--dee53229-382c-48ab-bad6-1e53ab0c24e4",
- "target_ref": "attack-pattern--ab2961c1-e1bc-4b0d-aae1-7ba73ced39ba"
+ "source_ref": "attack-pattern--aa0a3435-a9b6-4b5e-9874-0aa4a4a828d0",
+ "target_ref": "attack-pattern--bde29c42-3bce-4ba4-b09a-c2d6d685a5a0"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--3f0fc955-329c-4b4a-80d3-8446bb65e418",
- "created": "2022-07-02T17:28:37.028728Z",
- "modified": "2022-07-02T17:28:37.028728Z",
+ "id": "relationship--56c31ed4-3a85-4340-a358-8ad888e7cd21",
+ "created": "2022-07-02T19:59:12.75518Z",
+ "modified": "2022-07-02T19:59:12.75518Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--9d00ac60-7376-4db3-b5d4-43c8864a5b06",
- "target_ref": "attack-pattern--ab2961c1-e1bc-4b0d-aae1-7ba73ced39ba"
+ "source_ref": "attack-pattern--49b98725-5779-44e4-afd0-2602525a9f63",
+ "target_ref": "attack-pattern--bde29c42-3bce-4ba4-b09a-c2d6d685a5a0"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--61456ae3-46ef-4dec-91e3-61940a76fbda",
- "created": "2022-07-02T17:28:37.028797Z",
- "modified": "2022-07-02T17:28:37.028797Z",
+ "id": "relationship--75602557-a481-4701-a284-e7116b1740e3",
+ "created": "2022-07-02T19:59:12.755255Z",
+ "modified": "2022-07-02T19:59:12.755255Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--d6094ec0-284e-458d-9b26-ff22b5f1f09c",
- "target_ref": "attack-pattern--ab2961c1-e1bc-4b0d-aae1-7ba73ced39ba"
+ "source_ref": "attack-pattern--428ae731-7efc-4a69-9da4-a7399e76e3ee",
+ "target_ref": "attack-pattern--bde29c42-3bce-4ba4-b09a-c2d6d685a5a0"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--18e4e92b-8149-4551-8625-383f84122d73",
- "created": "2022-07-02T17:28:37.028865Z",
- "modified": "2022-07-02T17:28:37.028865Z",
+ "id": "relationship--70dce1b3-9b58-4b2e-8fd2-1b13acd91599",
+ "created": "2022-07-02T19:59:12.75533Z",
+ "modified": "2022-07-02T19:59:12.75533Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--0b7d2ef1-9719-410e-9ae3-10c646709317",
- "target_ref": "attack-pattern--0c3753ba-ec86-4186-97c8-242aa9d53b0f"
+ "source_ref": "attack-pattern--6a6e6893-a55f-4437-befd-e3cf4af8fa96",
+ "target_ref": "attack-pattern--47939552-d779-467a-b393-92d25b0f9561"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--f1693acb-1267-4374-a871-9f9719eba104",
- "created": "2022-07-02T17:28:37.028934Z",
- "modified": "2022-07-02T17:28:37.028934Z",
+ "id": "relationship--0d5dbc2f-b39c-4447-89f4-75eb0088b0dd",
+ "created": "2022-07-02T19:59:12.755405Z",
+ "modified": "2022-07-02T19:59:12.755405Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--8d9f0257-a14c-4397-92e5-0ee58ab9ece2",
- "target_ref": "attack-pattern--0c3753ba-ec86-4186-97c8-242aa9d53b0f"
+ "source_ref": "attack-pattern--99be4349-8c12-4f07-aef1-22feb299c85b",
+ "target_ref": "attack-pattern--47939552-d779-467a-b393-92d25b0f9561"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--7d02aeda-311c-4df8-8966-f6ebc4458f43",
- "created": "2022-07-02T17:28:37.029001Z",
- "modified": "2022-07-02T17:28:37.029001Z",
+ "id": "relationship--bf5c8ac0-b62d-4559-89de-97a8c91d81b8",
+ "created": "2022-07-02T19:59:12.755492Z",
+ "modified": "2022-07-02T19:59:12.755492Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--9b2e19bc-c4ef-4ce5-9e67-55be58b13579",
- "target_ref": "attack-pattern--0c3753ba-ec86-4186-97c8-242aa9d53b0f"
+ "source_ref": "attack-pattern--501987ea-c8a7-494e-a250-f5f25314959c",
+ "target_ref": "attack-pattern--47939552-d779-467a-b393-92d25b0f9561"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--380fd7f3-7dc9-44da-b442-a0e08fa0dd70",
- "created": "2022-07-02T17:28:37.029069Z",
- "modified": "2022-07-02T17:28:37.029069Z",
+ "id": "relationship--254bde47-12c5-4d70-9c43-7b6ca76f7c1c",
+ "created": "2022-07-02T19:59:12.755656Z",
+ "modified": "2022-07-02T19:59:12.755656Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--d7644818-db53-4599-aacb-8d8957496406",
- "target_ref": "attack-pattern--0c3753ba-ec86-4186-97c8-242aa9d53b0f"
+ "source_ref": "attack-pattern--a029c72f-ec8a-4c9e-a5b6-25cd78f37cec",
+ "target_ref": "attack-pattern--47939552-d779-467a-b393-92d25b0f9561"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--ad6a239a-e1b6-47b0-86af-7c757dc07fb5",
- "created": "2022-07-02T17:28:37.029138Z",
- "modified": "2022-07-02T17:28:37.029138Z",
+ "id": "relationship--acc4bfdd-841b-455a-a995-8d6774c6f5d9",
+ "created": "2022-07-02T19:59:12.755742Z",
+ "modified": "2022-07-02T19:59:12.755742Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--2da637f8-4277-4a95-8dc4-c17a92be1281",
- "target_ref": "attack-pattern--0c3753ba-ec86-4186-97c8-242aa9d53b0f"
+ "source_ref": "attack-pattern--dd6a5e38-a8cd-48a7-9f76-c320cb8305b7",
+ "target_ref": "attack-pattern--47939552-d779-467a-b393-92d25b0f9561"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--05824ce3-632b-48dd-a485-d18ae23702b3",
- "created": "2022-07-02T17:28:37.029207Z",
- "modified": "2022-07-02T17:28:37.029207Z",
+ "id": "relationship--35aea144-f738-4426-8d92-90bf082cea6a",
+ "created": "2022-07-02T19:59:12.755851Z",
+ "modified": "2022-07-02T19:59:12.755851Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--f8b62817-d507-4c49-a766-00057ef21734",
- "target_ref": "attack-pattern--cbf66a9a-6f05-4508-9ab9-c0f6a2ecdcc6"
+ "source_ref": "attack-pattern--35486a04-35f6-4737-a554-7465e4d842ff",
+ "target_ref": "attack-pattern--074dec50-3fd1-4427-81cc-6d42c4774a53"
},
{
"type": "relationship",
"spec_version": "2.1",
- "id": "relationship--c60fa99a-da28-4ee6-8ca9-20a804dbabe6",
- "created": "2022-07-02T17:28:37.029276Z",
- "modified": "2022-07-02T17:28:37.029276Z",
+ "id": "relationship--104158c6-aa79-49db-9155-f765ce5f9566",
+ "created": "2022-07-02T19:59:12.755934Z",
+ "modified": "2022-07-02T19:59:12.755934Z",
"relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--38a623d7-b925-49be-ac03-cae2586cea18",
- "target_ref": "attack-pattern--cbf66a9a-6f05-4508-9ab9-c0f6a2ecdcc6"
+ "source_ref": "attack-pattern--95eff1c5-0c9e-460e-9078-f45922ee4ee3",
+ "target_ref": "attack-pattern--074dec50-3fd1-4427-81cc-6d42c4774a53"
},
{
"type": "x-mitre-matrix",
"spec_version": "2.1",
- "id": "x-mitre-matrix--640228b8-a3b5-43b5-bbb7-66a89e34e38c",
- "created": "2022-07-02T17:28:37.029365Z",
- "modified": "2022-07-02T17:28:37.029365Z",
+ "id": "x-mitre-matrix--70636dcb-00da-4dfd-aecc-74d52bdc74e0",
+ "created": "2022-07-02T19:59:12.756031Z",
+ "modified": "2022-07-02T19:59:12.756031Z",
"name": "DISARM Framework",
"description": "DISARM is a framework designed for describing and understanding disinformation incidents.",
"tactic_refs": [
- "x-mitre-tactic--c4ac8ab7-ea56-43fe-8f26-83ee065d078e",
- "x-mitre-tactic--e34df713-d1f5-4a10-bb0a-0a1ada573b51",
- "x-mitre-tactic--51bb4e10-02fc-471f-9478-0cce0e4cb958",
- "x-mitre-tactic--3552f239-dd03-4e44-b3a5-d1a5ab04b36a",
- "x-mitre-tactic--04cbb20f-af5f-4dba-b98b-216fea9d9e85",
- "x-mitre-tactic--3d3dea08-0512-45af-8c70-c3ee8e20ecd1",
- "x-mitre-tactic--18b0a137-fbc8-4351-b84e-18090ca8ccb8",
- "x-mitre-tactic--b63b9b6f-0178-4275-a717-634caf904c0a",
- "x-mitre-tactic--43c9e386-bd22-4d32-8b41-44b89d8257ef",
- "x-mitre-tactic--7003dd30-2fd8-4da6-be27-d13210a570ec",
- "x-mitre-tactic--98feb296-62c7-4e8a-bca7-a00aab59fc6e",
- "x-mitre-tactic--39b5a167-e580-4f91-9139-b329c0a47632",
- "x-mitre-tactic--bfa7fd1d-ac3f-4f1f-a2aa-ae3819cc0fdc",
- "x-mitre-tactic--63348954-e476-45d3-9a07-9bba81316a75",
- "x-mitre-tactic--5246f92a-de17-4038-a557-8420ff53200d",
- "x-mitre-tactic--25df641e-05a4-47d2-b32e-9b92302b7298"
+ "x-mitre-tactic--5d65f4a0-b48a-4c8b-b2d6-a7bba81d1d36",
+ "x-mitre-tactic--b2b13cd3-c0da-4cc1-bbab-a68211de88e1",
+ "x-mitre-tactic--3ad9f88d-278c-461e-966a-102ec22a2585",
+ "x-mitre-tactic--1668c1d4-98fb-4bc1-b801-7e7359f4c59d",
+ "x-mitre-tactic--e61c944e-9445-4715-b6d1-a730f0327c35",
+ "x-mitre-tactic--deec33a7-21f9-4eea-adff-1c4df2d4cace",
+ "x-mitre-tactic--96fb9f2b-c2bb-44d3-9613-fc3fa46182e7",
+ "x-mitre-tactic--73e754e4-10ee-49e4-9e56-7805b5be39c5",
+ "x-mitre-tactic--bcf16e08-ac6e-420a-88eb-7b0c9558e6d0",
+ "x-mitre-tactic--ed407f47-6d8e-4ccf-8572-b423a4153747",
+ "x-mitre-tactic--103f5cc2-a673-43a8-b497-4ba1d8be65bc",
+ "x-mitre-tactic--f43e51ee-3870-4daa-95e0-14cf49ddaca9",
+ "x-mitre-tactic--44343de0-dba6-4147-b6fd-cf5e92afe84b",
+ "x-mitre-tactic--5a30fcc1-fdd1-4472-b2bd-e4a0e64800a5",
+ "x-mitre-tactic--83c9a938-8f0d-48ef-9ed8-e1250c894805",
+ "x-mitre-tactic--16ae43af-4f68-4e98-baac-61561eb5e3f4"
],
"external_references": [
{
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--91db7925-085a-4a77-97ca-d95ae0e1ebf2.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--01643bc5-725d-4764-a19b-2bb004359165.json
similarity index 59%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--91db7925-085a-4a77-97ca-d95ae0e1ebf2.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--01643bc5-725d-4764-a19b-2bb004359165.json
index 2cf4b86..d61d16d 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--91db7925-085a-4a77-97ca-d95ae0e1ebf2.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--01643bc5-725d-4764-a19b-2bb004359165.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--27f94c03-7028-4d50-bd6d-2fda184d7f66",
+ "id": "bundle--780bb150-7915-4730-8030-d47484f40929",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--91db7925-085a-4a77-97ca-d95ae0e1ebf2",
- "created_by_ref": "identity--f5b9130c-f997-45f7-9f92-6bc12a21e69b",
- "created": "2022-07-02T17:28:36.944322Z",
- "modified": "2022-07-02T17:28:36.944322Z",
+ "id": "attack-pattern--01643bc5-725d-4764-a19b-2bb004359165",
+ "created_by_ref": "identity--09650018-a5d0-4735-85b3-5339986d0d48",
+ "created": "2022-07-02T19:59:12.630712Z",
+ "modified": "2022-07-02T19:59:12.630712Z",
"name": "Use fake experts",
- "description": "TA08",
+ "description": "Use the fake experts that were set up during Establish Legitimacy. Pseudo-experts are disposable assets that often appear once and then disappear. Give \"credility\" to misinformation. Take advantage of credential bias",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--994a2ae2-512d-48d7-a533-c500cba6d3a5"
+ "marking-definition--77fae784-a245-4fbc-a20e-5d81073ddd34"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a921ea75-6d2f-4c29-a2ab-2710e554af59.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--01ca6965-45eb-49e0-85c3-64092e2fc7cf.json
similarity index 63%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--a921ea75-6d2f-4c29-a2ab-2710e554af59.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--01ca6965-45eb-49e0-85c3-64092e2fc7cf.json
index 404ded2..c86dc94 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a921ea75-6d2f-4c29-a2ab-2710e554af59.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--01ca6965-45eb-49e0-85c3-64092e2fc7cf.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--84012216-e7cb-4afd-beba-9b110127cab6",
+ "id": "bundle--a23a6fb2-4f53-457c-b689-92f55fa5ce50",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a921ea75-6d2f-4c29-a2ab-2710e554af59",
- "created_by_ref": "identity--2cf13eaa-affd-4359-8354-b65f97ddb14e",
- "created": "2022-07-02T17:28:36.949386Z",
- "modified": "2022-07-02T17:28:36.949386Z",
+ "id": "attack-pattern--01ca6965-45eb-49e0-85c3-64092e2fc7cf",
+ "created_by_ref": "identity--96689995-f346-45dd-b3e3-74d7709ce2e2",
+ "created": "2022-07-02T19:59:12.635921Z",
+ "modified": "2022-07-02T19:59:12.635921Z",
"name": "Inauthentic Sites Amplify News and Narratives",
- "description": "TA17",
+ "description": "Inauthentic sites circulate cross-post stories and amplify narratives. Often these sites have no masthead, bylines or attribution.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--9c5c84db-8553-4334-8ba6-54b93b8fcd1e"
+ "marking-definition--a6ea8e2e-a42e-4604-8cca-2501fc436c9e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--02b352fc-fc4c-4f94-b2b7-6c33ff550ab4.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--02b352fc-fc4c-4f94-b2b7-6c33ff550ab4.json
deleted file mode 100644
index 0524377..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--02b352fc-fc4c-4f94-b2b7-6c33ff550ab4.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--6e400867-e2cd-474d-bafc-1e592bf338ee",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--02b352fc-fc4c-4f94-b2b7-6c33ff550ab4",
- "created_by_ref": "identity--d9bd81bd-84b2-41b1-b60f-78beb6882892",
- "created": "2022-07-02T17:28:36.999913Z",
- "modified": "2022-07-02T17:28:36.999913Z",
- "name": "Direct Users to Alternative Platforms",
- "description": "TA17",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "maximize-exposure"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0122.md",
- "external_id": "T0122"
- }
- ],
- "object_marking_refs": [
- "marking-definition--c21e772c-2cd6-4091-b5b3-afdcd1bf5595"
- ],
- "x_mitre_is_subtechnique": false,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--203756a5-ac3d-4a82-a096-25d01609571b.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--02b93bbb-3137-4ffe-8644-599e9a3bec76.json
similarity index 50%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--203756a5-ac3d-4a82-a096-25d01609571b.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--02b93bbb-3137-4ffe-8644-599e9a3bec76.json
index a09bc75..f143a4a 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--203756a5-ac3d-4a82-a096-25d01609571b.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--02b93bbb-3137-4ffe-8644-599e9a3bec76.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--2bf353c7-6fe1-422d-95bf-9da1b9314f47",
+ "id": "bundle--6f5bd173-8163-4326-b713-84abb11b52a0",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--203756a5-ac3d-4a82-a096-25d01609571b",
- "created_by_ref": "identity--5490fecd-9a34-4016-861d-2a0bc4483486",
- "created": "2022-07-02T17:28:36.965875Z",
- "modified": "2022-07-02T17:28:36.965875Z",
+ "id": "attack-pattern--02b93bbb-3137-4ffe-8644-599e9a3bec76",
+ "created_by_ref": "identity--38991d54-70c6-46dc-8440-769b6b53d5cc",
+ "created": "2022-07-02T19:59:12.652098Z",
+ "modified": "2022-07-02T19:59:12.652098Z",
"name": "Develop AI-Generated Text",
- "description": "TA06",
+ "description": "AI-generated texts refers to synthetic text composed by computers using text-generating AI technology. Autonomous generation refers to content created by a bot without human input, also known as bot-created content generation. Autonomous generation represents the next step in automation after language generation and may lead to automated journalism. An influence operation may use read fakes or autonomous generation to quickly develop and distribute content to the target audience.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--6575f8b2-caaf-4d2c-a43f-4a52eaac72a7"
+ "marking-definition--4c039358-d5cf-42c1-8a02-df8e684133a9"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c800d67d-07dd-4e61-8b9f-0ebd477c9afb.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0388aa19-891a-4849-87c0-ec074291bb94.json
similarity index 50%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--c800d67d-07dd-4e61-8b9f-0ebd477c9afb.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--0388aa19-891a-4849-87c0-ec074291bb94.json
index 4f75edb..4703c4a 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c800d67d-07dd-4e61-8b9f-0ebd477c9afb.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0388aa19-891a-4849-87c0-ec074291bb94.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--41194145-18a0-4bbd-a120-074c615b8033",
+ "id": "bundle--d3ab6a3d-ccbf-423c-b159-da4ac34e2033",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c800d67d-07dd-4e61-8b9f-0ebd477c9afb",
- "created_by_ref": "identity--a41714c1-45b0-4e82-b3a5-9691a7d6254b",
- "created": "2022-07-02T17:28:36.946243Z",
- "modified": "2022-07-02T17:28:36.946243Z",
+ "id": "attack-pattern--0388aa19-891a-4849-87c0-ec074291bb94",
+ "created_by_ref": "identity--cb1f3576-d500-4171-a245-d130ee1fc562",
+ "created": "2022-07-02T19:59:12.63269Z",
+ "modified": "2022-07-02T19:59:12.63269Z",
"name": "Threaten to Dox",
- "description": "TA18",
+ "description": "Doxing refers to online harassment in which individuals publicly release private information about another individual, including names, addresses, employment information, pictures, family members, and other sensitive information. An influence operation may dox its opposition to encourage individuals aligned with operation narratives to harass the doxed individuals themselves or otherwise discourage the doxed individuals from posting or proliferating conflicting content. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--f20dd9d4-ba3c-42b8-979d-eb8cbaab3b73"
+ "marking-definition--93e3de6b-997a-4e47-a293-8f72a1427a0c"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0ce3479d-da57-451a-9f9d-327bef42eb77.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--040a03ef-81da-47f1-a2ab-f9ebf7f08148.json
similarity index 58%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--0ce3479d-da57-451a-9f9d-327bef42eb77.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--040a03ef-81da-47f1-a2ab-f9ebf7f08148.json
index d2ecc31..babe4ee 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0ce3479d-da57-451a-9f9d-327bef42eb77.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--040a03ef-81da-47f1-a2ab-f9ebf7f08148.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--c7050db6-659f-49bc-b8f1-4ddf2aa4fd7d",
+ "id": "bundle--44255588-d661-4d70-95b3-5ee79737f2b7",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--0ce3479d-da57-451a-9f9d-327bef42eb77",
- "created_by_ref": "identity--192f9c85-7c69-4256-a1d9-14a45e5b9733",
- "created": "2022-07-02T17:28:37.0033Z",
- "modified": "2022-07-02T17:28:37.0033Z",
+ "id": "attack-pattern--040a03ef-81da-47f1-a2ab-f9ebf7f08148",
+ "created_by_ref": "identity--5113455d-517f-49b9-bfe1-f35cbaee0e2a",
+ "created": "2022-07-02T19:59:12.72771Z",
+ "modified": "2022-07-02T19:59:12.72771Z",
"name": "Platform Filtering",
- "description": "TA18",
+ "description": "Platform filtering refers to the decontextualization of information as claims cross platforms (from Joan Donovan https://www.hks.harvard.edu/publications/disinformation-design-use-evidence-collages-and-platform-filtering-media-manipulation)",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--18e3adc4-dfd6-4429-9f56-a096a775db5c"
+ "marking-definition--01509a69-bb7d-4375-8897-854442ab3281"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--04f0b6bb-47f6-430e-ae9d-0a4188eb9388.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--04f0b6bb-47f6-430e-ae9d-0a4188eb9388.json
new file mode 100644
index 0000000..420aeb8
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--04f0b6bb-47f6-430e-ae9d-0a4188eb9388.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--fda04a82-85ea-4408-b912-011d1ecb5392",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--04f0b6bb-47f6-430e-ae9d-0a4188eb9388",
+ "created_by_ref": "identity--fe8c27c2-1bdd-414a-93dd-66ec0d533603",
+ "created": "2022-07-02T19:59:12.62135Z",
+ "modified": "2022-07-02T19:59:12.62135Z",
+ "name": "Prepare fundraising campaigns",
+ "description": "Fundraising campaigns refer to an influence operation\u2019s systematic effort to seek financial support for a charity, cause, or other enterprise using online activities that further promote operation information pathways while raising a profit. Many influence operations have engaged in crowdfunding services on platforms including Tipee, Patreon, and GoFundMe. An operation may use its previously prepared fundraising campaigns (see: Develop Information Pathways) to promote operation messaging while raising money to support its activities. ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "establish-social-assets"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0014.md",
+ "external_id": "T0014"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--42c8712c-2f42-4330-91db-3a94fc739a16"
+ ],
+ "x_mitre_is_subtechnique": false,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--418a55bf-5c5e-4a90-8f10-a18fc80a2964.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--05792c90-5f5a-42e3-b7bf-b50284f7225e.json
similarity index 57%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--418a55bf-5c5e-4a90-8f10-a18fc80a2964.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--05792c90-5f5a-42e3-b7bf-b50284f7225e.json
index f48e3a3..299c39e 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--418a55bf-5c5e-4a90-8f10-a18fc80a2964.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--05792c90-5f5a-42e3-b7bf-b50284f7225e.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--b7c36349-548f-4780-92b3-f30d0e533f92",
+ "id": "bundle--7a348cfb-52a6-46d8-8497-4eabb605157f",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--418a55bf-5c5e-4a90-8f10-a18fc80a2964",
- "created_by_ref": "identity--cb3afbf2-a35b-4868-b001-0b1eb75d6194",
- "created": "2022-07-02T17:28:37.004582Z",
- "modified": "2022-07-02T17:28:37.004582Z",
+ "id": "attack-pattern--05792c90-5f5a-42e3-b7bf-b50284f7225e",
+ "created_by_ref": "identity--811faa7c-8fd8-48e8-be93-fa69c386dd9e",
+ "created": "2022-07-02T19:59:12.729033Z",
+ "modified": "2022-07-02T19:59:12.729033Z",
"name": "Physical Violence",
- "description": "TA10",
+ "description": "Physical violence refers to the use of force to injure, abuse, damage, or destroy. An influence operation may conduct or encourage physical violence to discourage opponents from promoting conflicting content or draw attention to operation narratives using shock value. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--323e88e9-808d-4c69-b9e6-e2ab8bae52cf"
+ "marking-definition--9f29a434-5df1-4abb-9a96-670e46ca3ede"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e8cb072b-23ac-468f-b9c8-78a69e1f6be8.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--063e1fbb-d23c-404a-a9b0-bfb3bf2b9c8d.json
similarity index 66%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--e8cb072b-23ac-468f-b9c8-78a69e1f6be8.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--063e1fbb-d23c-404a-a9b0-bfb3bf2b9c8d.json
index 27f89e8..e70a68c 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e8cb072b-23ac-468f-b9c8-78a69e1f6be8.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--063e1fbb-d23c-404a-a9b0-bfb3bf2b9c8d.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--0ded56b5-84bd-4989-9de9-81b27d8d4991",
+ "id": "bundle--98cd803c-3cdd-4f45-85e1-941bf65d310e",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--e8cb072b-23ac-468f-b9c8-78a69e1f6be8",
- "created_by_ref": "identity--6bee205f-a62c-405b-8632-a7573a33e996",
- "created": "2022-07-02T17:28:36.994985Z",
- "modified": "2022-07-02T17:28:36.994985Z",
+ "id": "attack-pattern--063e1fbb-d23c-404a-a9b0-bfb3bf2b9c8d",
+ "created_by_ref": "identity--4bdb7015-1412-4429-8788-471a84890a9f",
+ "created": "2022-07-02T19:59:12.718891Z",
+ "modified": "2022-07-02T19:59:12.718891Z",
"name": "Post Violative Content to Provoke Takedown and Backlash",
- "description": "TA09",
+ "description": "Post Violative Content to Provoke Takedown and Backlash.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--8b1b5001-078f-450f-9113-43c6d6aa57b2"
+ "marking-definition--0be39880-90cf-486b-a92e-b3ed2ce045be"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--400167bb-0e28-4499-93f5-984882266303.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--06504d3c-f7cc-46fd-a6a4-5f1fb3291232.json
similarity index 59%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--400167bb-0e28-4499-93f5-984882266303.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--06504d3c-f7cc-46fd-a6a4-5f1fb3291232.json
index 5dbd34a..1ef9275 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--400167bb-0e28-4499-93f5-984882266303.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--06504d3c-f7cc-46fd-a6a4-5f1fb3291232.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--b4688e92-11f4-42c9-8f52-97214e368541",
+ "id": "bundle--2e794870-fd94-4be6-8e6b-f3fdcdd0ea75",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--400167bb-0e28-4499-93f5-984882266303",
- "created_by_ref": "identity--d126a8c5-2a78-4e8d-b0fd-931dd6144a90",
- "created": "2022-07-02T17:28:36.936279Z",
- "modified": "2022-07-02T17:28:36.936279Z",
- "name": "From bad actors",
- "description": "TA15",
+ "id": "attack-pattern--06504d3c-f7cc-46fd-a6a4-5f1fb3291232",
+ "created_by_ref": "identity--0d8fc69a-bd53-450e-a29e-d1e994f07b6d",
+ "created": "2022-07-02T19:59:12.621676Z",
+ "modified": "2022-07-02T19:59:12.621676Z",
+ "name": "Raise funds from malign actors",
+ "description": "Raising funds from malign actors may include contributions from foreign agents, cutouts or proxies, shell companies, dark money groups, etc. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--13271717-f1ee-4a94-94c3-8570cf814242"
+ "marking-definition--a6f5dcd4-b345-4f31-8f8c-c2294dc9e7c5"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1d8883bc-3e8c-406d-ad8e-f7d660d05494.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0678242b-030c-4ff5-8f9f-73a97253c8dc.json
similarity index 54%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--1d8883bc-3e8c-406d-ad8e-f7d660d05494.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--0678242b-030c-4ff5-8f9f-73a97253c8dc.json
index d36af3c..8a2a04c 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1d8883bc-3e8c-406d-ad8e-f7d660d05494.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0678242b-030c-4ff5-8f9f-73a97253c8dc.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--d5126e46-fbad-47e4-94d2-c9880b6284ec",
+ "id": "bundle--dc9d7ca8-d56d-4b46-b2df-dd26e199fe2e",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--1d8883bc-3e8c-406d-ad8e-f7d660d05494",
- "created_by_ref": "identity--c0e3a9f3-db28-4270-b125-c8c15ab52242",
- "created": "2022-07-02T17:28:36.945596Z",
- "modified": "2022-07-02T17:28:36.945596Z",
+ "id": "attack-pattern--0678242b-030c-4ff5-8f9f-73a97253c8dc",
+ "created_by_ref": "identity--e80ee5d8-d71a-4071-9ae7-5697aa5f0e0a",
+ "created": "2022-07-02T19:59:12.632024Z",
+ "modified": "2022-07-02T19:59:12.632024Z",
"name": "Boycott/\"Cancel\" Opponents",
- "description": "TA18",
+ "description": "Cancel culture refers to the phenomenon in which individuals collectively refrain from supporting an individual, organization, business, or other entity, usually following a real or falsified controversy. An influence operation may exploit cancel culture by emphasizing an adversary\u2019s problematic or disputed behavior and presenting its own content as an alternative. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--d681785f-ab54-4f82-bf66-75d3d447bba9"
+ "marking-definition--276e2501-325a-4b70-96ff-6e62f95ddd7f"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--07425155-0f00-47cd-8e61-01da0fd19388.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--07425155-0f00-47cd-8e61-01da0fd19388.json
new file mode 100644
index 0000000..17135ab
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--07425155-0f00-47cd-8e61-01da0fd19388.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--1cd96710-aaef-4652-89d5-09c9995e79f4",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--07425155-0f00-47cd-8e61-01da0fd19388",
+ "created_by_ref": "identity--e62d7526-5ab3-4857-858e-d3c59b24e6d0",
+ "created": "2022-07-02T19:59:12.736272Z",
+ "modified": "2022-07-02T19:59:12.736272Z",
+ "name": "Conceal Sponsorship",
+ "description": "Concealing sponsorship aims to mislead or obscure the identity of the hidden sponsor behind an operation rather than entity publicly running the operation. Operations that conceal sponsorship may maintain visible falsified groups, news outlets, non-profits, or other organizations, but seek to mislead or obscure the identity sponsoring, funding, or otherwise supporting these entities. \nInfluence operations may use a variety of techniques to mask the location of their social media accounts to complicate attribution and conceal evidence of foreign interference. Operation accounts may set their location to a false place, often the location of the operation\u2019s target audience, and post in the region\u2019s language",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "persist-in-the-information-environment"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0130.001.md",
+ "external_id": "T0130.001"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--e4618e60-e5ec-4c05-9e07-227378c85027"
+ ],
+ "x_mitre_is_subtechnique": true,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cbf66a9a-6f05-4508-9ab9-c0f6a2ecdcc6.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--074dec50-3fd1-4427-81cc-6d42c4774a53.json
similarity index 60%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--cbf66a9a-6f05-4508-9ab9-c0f6a2ecdcc6.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--074dec50-3fd1-4427-81cc-6d42c4774a53.json
index 3a6abc1..c18a4de 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cbf66a9a-6f05-4508-9ab9-c0f6a2ecdcc6.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--074dec50-3fd1-4427-81cc-6d42c4774a53.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--fe5831e5-a458-447c-8fbb-7dba49318996",
+ "id": "bundle--7c5cfedc-e176-4c46-afed-3a91e734118b",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--cbf66a9a-6f05-4508-9ab9-c0f6a2ecdcc6",
- "created_by_ref": "identity--19bcbfa6-e969-4f3b-8cc3-7c586ef709f4",
- "created": "2022-07-02T17:28:37.017102Z",
- "modified": "2022-07-02T17:28:37.017102Z",
+ "id": "attack-pattern--074dec50-3fd1-4427-81cc-6d42c4774a53",
+ "created_by_ref": "identity--33cff0c9-a11b-4adf-8e48-a5998f749bf6",
+ "created": "2022-07-02T19:59:12.742178Z",
+ "modified": "2022-07-02T19:59:12.742178Z",
"name": "Measure Effectiveness Indicators (or KPIs)",
- "description": "TA12",
+ "description": "Ensuring that Key Performace Indicators are identified and tracked, so that the performance and effectivess of campaigns, and elements of campaigns, can be measured, during and after their execution",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c5932dee-667e-468b-ade7-86647fdd5e8f"
+ "marking-definition--3dfd8539-e2f0-4d40-a4db-d925980e3e01"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--63ecf892-add4-4423-a27f-e49e63406771.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--08b0624d-4db7-4d38-838d-c7e970dbb292.json
similarity index 57%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--63ecf892-add4-4423-a27f-e49e63406771.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--08b0624d-4db7-4d38-838d-c7e970dbb292.json
index 550288a..4ce5e59 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--63ecf892-add4-4423-a27f-e49e63406771.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--08b0624d-4db7-4d38-838d-c7e970dbb292.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--e8c539a6-6244-4fef-8b61-033e2f5a8fbe",
+ "id": "bundle--5fae4878-7d7a-4f24-9e23-8c904e06cbb2",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--63ecf892-add4-4423-a27f-e49e63406771",
- "created_by_ref": "identity--213c9d6f-f783-4a35-81fc-b4942011f5e3",
- "created": "2022-07-02T17:28:36.938528Z",
- "modified": "2022-07-02T17:28:36.938528Z",
+ "id": "attack-pattern--08b0624d-4db7-4d38-838d-c7e970dbb292",
+ "created_by_ref": "identity--a008f5aa-2a69-4660-bb02-97f64f779370",
+ "created": "2022-07-02T19:59:12.623991Z",
+ "modified": "2022-07-02T19:59:12.623991Z",
"name": "Generate information pollution",
- "description": "TA06",
+ "description": "Flood social channels; drive traffic/engagement to all assets; create aura/sense/perception of pervasiveness/consensus (for or against or both simultaneously) of an issue or topic. \"Nothing is true, but everything is possible.\" Akin to astroturfing campaign.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--649012a3-d622-47ef-bc8d-ec69d3d78829"
+ "marking-definition--bdc1090d-05fe-4987-9276-6e385d0d60e4"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--58368496-c7b3-443a-80a8-636157faa954.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0950f50e-8b4d-4c16-93ed-5e52562fc1a7.json
similarity index 67%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--58368496-c7b3-443a-80a8-636157faa954.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--0950f50e-8b4d-4c16-93ed-5e52562fc1a7.json
index e311bf5..3257ade 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--58368496-c7b3-443a-80a8-636157faa954.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0950f50e-8b4d-4c16-93ed-5e52562fc1a7.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--72c1ee94-ed5e-47ad-84bf-5b9641330b95",
+ "id": "bundle--f904ea2c-c4da-4de3-ac61-8bb739f99ec5",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--58368496-c7b3-443a-80a8-636157faa954",
- "created_by_ref": "identity--e3663dbd-9278-4e2b-b347-8f591e41b252",
- "created": "2022-07-02T17:28:37.003942Z",
- "modified": "2022-07-02T17:28:37.003942Z",
+ "id": "attack-pattern--0950f50e-8b4d-4c16-93ed-5e52562fc1a7",
+ "created_by_ref": "identity--0056252d-451e-45be-96c4-8d8255c5df5a",
+ "created": "2022-07-02T19:59:12.728378Z",
+ "modified": "2022-07-02T19:59:12.728378Z",
"name": "Call to action to attend ",
- "description": "TA10",
+ "description": "Call to action to attend an event",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--70335c0b-7f4a-4dfa-9104-9f86b68d9972"
+ "marking-definition--cb7e9c7d-834b-4c53-924c-bb77f028b13d"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--095aa344-86dc-4488-a1d7-a8a7c1363d4a.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--095aa344-86dc-4488-a1d7-a8a7c1363d4a.json
deleted file mode 100644
index e93cf96..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--095aa344-86dc-4488-a1d7-a8a7c1363d4a.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--fdc2d2fc-7bbf-42b1-84c3-4392a844e895",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--095aa344-86dc-4488-a1d7-a8a7c1363d4a",
- "created_by_ref": "identity--c0f933b4-d46e-4419-868f-db37873512be",
- "created": "2022-07-02T17:28:36.948044Z",
- "modified": "2022-07-02T17:28:36.948044Z",
- "name": "Bots Amplify via Automated Forwarding and Reposting",
- "description": "TA17",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "maximize-exposure"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0049.003.md",
- "external_id": "T0049.003"
- }
- ],
- "object_marking_refs": [
- "marking-definition--778b8674-094f-4ba7-b58c-79a77b05dea5"
- ],
- "x_mitre_is_subtechnique": true,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--09c83f74-e10c-452e-b55b-37807cc79c95.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--09c83f74-e10c-452e-b55b-37807cc79c95.json
new file mode 100644
index 0000000..fdcf096
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--09c83f74-e10c-452e-b55b-37807cc79c95.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--0f8c57bd-22b3-432c-8909-b3a14f9954bb",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--09c83f74-e10c-452e-b55b-37807cc79c95",
+ "created_by_ref": "identity--047518ae-fd89-411a-ac53-0d262d59768c",
+ "created": "2022-07-02T19:59:12.660812Z",
+ "modified": "2022-07-02T19:59:12.660812Z",
+ "name": "Enlist Troll Accounts",
+ "description": "An influence operation may hire trolls, or human operators of fake accounts that aim to provoke others by posting and amplifying content about controversial issues. Trolls can serve to discredit an influence operation\u2019s opposition or bring attention to the operation\u2019s cause through debate. \nClassic trolls refer to regular people who troll for personal reasons, such as attention-seeking or boredom. Classic trolls may advance operation narratives by coincidence but are not directly affiliated with any larger operation. Conversely, hybrid trolls act on behalf of another institution, such as a state or financial organization, and post content with a specific ideological goal. Hybrid trolls may be highly advanced and institutionalized or less organized and work for a single individual. ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "establish-social-assets"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0091.003.md",
+ "external_id": "T0091.003"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--7e51d2e1-3838-4081-a1a0-d499970c5de3"
+ ],
+ "x_mitre_is_subtechnique": true,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c4b88244-71f7-4309-bae5-8f00976457a4.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0b98e731-1c93-49ef-9f07-0377be20ff34.json
similarity index 67%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--c4b88244-71f7-4309-bae5-8f00976457a4.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--0b98e731-1c93-49ef-9f07-0377be20ff34.json
index a405da9..b19b5b3 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c4b88244-71f7-4309-bae5-8f00976457a4.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0b98e731-1c93-49ef-9f07-0377be20ff34.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--cc00bf79-eabd-4ee3-8639-59ba992c9d52",
+ "id": "bundle--49efa15a-24f8-4f10-a17d-cb027f1a5897",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c4b88244-71f7-4309-bae5-8f00976457a4",
- "created_by_ref": "identity--06710946-e490-4fe7-ba1c-8e3ec4e23816",
- "created": "2022-07-02T17:28:36.998906Z",
- "modified": "2022-07-02T17:28:36.998906Z",
+ "id": "attack-pattern--0b98e731-1c93-49ef-9f07-0377be20ff34",
+ "created_by_ref": "identity--e961bf5e-69ef-48f4-b322-8a565f83f490",
+ "created": "2022-07-02T19:59:12.72327Z",
+ "modified": "2022-07-02T19:59:12.72327Z",
"name": "Use Contests and Prizes",
- "description": "TA17",
+ "description": "Use Contests and Prizes",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a348c294-aaa0-49cc-8589-c2ee75d8270a"
+ "marking-definition--6ae81d81-f7bf-44fe-974b-0aa08c1a967e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c11289f8-7f05-4975-a789-a089d34d96dd.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0c14a9d8-4304-4468-800b-c3c1d84dff5f.json
similarity index 58%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--c11289f8-7f05-4975-a789-a089d34d96dd.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--0c14a9d8-4304-4468-800b-c3c1d84dff5f.json
index b7da7a4..c8305a7 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c11289f8-7f05-4975-a789-a089d34d96dd.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0c14a9d8-4304-4468-800b-c3c1d84dff5f.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--54b14714-206b-4ba8-956c-ad41f957f254",
+ "id": "bundle--d7c2082b-b210-4c63-8360-c9622bd2ddea",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c11289f8-7f05-4975-a789-a089d34d96dd",
- "created_by_ref": "identity--b76fd6d5-acff-40ef-b674-d4eecc317af5",
- "created": "2022-07-02T17:28:36.938855Z",
- "modified": "2022-07-02T17:28:36.938855Z",
+ "id": "attack-pattern--0c14a9d8-4304-4468-800b-c3c1d84dff5f",
+ "created_by_ref": "identity--ef280992-aaca-463b-bb9e-1a8f0eb31c08",
+ "created": "2022-07-02T19:59:12.624385Z",
+ "modified": "2022-07-02T19:59:12.624385Z",
"name": "Create fake research",
- "description": "TA06",
+ "description": "Create fake academic research. Example: fake social science research is often aimed at hot-button social issues such as gender, race and sexuality. Fake science research can target Climate Science debate or pseudoscience like anti-vaxx",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--67d0bd27-6c9f-491b-8568-05a9a88b92bf"
+ "marking-definition--b0fc2160-56aa-4247-8581-413503cb14ad"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e88bb789-d3a3-48ce-9861-d1b486cb86d1.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0c87b14d-385e-44f7-a180-ecb389949bb4.json
similarity index 62%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--e88bb789-d3a3-48ce-9861-d1b486cb86d1.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--0c87b14d-385e-44f7-a180-ecb389949bb4.json
index efa5c8f..73803ec 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e88bb789-d3a3-48ce-9861-d1b486cb86d1.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0c87b14d-385e-44f7-a180-ecb389949bb4.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--a3ec0d65-c0e9-485e-997c-d4ef32c41f9b",
+ "id": "bundle--d6438cd3-ef2e-4fe9-83a8-4a2c0c696cb1",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--e88bb789-d3a3-48ce-9861-d1b486cb86d1",
- "created_by_ref": "identity--4068bbb0-4c02-4b5a-93ad-bdf6b44bb53c",
- "created": "2022-07-02T17:28:37.013244Z",
- "modified": "2022-07-02T17:28:37.013244Z",
+ "id": "attack-pattern--0c87b14d-385e-44f7-a180-ecb389949bb4",
+ "created_by_ref": "identity--133a6974-87ef-4fd4-81df-07f2db5db17c",
+ "created": "2022-07-02T19:59:12.73827Z",
+ "modified": "2022-07-02T19:59:12.73827Z",
"name": "Legacy web content",
- "description": "TA11",
+ "description": "Make incident content visible for a long time, e.g. by exploiting platform terms of service, or placing it where it's hard to remove or unlikely to be removed.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--fafcf05f-1657-4cca-930e-fb17d83b43f7"
+ "marking-definition--6ca4f426-8216-4d0b-8e69-8bef70364209"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0d5e2457-30e9-4934-8197-651dbc00dc82.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0d5e2457-30e9-4934-8197-651dbc00dc82.json
new file mode 100644
index 0000000..6664c1b
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0d5e2457-30e9-4934-8197-651dbc00dc82.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--fbaeb474-754b-497b-93ab-566d36199ed2",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--0d5e2457-30e9-4934-8197-651dbc00dc82",
+ "created_by_ref": "identity--f785ad55-f2a3-4a46-9082-7910d370dd0f",
+ "created": "2022-07-02T19:59:12.723937Z",
+ "modified": "2022-07-02T19:59:12.723937Z",
+ "name": "Bypass Content Blocking",
+ "description": "Bypassing content blocking refers to actions taken to circumvent network security measures that prevent users from accessing certain servers, resources, or other online spheres. An influence operation may bypass content blocking to proliferate its content on restricted areas of the internet. Common strategies for bypassing content blocking include:\n- Altering IP addresses to avoid IP filtering \n- Using a Virtual Private Network (VPN) to avoid IP filtering \n- Using a Content Delivery Network (CDN) to avoid IP filtering \n- Enabling encryption to bypass packet inspection blocking \n- Manipulating text to avoid filtering by keywords \n- Posting content on multiple platforms to avoid platform-specific removals - Using local facilities or modified DNS servers to avoid DNS filtering ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "maximize-exposure"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0121.001.md",
+ "external_id": "T0121.001"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--9ea37ee9-1815-4e02-bc2b-7279a1102521"
+ ],
+ "x_mitre_is_subtechnique": true,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--37b3cf33-f0bf-40ed-9b97-0bb74ede8923.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0d6d9eb1-1113-46a5-a518-ac21258eb513.json
similarity index 60%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--37b3cf33-f0bf-40ed-9b97-0bb74ede8923.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--0d6d9eb1-1113-46a5-a518-ac21258eb513.json
index e153b3f..085e3c5 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--37b3cf33-f0bf-40ed-9b97-0bb74ede8923.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0d6d9eb1-1113-46a5-a518-ac21258eb513.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--c601d953-70fb-4f7b-b754-cbaf7540f755",
+ "id": "bundle--b6023542-61ee-4697-9889-4aad4236e2fb",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--37b3cf33-f0bf-40ed-9b97-0bb74ede8923",
- "created_by_ref": "identity--6680323a-b44b-43c4-84cf-d75feae5cd0e",
- "created": "2022-07-02T17:28:36.995942Z",
- "modified": "2022-07-02T17:28:36.995942Z",
+ "id": "attack-pattern--0d6d9eb1-1113-46a5-a518-ac21258eb513",
+ "created_by_ref": "identity--c50e1cdd-d981-4d76-8eb7-06fd089df704",
+ "created": "2022-07-02T19:59:12.720088Z",
+ "modified": "2022-07-02T19:59:12.720088Z",
"name": "Post inauthentic social media comment",
- "description": "TA09",
+ "description": "Use government-paid social media commenters, astroturfers, chat bots (programmed to reply to specific key words/hashtags) influence online conversations, product reviews, web-site comment forums.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--50cb9240-ed4f-4b34-819b-bbac3de7aa77"
+ "marking-definition--5526b7a3-6705-4370-9bef-13759f37f2fa"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9175c5c5-5e10-492c-823d-17178bdd1406.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0f3f9883-6db6-4936-94ce-e89e0f994f6d.json
similarity index 56%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--9175c5c5-5e10-492c-823d-17178bdd1406.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--0f3f9883-6db6-4936-94ce-e89e0f994f6d.json
index 63cb09b..eef8d3a 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9175c5c5-5e10-492c-823d-17178bdd1406.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0f3f9883-6db6-4936-94ce-e89e0f994f6d.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--7d974fc9-45b6-4540-9799-27b94fddfd4e",
+ "id": "bundle--96e866f6-a5ee-47f1-a2fb-d450f8c09a8d",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--9175c5c5-5e10-492c-823d-17178bdd1406",
- "created_by_ref": "identity--f1e7062a-a677-4559-9499-004155582f93",
- "created": "2022-07-02T17:28:36.962232Z",
- "modified": "2022-07-02T17:28:36.962232Z",
+ "id": "attack-pattern--0f3f9883-6db6-4936-94ce-e89e0f994f6d",
+ "created_by_ref": "identity--3e4f09d6-dd88-446d-83c3-071cabe34a9c",
+ "created": "2022-07-02T19:59:12.648507Z",
+ "modified": "2022-07-02T19:59:12.648507Z",
"name": "Identify Wedge Issues",
- "description": "TA13",
+ "description": "A wedge issue is a divisive political issue, usually concerning a social phenomenon, that divides individuals along a defined line. An influence operation may exploit wedge issues by intentionally polarizing the public along the wedge issue line and encouraging opposition between factions.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a4f3cf5a-f71c-48e9-899e-a2c199fb8dd7"
+ "marking-definition--c9493262-f742-49c2-99de-8470c7296eb0"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--841a7027-21e2-47f0-a8be-cc43d0e85faf.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0f5cbbee-3e87-4cdc-b544-ee9374919426.json
similarity index 54%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--841a7027-21e2-47f0-a8be-cc43d0e85faf.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--0f5cbbee-3e87-4cdc-b544-ee9374919426.json
index 43cd6d8..5bd6c6b 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--841a7027-21e2-47f0-a8be-cc43d0e85faf.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0f5cbbee-3e87-4cdc-b544-ee9374919426.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--0372728c-d747-44d6-9347-2beb2e9cec8c",
+ "id": "bundle--387ae227-9f51-4767-864f-e6ca38580013",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--841a7027-21e2-47f0-a8be-cc43d0e85faf",
- "created_by_ref": "identity--9f57ca6b-1cb8-4d45-93e3-26f6fee85399",
- "created": "2022-07-02T17:28:36.975738Z",
- "modified": "2022-07-02T17:28:36.975738Z",
- "name": "Follow Trains",
- "description": "TA15",
+ "id": "attack-pattern--0f5cbbee-3e87-4cdc-b544-ee9374919426",
+ "created_by_ref": "identity--83479fa9-197a-49d1-a3e0-c940b9701750",
+ "created": "2022-07-02T19:59:12.661899Z",
+ "modified": "2022-07-02T19:59:12.661899Z",
+ "name": "Use Follow Trains",
+ "description": "A follow train is a group of people who follow each other on a social media platform, often as a way for an individual or campaign to grow its social media following. Follow trains may be a violation of platform Terms of Service. They are also known as follow-for-follow groups. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--8f36e44d-f28a-4f6e-943b-5199f32bf6d2"
+ "marking-definition--c0b7552f-9e0d-4590-af1b-f4a8231c65e9"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0fc791e6-cc20-4280-9a53-251d88b940c5.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0fc791e6-cc20-4280-9a53-251d88b940c5.json
deleted file mode 100644
index 3a502f5..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0fc791e6-cc20-4280-9a53-251d88b940c5.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--65f83c81-9726-4303-aed7-0192ba62d495",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--0fc791e6-cc20-4280-9a53-251d88b940c5",
- "created_by_ref": "identity--0b71bdf6-0f28-40df-ac4d-ccbc480b24e2",
- "created": "2022-07-02T17:28:37.011653Z",
- "modified": "2022-07-02T17:28:37.011653Z",
- "name": "Utilize Bulletproof Hosting",
- "description": "TA11",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "persist-in-the-information-environment"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0130.002.md",
- "external_id": "T0130.002"
- }
- ],
- "object_marking_refs": [
- "marking-definition--3c23d001-ee41-49e8-b3ae-39b9b06e6a5f"
- ],
- "x_mitre_is_subtechnique": true,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2f9be5f3-9474-46c1-9bf8-038577c4b6a8.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1059cdf7-3b45-40e6-93d3-b25ef3b6afac.json
similarity index 58%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--2f9be5f3-9474-46c1-9bf8-038577c4b6a8.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--1059cdf7-3b45-40e6-93d3-b25ef3b6afac.json
index e4b1842..3bf3d79 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2f9be5f3-9474-46c1-9bf8-038577c4b6a8.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1059cdf7-3b45-40e6-93d3-b25ef3b6afac.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--c9a25dc0-1ea6-46ae-996f-869f8d5e3195",
+ "id": "bundle--41834803-191e-446c-9b27-e085c7c09fbc",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--2f9be5f3-9474-46c1-9bf8-038577c4b6a8",
- "created_by_ref": "identity--436a153e-6a13-48ad-a2af-c9e7835e72c6",
- "created": "2022-07-02T17:28:36.946914Z",
- "modified": "2022-07-02T17:28:36.946914Z",
+ "id": "attack-pattern--1059cdf7-3b45-40e6-93d3-b25ef3b6afac",
+ "created_by_ref": "identity--b9b5c65a-3913-4a60-9448-6d4974a5c8e1",
+ "created": "2022-07-02T19:59:12.633371Z",
+ "modified": "2022-07-02T19:59:12.633371Z",
"name": "Flooding the Information Space",
- "description": "TA17",
+ "description": "Flooding and/or mobbing social media channels feeds and/or hashtag with excessive volume of content to control/shape online conversations and/or drown out opposing points of view. Bots and/or patriotic trolls are effective tools to acheive this effect.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--8b1f7930-6755-4a68-b5b7-7c56854b3178"
+ "marking-definition--bc33bc74-32ca-49cf-8fcb-c194ed40ccf9"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d9e51370-28b8-47a2-bf15-9436aa2f8c1b.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--107e3180-34f6-4e11-a952-705df35b52f7.json
similarity index 55%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--d9e51370-28b8-47a2-bf15-9436aa2f8c1b.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--107e3180-34f6-4e11-a952-705df35b52f7.json
index c4140cc..5cc0bb1 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d9e51370-28b8-47a2-bf15-9436aa2f8c1b.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--107e3180-34f6-4e11-a952-705df35b52f7.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--f66ee3fd-e7c6-43d1-98d0-33cfdf7eeb17",
+ "id": "bundle--4174c131-9a90-4d85-b11d-439b04438456",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--d9e51370-28b8-47a2-bf15-9436aa2f8c1b",
- "created_by_ref": "identity--1170e770-82e2-45d3-b0e0-29e41084951a",
- "created": "2022-07-02T17:28:37.00685Z",
- "modified": "2022-07-02T17:28:37.00685Z",
+ "id": "attack-pattern--107e3180-34f6-4e11-a952-705df35b52f7",
+ "created_by_ref": "identity--9b2c579f-fdf5-4585-ba48-f4bfdcf6e703",
+ "created": "2022-07-02T19:59:12.731474Z",
+ "modified": "2022-07-02T19:59:12.731474Z",
"name": "Launder Accounts",
- "description": "TA11",
+ "description": "Account laundering occurs when an influence operation acquires control of previously legitimate online accounts from third parties through sale or exchange and often in contravention of terms of use. Influence operations use laundered accounts to reach target audience members from an existing information channel and complicate attribution. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--88e18d1d-9102-4ffc-a8a7-81042933a8a2"
+ "marking-definition--1f97face-a051-4873-be69-61a6fb53fc4a"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8f41068e-fa56-4853-b6ae-2806d49f7027.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--10d6f181-cf76-42b1-a021-37949a0574bc.json
similarity index 52%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--8f41068e-fa56-4853-b6ae-2806d49f7027.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--10d6f181-cf76-42b1-a021-37949a0574bc.json
index 443511c..88a821b 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8f41068e-fa56-4853-b6ae-2806d49f7027.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--10d6f181-cf76-42b1-a021-37949a0574bc.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--1ada7d39-6a5d-4fff-a66a-0b09fc5ae474",
+ "id": "bundle--c1e84e8d-9dfe-4e61-a26d-3d5be0e60383",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--8f41068e-fa56-4853-b6ae-2806d49f7027",
- "created_by_ref": "identity--25ced9c5-c4d7-4c85-b43b-1783e5c0cbae",
- "created": "2022-07-02T17:28:36.95936Z",
- "modified": "2022-07-02T17:28:36.95936Z",
+ "id": "attack-pattern--10d6f181-cf76-42b1-a021-37949a0574bc",
+ "created_by_ref": "identity--91e9b84a-7692-49e7-8b36-210d7a841f7d",
+ "created": "2022-07-02T19:59:12.64624Z",
+ "modified": "2022-07-02T19:59:12.64624Z",
"name": "Assess Degree/Type of Media Access",
- "description": "TA13",
+ "description": "An influence operation may survey a target audience\u2019s Internet availability and degree of media freedom to determine which target audience members will have access to operation content and on which platforms. An operation may face more difficulty targeting an information environment with heavy restrictions and media control than an environment with independent media, freedom of speech and of the press, and individual liberties. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7cb7ec5d-cb29-472e-8c50-9ad45282011d"
+ "marking-definition--ace2621f-f96b-4ac0-ac39-c302622a6d05"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--51815f67-de07-4999-be0a-b59da0b2516a.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--111df696-75c4-4dcb-9ab3-0cf79fe99953.json
similarity index 56%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--51815f67-de07-4999-be0a-b59da0b2516a.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--111df696-75c4-4dcb-9ab3-0cf79fe99953.json
index f7a5fdb..16ea142 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--51815f67-de07-4999-be0a-b59da0b2516a.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--111df696-75c4-4dcb-9ab3-0cf79fe99953.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--b12a7fb1-e738-4738-ac1f-e6beb5bf76ad",
+ "id": "bundle--98cf56be-4606-42d9-90f1-e9f4722a8bfe",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--51815f67-de07-4999-be0a-b59da0b2516a",
- "created_by_ref": "identity--32f265c7-d821-49bd-af74-bedc7747de0c",
- "created": "2022-07-02T17:28:36.99117Z",
- "modified": "2022-07-02T17:28:36.99117Z",
+ "id": "attack-pattern--111df696-75c4-4dcb-9ab3-0cf79fe99953",
+ "created_by_ref": "identity--6b3dd975-874b-4adc-9ad8-0c33fe6065a8",
+ "created": "2022-07-02T19:59:12.677975Z",
+ "modified": "2022-07-02T19:59:12.677975Z",
"name": "Formal Diplomatic Channels",
- "description": "TA07",
+ "description": "Leveraging formal, traditional, diplomatic channels to communicate with foreign governments (written documents, meetings, summits, diplomatic visits, etc). This type of diplomacy is conducted by diplomats of one nation with diplomats and other officials of another nation or international organization.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--0ec87009-63ca-456a-8d20-79fd5cc38743"
+ "marking-definition--c5a79e7f-871a-4049-b657-91e4b4afb92a"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d444b0b1-16b3-4e73-a94c-dc47a3a1ed5b.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--11af0d9d-1e5c-4b28-b586-cffc7b2e68fc.json
similarity index 67%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--d444b0b1-16b3-4e73-a94c-dc47a3a1ed5b.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--11af0d9d-1e5c-4b28-b586-cffc7b2e68fc.json
index fe06455..9d03962 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d444b0b1-16b3-4e73-a94c-dc47a3a1ed5b.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--11af0d9d-1e5c-4b28-b586-cffc7b2e68fc.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--c245bfe0-a002-4a7f-89ee-52772cadb6bb",
+ "id": "bundle--289f38a1-5f79-4e45-a69d-a379633de30c",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--d444b0b1-16b3-4e73-a94c-dc47a3a1ed5b",
- "created_by_ref": "identity--a4098223-4aae-4cb9-a92d-13e0fd65515c",
- "created": "2022-07-02T17:28:36.980947Z",
- "modified": "2022-07-02T17:28:36.980947Z",
+ "id": "attack-pattern--11af0d9d-1e5c-4b28-b586-cffc7b2e68fc",
+ "created_by_ref": "identity--6b4a9bf5-2e4d-44e6-9ef1-6f58db491c60",
+ "created": "2022-07-02T19:59:12.667208Z",
+ "modified": "2022-07-02T19:59:12.667208Z",
"name": "Leverage Existing Inauthentic News Sites",
- "description": "TA16",
+ "description": "Leverage Existing Inauthentic News Sites",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--df7ad146-9c6d-4a83-8386-607c007732be"
+ "marking-definition--69c75baf-1bde-4e9e-978a-7298468bfabf"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d6d1b5a1-b4b2-4743-913a-ae241a3ffab4.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--13e7f270-5796-40dd-b5b5-f36d84beef48.json
similarity index 64%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--d6d1b5a1-b4b2-4743-913a-ae241a3ffab4.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--13e7f270-5796-40dd-b5b5-f36d84beef48.json
index bd415b6..4c51009 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d6d1b5a1-b4b2-4743-913a-ae241a3ffab4.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--13e7f270-5796-40dd-b5b5-f36d84beef48.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--7ce159f7-fc58-45c3-9e0a-897cc074cc5d",
+ "id": "bundle--c6685321-559e-442b-b412-dcd0d68b454c",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--d6d1b5a1-b4b2-4743-913a-ae241a3ffab4",
- "created_by_ref": "identity--dc346130-8ba4-4f4b-ac09-9aa2ac21d8a2",
- "created": "2022-07-02T17:28:37.012289Z",
- "modified": "2022-07-02T17:28:37.012289Z",
+ "id": "attack-pattern--13e7f270-5796-40dd-b5b5-f36d84beef48",
+ "created_by_ref": "identity--faff4808-9c88-4a8b-977c-eb2a81e4cef9",
+ "created": "2022-07-02T19:59:12.737293Z",
+ "modified": "2022-07-02T19:59:12.737293Z",
"name": "Use Cryptocurrency",
- "description": "TA11",
+ "description": "Use Cryptocurrency to conceal sponsorship. Examples include Bitcoin, Monero, and Etherium. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--593ceb76-1ee7-44b7-a399-92d65c8d0142"
+ "marking-definition--baeec09c-f65f-409a-8ccf-5653503ea414"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--13942c8f-1337-4de0-8b7b-3802fa4c7276.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--13ff62f6-6719-4ec4-b786-0a19eef53709.json
similarity index 53%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--13942c8f-1337-4de0-8b7b-3802fa4c7276.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--13ff62f6-6719-4ec4-b786-0a19eef53709.json
index 3716f60..7c65e23 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--13942c8f-1337-4de0-8b7b-3802fa4c7276.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--13ff62f6-6719-4ec4-b786-0a19eef53709.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--c54dd29a-ddf5-449e-baa9-961b6cb72e57",
+ "id": "bundle--d0b7fade-f884-4565-8a90-30da31fb01df",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--13942c8f-1337-4de0-8b7b-3802fa4c7276",
- "created_by_ref": "identity--3fd6c410-4981-48ce-aeb6-c02ba2b2e4c3",
- "created": "2022-07-02T17:28:36.949061Z",
- "modified": "2022-07-02T17:28:36.949061Z",
+ "id": "attack-pattern--13ff62f6-6719-4ec4-b786-0a19eef53709",
+ "created_by_ref": "identity--7cad264d-b93c-448f-84cc-b91fa6377778",
+ "created": "2022-07-02T19:59:12.635522Z",
+ "modified": "2022-07-02T19:59:12.635522Z",
"name": "Conduct Keyword Squatting",
- "description": "TA17",
+ "description": "Keyword squatting refers to the creation of online content, such as websites, articles, or social media accounts, around a specific search engine-optimized term to overwhelm the search results of that term. An influence may keyword squat to increase content exposure to target audience members who query the exploited term in a search engine and manipulate the narrative around the term. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2e87c460-bd21-422c-8553-64c1da11faff"
+ "marking-definition--f360526f-6ed9-4d00-96b2-6f979dcd6895"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--50034ce6-d21e-4320-8d8b-c5fdba371a8a.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--14565357-ef35-4f2c-b54b-e1010ed772ab.json
similarity index 68%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--50034ce6-d21e-4320-8d8b-c5fdba371a8a.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--14565357-ef35-4f2c-b54b-e1010ed772ab.json
index 78aaa4e..bc00f58 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--50034ce6-d21e-4320-8d8b-c5fdba371a8a.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--14565357-ef35-4f2c-b54b-e1010ed772ab.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--777cc79d-7de7-4f58-a9fb-9fe0999eaf6f",
+ "id": "bundle--a309d662-6a86-4a9e-98d7-ff9369c1c4b0",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--50034ce6-d21e-4320-8d8b-c5fdba371a8a",
- "created_by_ref": "identity--4a6bfcca-5fc2-417e-8860-a797fb68627f",
- "created": "2022-07-02T17:28:36.985409Z",
- "modified": "2022-07-02T17:28:36.985409Z",
+ "id": "attack-pattern--14565357-ef35-4f2c-b54b-e1010ed772ab",
+ "created_by_ref": "identity--44ffec34-6a71-4f5b-b060-bf5d48b48da7",
+ "created": "2022-07-02T19:59:12.671731Z",
+ "modified": "2022-07-02T19:59:12.671731Z",
"name": "Video Livestream",
- "description": "TA07",
+ "description": "nan",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--547dd626-c8ed-446f-a62b-b7a89c949822"
+ "marking-definition--4d2351ce-857c-4223-9565-c32ad18a1eb2"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--96893208-0e96-4154-b045-4fc1bdaf4af3.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--15bd2bb3-531e-4a14-8650-613bf8dda25c.json
similarity index 63%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--96893208-0e96-4154-b045-4fc1bdaf4af3.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--15bd2bb3-531e-4a14-8650-613bf8dda25c.json
index 32ba4a0..68b9c0d 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--96893208-0e96-4154-b045-4fc1bdaf4af3.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--15bd2bb3-531e-4a14-8650-613bf8dda25c.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--ade9d435-12c4-4d33-b792-7908605bba5a",
+ "id": "bundle--d1ab6c67-add6-416d-86e1-e87ce0c2e4fc",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--96893208-0e96-4154-b045-4fc1bdaf4af3",
- "created_by_ref": "identity--5983c15a-af56-4a78-8b3c-bfd4071f97c8",
- "created": "2022-07-02T17:28:36.953991Z",
- "modified": "2022-07-02T17:28:36.953991Z",
+ "id": "attack-pattern--15bd2bb3-531e-4a14-8650-613bf8dda25c",
+ "created_by_ref": "identity--ea577b4d-c331-4c65-b032-44577305e622",
+ "created": "2022-07-02T19:59:12.64054Z",
+ "modified": "2022-07-02T19:59:12.64054Z",
"name": "Economic Segmentation",
- "description": "TA13",
+ "description": "An influence operation may target populations based on their income bracket, wealth, or other financial or economic division. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7d598aca-3017-40f2-9e49-ae82855b70bf"
+ "marking-definition--24a4b640-e34c-44dc-aa8e-591e9fef9e5f"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cbb1d58a-133a-45ff-8e58-1e96660d647d.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--15ee8dc7-f009-425f-afa3-294ba94b64e2.json
similarity index 59%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--cbb1d58a-133a-45ff-8e58-1e96660d647d.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--15ee8dc7-f009-425f-afa3-294ba94b64e2.json
index 2f0b38a..23da397 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cbb1d58a-133a-45ff-8e58-1e96660d647d.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--15ee8dc7-f009-425f-afa3-294ba94b64e2.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--8c5c0a06-47fe-443b-b543-096ab6ac04ae",
+ "id": "bundle--a09205e2-6679-4790-9736-50a69c81955c",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--cbb1d58a-133a-45ff-8e58-1e96660d647d",
- "created_by_ref": "identity--28b7f8a3-cedc-4931-b86d-7ae29dcda541",
- "created": "2022-07-02T17:28:36.9366Z",
- "modified": "2022-07-02T17:28:36.9366Z",
- "name": "From ignorant agents",
- "description": "TA15",
+ "id": "attack-pattern--15ee8dc7-f009-425f-afa3-294ba94b64e2",
+ "created_by_ref": "identity--94370512-0b2d-4e80-b09c-d70e6be46569",
+ "created": "2022-07-02T19:59:12.622007Z",
+ "modified": "2022-07-02T19:59:12.622007Z",
+ "name": "Raise funds from ignorant agents",
+ "description": "Raising funds from ignorant agents may include scams, donations intended for one stated purpose but then used for another, etc. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--37346810-dbbc-46cd-8e8d-4af68e0f4e00"
+ "marking-definition--c458fca1-530d-44fe-bc43-5b6f0fa2c9da"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7cb535a6-b4b0-4773-b95c-1a79fd9ce904.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--184c89b3-70da-473d-b547-3fde387a8d23.json
similarity index 64%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--7cb535a6-b4b0-4773-b95c-1a79fd9ce904.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--184c89b3-70da-473d-b547-3fde387a8d23.json
index 5bf4329..13de92b 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7cb535a6-b4b0-4773-b95c-1a79fd9ce904.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--184c89b3-70da-473d-b547-3fde387a8d23.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--b551a169-ad48-408b-92dc-68cc3f3f23ce",
+ "id": "bundle--2b92bd31-8687-444b-bc00-35d115a53537",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--7cb535a6-b4b0-4773-b95c-1a79fd9ce904",
- "created_by_ref": "identity--68ed172e-3e10-4c3d-8c4a-d3b3b91bc57b",
- "created": "2022-07-02T17:28:36.99626Z",
- "modified": "2022-07-02T17:28:36.99626Z",
+ "id": "attack-pattern--184c89b3-70da-473d-b547-3fde387a8d23",
+ "created_by_ref": "identity--eb1637be-a536-4cf9-aa46-7f7e08b0ed33",
+ "created": "2022-07-02T19:59:12.720433Z",
+ "modified": "2022-07-02T19:59:12.720433Z",
"name": "Attract Traditional Media",
- "description": "TA09",
+ "description": "Deliver content by attracting the attention of traditional media (earned media).",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e208f368-5c7c-44b0-b2ba-9d77e21f7fbf"
+ "marking-definition--d9711ec4-3c81-4590-8a6c-46789acd5d05"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1b7f7c35-42b5-4fd3-828d-aff89f941850.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1899a266-350e-4e86-ba2a-d783744ff76d.json
similarity index 59%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--1b7f7c35-42b5-4fd3-828d-aff89f941850.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--1899a266-350e-4e86-ba2a-d783744ff76d.json
index 00b31fd..25d5ba0 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1b7f7c35-42b5-4fd3-828d-aff89f941850.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1899a266-350e-4e86-ba2a-d783744ff76d.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--efff3daf-a18f-4ba3-b848-7cd6ad427d16",
+ "id": "bundle--9f2222c2-16bf-42f6-9516-ed416eba81ce",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--1b7f7c35-42b5-4fd3-828d-aff89f941850",
- "created_by_ref": "identity--00f4d831-60e1-4e33-95b2-77b1bd8162ef",
- "created": "2022-07-02T17:28:36.955635Z",
- "modified": "2022-07-02T17:28:36.955635Z",
+ "id": "attack-pattern--1899a266-350e-4e86-ba2a-d783744ff76d",
+ "created_by_ref": "identity--43cb3419-f997-45de-bbab-300f2db14906",
+ "created": "2022-07-02T19:59:12.642258Z",
+ "modified": "2022-07-02T19:59:12.642258Z",
"name": "Dismiss",
- "description": "TA02",
+ "description": "Push back against criticism by dismissing your critics. This might be arguing that the critics use a different standard for you than with other actors or themselves; or arguing that their criticism is biased.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--eaea6a55-8a6d-4460-85ce-63ec5302ec5a"
+ "marking-definition--e29453eb-0dae-4f36-be8d-8e1b2958e147"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e4eec620-e076-447d-9d6c-2e63edf671da.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1a85979f-226f-4f03-bd53-4bd81807bd7b.json
similarity index 63%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--e4eec620-e076-447d-9d6c-2e63edf671da.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--1a85979f-226f-4f03-bd53-4bd81807bd7b.json
index 09a5f5b..28e1d20 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e4eec620-e076-447d-9d6c-2e63edf671da.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1a85979f-226f-4f03-bd53-4bd81807bd7b.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--8ba71937-825a-42a8-adaf-4512b1f362cb",
+ "id": "bundle--57e40d28-3a10-4ac6-9d64-18e7aed22807",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--e4eec620-e076-447d-9d6c-2e63edf671da",
- "created_by_ref": "identity--5514c907-b96f-4d1b-b359-d88830fb973f",
- "created": "2022-07-02T17:28:36.985097Z",
- "modified": "2022-07-02T17:28:36.985097Z",
+ "id": "attack-pattern--1a85979f-226f-4f03-bd53-4bd81807bd7b",
+ "created_by_ref": "identity--86789132-0ca6-4685-bf56-7c369788883a",
+ "created": "2022-07-02T19:59:12.671407Z",
+ "modified": "2022-07-02T19:59:12.671407Z",
"name": "Livestream",
- "description": "TA07",
+ "description": "A livestream refers to an online broadcast capability that allows for real-time communication to closed or open networks.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--6debcaac-79fb-4d39-8883-ce540676433d"
+ "marking-definition--bf332cd4-6a38-4fba-a6c6-f0f125ce6b66"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f0252e68-f05e-4284-b9da-1f406874c630.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1b073cb4-f884-4e16-9fdf-df9fbf44840b.json
similarity index 68%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--f0252e68-f05e-4284-b9da-1f406874c630.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--1b073cb4-f884-4e16-9fdf-df9fbf44840b.json
index 9141f94..60e8527 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f0252e68-f05e-4284-b9da-1f406874c630.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1b073cb4-f884-4e16-9fdf-df9fbf44840b.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--4ed5b357-b844-47d5-8e1a-d74df9cde831",
+ "id": "bundle--3969c68e-9473-4e5f-b893-8c0e584e1779",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--f0252e68-f05e-4284-b9da-1f406874c630",
- "created_by_ref": "identity--4813e2e2-ad08-4152-9de9-76daacc09b0b",
- "created": "2022-07-02T17:28:36.992442Z",
- "modified": "2022-07-02T17:28:36.992442Z",
+ "id": "attack-pattern--1b073cb4-f884-4e16-9fdf-df9fbf44840b",
+ "created_by_ref": "identity--77ca8372-b414-4089-aed1-6961a209822e",
+ "created": "2022-07-02T19:59:12.679343Z",
+ "modified": "2022-07-02T19:59:12.679343Z",
"name": "Radio",
- "description": "TA07",
+ "description": "Radio",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--20efdb02-56fa-47ad-96d4-788b0117b3b0"
+ "marking-definition--5e8333c9-0274-45ff-b099-5ae32834bbbf"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1d4bebe8-8bab-4066-91ad-45a3fef5161f.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1d4bebe8-8bab-4066-91ad-45a3fef5161f.json
deleted file mode 100644
index d778e34..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1d4bebe8-8bab-4066-91ad-45a3fef5161f.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--5e8c74f2-fcd3-403a-aad9-ea475e6ed069",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--1d4bebe8-8bab-4066-91ad-45a3fef5161f",
- "created_by_ref": "identity--c4feb0dc-f31c-4161-b6f0-c52d03b3a5b0",
- "created": "2022-07-02T17:28:36.972743Z",
- "modified": "2022-07-02T17:28:36.972743Z",
- "name": "Create Cyborg Accounts",
- "description": "TA15",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "establish-social-assets"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0090.002.md",
- "external_id": "T0090.002"
- }
- ],
- "object_marking_refs": [
- "marking-definition--4e12ffe3-9fb9-49b5-9d15-91081cd84641"
- ],
- "x_mitre_is_subtechnique": true,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4b2a1b42-547b-459a-97b9-7fb7915359dc.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1d658549-c2db-4d51-805e-7f2577fe1a95.json
similarity index 51%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--4b2a1b42-547b-459a-97b9-7fb7915359dc.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--1d658549-c2db-4d51-805e-7f2577fe1a95.json
index 197c81e..2096f4c 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4b2a1b42-547b-459a-97b9-7fb7915359dc.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1d658549-c2db-4d51-805e-7f2577fe1a95.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--ed00fb30-3773-4d42-9bda-849fb324357e",
+ "id": "bundle--5fdd8801-f09a-4a4e-968c-ad1ee38a874a",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4b2a1b42-547b-459a-97b9-7fb7915359dc",
- "created_by_ref": "identity--268f5f6b-c1d4-4361-a654-16bc69f8811f",
- "created": "2022-07-02T17:28:36.965211Z",
- "modified": "2022-07-02T17:28:36.965211Z",
+ "id": "attack-pattern--1d658549-c2db-4d51-805e-7f2577fe1a95",
+ "created_by_ref": "identity--cdeac2b0-99ec-42d6-920e-6a42e2ae603e",
+ "created": "2022-07-02T19:59:12.651441Z",
+ "modified": "2022-07-02T19:59:12.651441Z",
"name": "Appropriate Content",
- "description": "TA06",
+ "description": "An influence operation may take content from other sources with proper attribution. This content may be either misinformation content shared by others without malicious intent but now leveraged by the campaign as disinformation or disinformation content from other sources. Examples include the appropriation of content from one inauthentic news site to another inauthentic news site or network in ways that align with the originators licensing or terms of service.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7e86536b-cde3-40a7-9e2a-62ca826593e7"
+ "marking-definition--b20d4b56-d323-4906-87be-2ab192133807"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bdf75ac9-baea-4182-9357-997012b518f6.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1d79cd82-8ca4-4b12-8d95-af588445cc6d.json
similarity index 61%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--bdf75ac9-baea-4182-9357-997012b518f6.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--1d79cd82-8ca4-4b12-8d95-af588445cc6d.json
index 9fb776a..06f2782 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bdf75ac9-baea-4182-9357-997012b518f6.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1d79cd82-8ca4-4b12-8d95-af588445cc6d.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--23815323-b173-4d3d-b9c4-0434dc6b0dc6",
+ "id": "bundle--5bef39b5-7b5c-4a33-8106-94e83c7dee78",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--bdf75ac9-baea-4182-9357-997012b518f6",
- "created_by_ref": "identity--bf2e8864-324c-4b1c-99ea-002a4135fbac",
- "created": "2022-07-02T17:28:36.990855Z",
- "modified": "2022-07-02T17:28:36.990855Z",
+ "id": "attack-pattern--1d79cd82-8ca4-4b12-8d95-af588445cc6d",
+ "created_by_ref": "identity--a82cc2ab-a305-49b2-804b-f3df598f4340",
+ "created": "2022-07-02T19:59:12.677631Z",
+ "modified": "2022-07-02T19:59:12.677631Z",
"name": "Consumer Review Networks",
- "description": "TA07",
+ "description": "Platforms for finding, reviewing, and sharing information about brands, products, services, restaurants, travel destinations, etc. Examples include Yelp, TripAdvisor, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a304bf57-69ed-4428-84f4-7028cd2d7156"
+ "marking-definition--620c99a6-f5bd-41ab-8a99-16c2fb9afd70"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e99f96c7-38d4-4fa9-b337-984da5ff0e9c.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1df3f525-2142-439a-94c1-a600464e1e6e.json
similarity index 63%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--e99f96c7-38d4-4fa9-b337-984da5ff0e9c.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--1df3f525-2142-439a-94c1-a600464e1e6e.json
index 2b33da5..76c10db 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e99f96c7-38d4-4fa9-b337-984da5ff0e9c.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1df3f525-2142-439a-94c1-a600464e1e6e.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--faae902e-d9a3-4cc9-a47a-5ce7db5605fb",
+ "id": "bundle--88337ec9-e5ad-48a0-b696-cbaf5be6945c",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--e99f96c7-38d4-4fa9-b337-984da5ff0e9c",
- "created_by_ref": "identity--ff5bbe73-3479-42b4-9b7d-0e9028d50242",
- "created": "2022-07-02T17:28:36.951381Z",
- "modified": "2022-07-02T17:28:36.951381Z",
+ "id": "attack-pattern--1df3f525-2142-439a-94c1-a600464e1e6e",
+ "created_by_ref": "identity--fad6e3e4-434b-4351-a9a9-ff717bf0c296",
+ "created": "2022-07-02T19:59:12.637924Z",
+ "modified": "2022-07-02T19:59:12.637924Z",
"name": "Sell Merchandise",
- "description": "TA10",
+ "description": "Sell mechandise refers to getting the message or narrative into physical space in the offline world while making money",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--cfd1b546-76b4-42c7-8c53-8fa3a054330d"
+ "marking-definition--38b3f210-25ee-412d-b683-bc0cfd6c6353"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ef14ef26-c877-4e88-98b7-34cdaf7d45e3.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1fc51355-6d03-4f89-b4b2-dcf816109371.json
similarity index 61%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--ef14ef26-c877-4e88-98b7-34cdaf7d45e3.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--1fc51355-6d03-4f89-b4b2-dcf816109371.json
index 27f1a31..dc83aa2 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ef14ef26-c877-4e88-98b7-34cdaf7d45e3.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1fc51355-6d03-4f89-b4b2-dcf816109371.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--749e20e3-1485-4077-a3d0-e4d99878525f",
+ "id": "bundle--45c33fe1-6fe6-4977-a189-78efc0a4355f",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--ef14ef26-c877-4e88-98b7-34cdaf7d45e3",
- "created_by_ref": "identity--f8e716a1-af74-44ed-b672-a1d0c898d1fc",
- "created": "2022-07-02T17:28:36.939501Z",
- "modified": "2022-07-02T17:28:36.939501Z",
+ "id": "attack-pattern--1fc51355-6d03-4f89-b4b2-dcf816109371",
+ "created_by_ref": "identity--a4bd581b-b596-46a9-b779-6595e9b43d72",
+ "created": "2022-07-02T19:59:12.625184Z",
+ "modified": "2022-07-02T19:59:12.625184Z",
"name": "Trial content",
- "description": "TA08",
+ "description": "Iteratively test incident performance (messages, content etc), e.g. A/B test headline/content enagagement metrics; website and/or funding campaign conversion rates",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e125dd76-b89f-4bc2-ae33-145ff5ed4eb8"
+ "marking-definition--f0ac2680-e2c5-470b-a48d-4997f2cef24e"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--173741da-6c65-45a2-8b72-4692e694c345.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--20d348c8-0ed6-46b8-adea-6f82f154b5d4.json
similarity index 61%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--173741da-6c65-45a2-8b72-4692e694c345.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--20d348c8-0ed6-46b8-adea-6f82f154b5d4.json
index a088dfe..cf17bb9 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--173741da-6c65-45a2-8b72-4692e694c345.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--20d348c8-0ed6-46b8-adea-6f82f154b5d4.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--ca8ed984-4ca9-4236-9943-9e6543af6f57",
+ "id": "bundle--73b1f3a6-4d32-4fb8-b88e-cb223c0090fe",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--173741da-6c65-45a2-8b72-4692e694c345",
- "created_by_ref": "identity--322f05b2-e939-4e95-b04e-632436df4704",
- "created": "2022-07-02T17:28:36.958901Z",
- "modified": "2022-07-02T17:28:36.958901Z",
+ "id": "attack-pattern--20d348c8-0ed6-46b8-adea-6f82f154b5d4",
+ "created_by_ref": "identity--a2bd4d6f-29b5-4766-8248-040a8f2d7a00",
+ "created": "2022-07-02T19:59:12.645914Z",
+ "modified": "2022-07-02T19:59:12.645914Z",
"name": "Conduct Web Traffic Analysis",
- "description": "TA13",
+ "description": "An influence operation may conduct web traffic analysis to determine which search engines, keywords, websites, and advertisements gain the most traction with its target audience.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e4ac92c8-8d37-4ccc-85c3-8cd4b4d61d20"
+ "marking-definition--86b87cb1-b5ef-4459-8b87-85421fcccd84"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--429b3cc3-e187-450a-948e-49ef80c5b824.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--20e97210-a216-42aa-9a31-da2961f5dfa7.json
similarity index 59%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--429b3cc3-e187-450a-948e-49ef80c5b824.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--20e97210-a216-42aa-9a31-da2961f5dfa7.json
index 6067b87..3542f3b 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--429b3cc3-e187-450a-948e-49ef80c5b824.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--20e97210-a216-42aa-9a31-da2961f5dfa7.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--32b50d1c-1ffe-4596-8ad9-8b2a2f737f1a",
+ "id": "bundle--0adee6df-5c16-4bd1-ad41-b6b41135be72",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--429b3cc3-e187-450a-948e-49ef80c5b824",
- "created_by_ref": "identity--15d3df4a-6b30-42ad-9069-4699987dc370",
- "created": "2022-07-02T17:28:37.001042Z",
- "modified": "2022-07-02T17:28:37.001042Z",
+ "id": "attack-pattern--20e97210-a216-42aa-9a31-da2961f5dfa7",
+ "created_by_ref": "identity--ac08327f-f696-4dce-8808-ddb6a02fe337",
+ "created": "2022-07-02T19:59:12.725259Z",
+ "modified": "2022-07-02T19:59:12.725259Z",
"name": "Block Content",
- "description": "TA18",
+ "description": "Content blocking refers to actions taken to restrict internet access or render certain areas of the internet inaccessible. An influence operation may restrict content based on both network and content attributes. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2fcce406-610d-47ed-a93e-19f2d05f9d89"
+ "marking-definition--f856625e-e68a-4855-82be-04efceaa09ed"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--21ea7783-4105-47f2-a8dd-aaa2ff34b0fa.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--21ea7783-4105-47f2-a8dd-aaa2ff34b0fa.json
deleted file mode 100644
index 1ca2b7a..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--21ea7783-4105-47f2-a8dd-aaa2ff34b0fa.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--dc86ff6e-c319-4cc6-83d0-68fe0691fabd",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--21ea7783-4105-47f2-a8dd-aaa2ff34b0fa",
- "created_by_ref": "identity--967749e1-c653-450d-84d1-cea23c65e1c1",
- "created": "2022-07-02T17:28:36.933327Z",
- "modified": "2022-07-02T17:28:36.933327Z",
- "name": "Leverage Existing Narratives",
- "description": "TA14",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "develop-narratives"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0003.md",
- "external_id": "T0003"
- }
- ],
- "object_marking_refs": [
- "marking-definition--3d055099-7b53-4537-ba8f-06dd874cbdb7"
- ],
- "x_mitre_is_subtechnique": false,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a9e19bbd-eceb-4167-a6e9-3de030befeff.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--226290e1-b4f4-4efc-97d9-66bb4b23ca75.json
similarity index 50%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--a9e19bbd-eceb-4167-a6e9-3de030befeff.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--226290e1-b4f4-4efc-97d9-66bb4b23ca75.json
index 45c07ac..70925d1 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a9e19bbd-eceb-4167-a6e9-3de030befeff.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--226290e1-b4f4-4efc-97d9-66bb4b23ca75.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--0ec0e063-a7a8-4285-b629-29aca65c09f0",
+ "id": "bundle--cf42c9cf-dadd-4d6b-9003-b4a8a2c610d7",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a9e19bbd-eceb-4167-a6e9-3de030befeff",
- "created_by_ref": "identity--0ee865aa-e017-4429-a1dc-9562ba3b1ddb",
- "created": "2022-07-02T17:28:36.994665Z",
- "modified": "2022-07-02T17:28:36.994665Z",
+ "id": "attack-pattern--226290e1-b4f4-4efc-97d9-66bb4b23ca75",
+ "created_by_ref": "identity--375b2c10-2551-48f0-b064-7bf0351c5234",
+ "created": "2022-07-02T19:59:12.718561Z",
+ "modified": "2022-07-02T19:59:12.718561Z",
"name": "Share Memes",
- "description": "TA09",
+ "description": "Memes are one of the most important single artefact types in all of computational propaganda. Memes in this framework denotes the narrow image-based definition. But that naming is no accident, as these items have most of the important properties of Dawkins' original conception as a self-replicating unit of culture. Memes pull together reference and commentary; image and narrative; emotion and message. Memes are a powerful tool and the heart of modern influence campaigns.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--f411e668-466b-4446-b399-e13755aee1c7"
+ "marking-definition--6e625e76-5743-4b29-8f9c-898aaece03e4"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--19641024-86e4-435e-8f10-6f6fcac96da9.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--22aa8f48-20f8-4b96-bd44-2ae1b1621447.json
similarity index 56%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--19641024-86e4-435e-8f10-6f6fcac96da9.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--22aa8f48-20f8-4b96-bd44-2ae1b1621447.json
index 301851a..655acc6 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--19641024-86e4-435e-8f10-6f6fcac96da9.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--22aa8f48-20f8-4b96-bd44-2ae1b1621447.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--7d92ddaa-988b-4463-805f-3537b513fe5c",
+ "id": "bundle--7d708a4e-0f7f-44bc-a34c-9eb20ae3ebe8",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--19641024-86e4-435e-8f10-6f6fcac96da9",
- "created_by_ref": "identity--a1988b57-6179-44ec-a26c-9383f424accd",
- "created": "2022-07-02T17:28:37.009411Z",
- "modified": "2022-07-02T17:28:37.009411Z",
+ "id": "attack-pattern--22aa8f48-20f8-4b96-bd44-2ae1b1621447",
+ "created_by_ref": "identity--7b17dc40-be8e-4280-8c5c-55d1dcfe0a5d",
+ "created": "2022-07-02T19:59:12.734051Z",
+ "modified": "2022-07-02T19:59:12.734051Z",
"name": "Deny involvement",
- "description": "TA11",
+ "description": "Without \"smoking gun\" proof (and even with proof), incident creator can or will deny involvement. This technique also leverages the attacker advantages outlined in \"Demand insurmountable proof\", specifically the asymmetric disadvantage for truth-tellers in a \"firehose of misinformation\" environment.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--46a9162f-5fe4-440f-909e-921dd01170ab"
+ "marking-definition--f860ae0f-7260-49e6-b668-e719a787a52e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--70885523-55fd-46ff-aa6f-59ff4810dfe5.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--231b3ff6-8ecb-4cd8-b9eb-ca7740298c61.json
similarity index 58%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--70885523-55fd-46ff-aa6f-59ff4810dfe5.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--231b3ff6-8ecb-4cd8-b9eb-ca7740298c61.json
index e769ede..288f7af 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--70885523-55fd-46ff-aa6f-59ff4810dfe5.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--231b3ff6-8ecb-4cd8-b9eb-ca7740298c61.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--88038b0b-c234-4926-83d3-82e35922fd58",
+ "id": "bundle--9c1288f1-5dfd-4167-bc59-fa8d638c1504",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--70885523-55fd-46ff-aa6f-59ff4810dfe5",
- "created_by_ref": "identity--a41d0b6e-5ad6-43f7-b8e1-d459c7072e95",
- "created": "2022-07-02T17:28:36.968753Z",
- "modified": "2022-07-02T17:28:36.968753Z",
+ "id": "attack-pattern--231b3ff6-8ecb-4cd8-b9eb-ca7740298c61",
+ "created_by_ref": "identity--d8019794-70dc-47da-9bae-5dffca5e9949",
+ "created": "2022-07-02T19:59:12.655093Z",
+ "modified": "2022-07-02T19:59:12.655093Z",
"name": "Develop AI-Generated Videos (Deepfakes)",
- "description": "TA06",
+ "description": "Deepfakes refer to AI-generated falsified photos, videos, or soundbites. An influence operation may use deepfakes to depict an inauthentic situation by synthetically recreating an individual\u2019s face, body, voice, and physical gestures.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--1f2faa29-eedf-4947-8bd2-c1344b0a7247"
+ "marking-definition--0a97bad2-3a12-41fe-8c81-42b21d3e0934"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--233e4edf-3f30-456f-9875-2e0965434706.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--233e4edf-3f30-456f-9875-2e0965434706.json
deleted file mode 100644
index a003cb5..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--233e4edf-3f30-456f-9875-2e0965434706.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--ad4e8155-52a0-4125-bdfb-78a39b221e08",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--233e4edf-3f30-456f-9875-2e0965434706",
- "created_by_ref": "identity--262d6a84-6c99-49a5-b7bd-87dc1a686ec1",
- "created": "2022-07-02T17:28:36.999572Z",
- "modified": "2022-07-02T17:28:36.999572Z",
- "name": "Bypass Content Blocking",
- "description": "TA17",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "maximize-exposure"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0121.001.md",
- "external_id": "T0121.001"
- }
- ],
- "object_marking_refs": [
- "marking-definition--2825c31e-6488-47d6-8ded-f24b8c94ec21"
- ],
- "x_mitre_is_subtechnique": true,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--070ebd8c-f578-4334-8f77-06b59315438e.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--23b92b9a-d1e2-4049-ac91-99c5f094a84e.json
similarity index 61%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--070ebd8c-f578-4334-8f77-06b59315438e.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--23b92b9a-d1e2-4049-ac91-99c5f094a84e.json
index 688c52f..d6fa8fa 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--070ebd8c-f578-4334-8f77-06b59315438e.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--23b92b9a-d1e2-4049-ac91-99c5f094a84e.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--67ec5b71-1597-4458-b946-31be89234437",
+ "id": "bundle--9017e013-96bb-4a3b-891e-04e76d451570",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--070ebd8c-f578-4334-8f77-06b59315438e",
- "created_by_ref": "identity--a2e14224-6641-4671-9c7c-86eb2fb2adf6",
- "created": "2022-07-02T17:28:36.977679Z",
- "modified": "2022-07-02T17:28:36.977679Z",
+ "id": "attack-pattern--23b92b9a-d1e2-4049-ac91-99c5f094a84e",
+ "created_by_ref": "identity--38921490-7bcc-4bf4-a3aa-0580b963671c",
+ "created": "2022-07-02T19:59:12.663957Z",
+ "modified": "2022-07-02T19:59:12.663957Z",
"name": "Identify susceptible targets in networks",
- "description": "TA15",
+ "description": "When seeking to infiltrate an existing network, an influence operation may identify individuals and groups that might be susceptible to being co-opted or influenced.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--44c98b96-49cd-4971-a2bb-ec346392a6d9"
+ "marking-definition--ede67eb4-1420-4d5c-9c93-340c44f02e25"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--782d58da-2c24-4520-a283-b89b54b5e59a.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2400f6a0-b97e-4640-877d-946f68712265.json
similarity index 55%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--782d58da-2c24-4520-a283-b89b54b5e59a.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--2400f6a0-b97e-4640-877d-946f68712265.json
index 8da4006..b755260 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--782d58da-2c24-4520-a283-b89b54b5e59a.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2400f6a0-b97e-4640-877d-946f68712265.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--94bc94a7-42a7-4d7d-904b-42d03c9f0a43",
+ "id": "bundle--23f21b84-860f-42d8-a2b6-cc2ca7796fce",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--782d58da-2c24-4520-a283-b89b54b5e59a",
- "created_by_ref": "identity--a5e04142-cb47-4bdc-8a55-1bb6916d58c5",
- "created": "2022-07-02T17:28:36.941408Z",
- "modified": "2022-07-02T17:28:36.941408Z",
+ "id": "attack-pattern--2400f6a0-b97e-4640-877d-946f68712265",
+ "created_by_ref": "identity--88278ef9-c0a1-44ec-a09a-d1b2da7b4a19",
+ "created": "2022-07-02T19:59:12.627403Z",
+ "modified": "2022-07-02T19:59:12.627403Z",
"name": "Edit Open-Source Content",
- "description": "TA06",
+ "description": "An influence operation may edit open-source content, such as collaborative blogs or encyclopedias, to promote its narratives on outlets with existing credibility and audiences. Editing open-source content may allow an operation to post content on platforms without dedicating resources to the creation and maintenance of its own assets. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--f4537f08-0294-4f22-940e-e088d6c447e4"
+ "marking-definition--81c6112b-1d13-446a-bf37-2b7a46489e5e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--89258f59-9d58-42c6-9fbb-ceffd2530a76.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--24bd7bc9-64dc-4ec9-b0e0-551c00666462.json
similarity index 61%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--89258f59-9d58-42c6-9fbb-ceffd2530a76.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--24bd7bc9-64dc-4ec9-b0e0-551c00666462.json
index 484864f..bb5d7d1 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--89258f59-9d58-42c6-9fbb-ceffd2530a76.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--24bd7bc9-64dc-4ec9-b0e0-551c00666462.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--0414db33-4d39-47b5-a882-6f7a4f734a02",
+ "id": "bundle--c367bd28-6045-42e2-b777-096cb10693b6",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--89258f59-9d58-42c6-9fbb-ceffd2530a76",
- "created_by_ref": "identity--da218172-fe47-468f-b30e-15ac14ff4c07",
- "created": "2022-07-02T17:28:36.965533Z",
- "modified": "2022-07-02T17:28:36.965533Z",
+ "id": "attack-pattern--24bd7bc9-64dc-4ec9-b0e0-551c00666462",
+ "created_by_ref": "identity--e88ac6cd-91a4-43ce-87fe-2ce7cea02c55",
+ "created": "2022-07-02T19:59:12.651772Z",
+ "modified": "2022-07-02T19:59:12.651772Z",
"name": "Develop Text-based Content",
- "description": "TA06",
+ "description": "Creating and editing false or misleading text-based artifacts, often aligned with one or more specific narratives, for use in a disinformation campaign.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a5c9ea13-f2ea-4b1b-9f79-aee853e8ae56"
+ "marking-definition--b37247d1-211f-4f79-869e-04bdbb52aa65"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2f2745b8-801a-41b5-b85a-ffba5caf53c4.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2506b127-497f-4c10-80ee-6ccfebea2fda.json
similarity index 55%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--2f2745b8-801a-41b5-b85a-ffba5caf53c4.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--2506b127-497f-4c10-80ee-6ccfebea2fda.json
index d5fa2f0..3ea8ef9 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2f2745b8-801a-41b5-b85a-ffba5caf53c4.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2506b127-497f-4c10-80ee-6ccfebea2fda.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--07a5bd7f-8927-45d3-8717-b1235c6e965a",
+ "id": "bundle--772709a6-279d-43c3-abbb-804857e21546",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--2f2745b8-801a-41b5-b85a-ffba5caf53c4",
- "created_by_ref": "identity--0405c5ac-6467-492d-b6d4-5c3521a54d70",
- "created": "2022-07-02T17:28:36.996895Z",
- "modified": "2022-07-02T17:28:36.996895Z",
+ "id": "attack-pattern--2506b127-497f-4c10-80ee-6ccfebea2fda",
+ "created_by_ref": "identity--9277d520-da67-489e-b3dd-5298da41a1f1",
+ "created": "2022-07-02T19:59:12.721135Z",
+ "modified": "2022-07-02T19:59:12.721135Z",
"name": "Cross-Posting",
- "description": "TA17",
+ "description": "Cross-posting refers to posting the same message to multiple internet discussions, social media platforms or accounts, or news groups at one time. An influence operation may post content online in multiple communities and platforms to increase the chances of content exposure to the target audience. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e9e8c04d-b24d-49cf-8fd9-842f87544f7e"
+ "marking-definition--6f2cdafb-db00-4820-a9f4-b2521e53b25a"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--337c05bc-515b-48e0-bf5c-d4cdd5bc7bba.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--25990799-9c4f-4941-aa2c-5deab1946ef1.json
similarity index 67%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--337c05bc-515b-48e0-bf5c-d4cdd5bc7bba.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--25990799-9c4f-4941-aa2c-5deab1946ef1.json
index 407200f..74e9563 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--337c05bc-515b-48e0-bf5c-d4cdd5bc7bba.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--25990799-9c4f-4941-aa2c-5deab1946ef1.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--84234c7f-3f20-4fb6-8c96-1d8f8ad26ec6",
+ "id": "bundle--b42f5b34-c235-4a84-bb0b-61f4750f3b56",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--337c05bc-515b-48e0-bf5c-d4cdd5bc7bba",
- "created_by_ref": "identity--0c7a74b3-5f15-4ce9-a4d6-801bc9e3d440",
- "created": "2022-07-02T17:28:36.982541Z",
- "modified": "2022-07-02T17:28:36.982541Z",
+ "id": "attack-pattern--25990799-9c4f-4941-aa2c-5deab1946ef1",
+ "created_by_ref": "identity--52750422-add6-44fc-a900-d21d660d5cc4",
+ "created": "2022-07-02T19:59:12.668816Z",
+ "modified": "2022-07-02T19:59:12.668816Z",
"name": "Co-Opt Trusted Individuals",
- "description": "TA16",
+ "description": "Co-Opt Trusted Individuals",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--949b58c0-5ed3-4978-ae48-7387549fc4d4"
+ "marking-definition--9ecba7a6-c6c8-4f2c-bc31-529a08bca7b3"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fbff3e68-3833-46aa-8b05-223b16c12608.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2707372c-26a1-4c1f-8875-65a2433cda70.json
similarity index 53%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--fbff3e68-3833-46aa-8b05-223b16c12608.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--2707372c-26a1-4c1f-8875-65a2433cda70.json
index f393211..a8bd65b 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fbff3e68-3833-46aa-8b05-223b16c12608.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2707372c-26a1-4c1f-8875-65a2433cda70.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--006ab315-800a-4d2b-8735-b91c80f0a2f6",
+ "id": "bundle--680ee7a9-d430-4361-8fed-61ee7983e982",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--fbff3e68-3833-46aa-8b05-223b16c12608",
- "created_by_ref": "identity--6a104dc8-ccde-49f0-864b-994b0294ab14",
- "created": "2022-07-02T17:28:36.980306Z",
- "modified": "2022-07-02T17:28:36.980306Z",
+ "id": "attack-pattern--2707372c-26a1-4c1f-8875-65a2433cda70",
+ "created_by_ref": "identity--d7566583-5ed1-4464-a35c-fe83bcc47cb9",
+ "created": "2022-07-02T19:59:12.666562Z",
+ "modified": "2022-07-02T19:59:12.666562Z",
"name": "Establish Inauthentic News Sites",
- "description": "TA16",
+ "description": "Modern computational propaganda makes use of a cadre of imposter news sites spreading globally. These sites, sometimes motivated by concerns other than propaganda--for instance, click-based revenue--often have some superficial markers of authenticity, such as naming and site-design. But many can be quickly exposed with reference to their owenership, reporting history and adverstising details.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--51402895-402c-45cc-b4c7-35cf44608720"
+ "marking-definition--18730cb6-f5ee-4211-8dc4-b1db494f33c9"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--aaab0e8d-7862-4185-9981-e187077cf0a5.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--277e6020-d211-484d-8612-f7eb3e5ef867.json
similarity index 52%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--aaab0e8d-7862-4185-9981-e187077cf0a5.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--277e6020-d211-484d-8612-f7eb3e5ef867.json
index 7160f61..9223150 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--aaab0e8d-7862-4185-9981-e187077cf0a5.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--277e6020-d211-484d-8612-f7eb3e5ef867.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--cc86e654-c66d-4335-89b8-b5f53924a2ba",
+ "id": "bundle--21dd4925-6008-4106-ab77-b7b6b396993d",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--aaab0e8d-7862-4185-9981-e187077cf0a5",
- "created_by_ref": "identity--d1793193-3240-4660-a3ad-e129ace1571b",
- "created": "2022-07-02T17:28:36.983506Z",
- "modified": "2022-07-02T17:28:36.983506Z",
+ "id": "attack-pattern--277e6020-d211-484d-8612-f7eb3e5ef867",
+ "created_by_ref": "identity--653b5bd3-9007-4137-9e3c-7e5e0e02d5a6",
+ "created": "2022-07-02T19:59:12.669783Z",
+ "modified": "2022-07-02T19:59:12.669783Z",
"name": "Create Localized Content",
- "description": "TA05",
+ "description": "Localized content refers to content that appeals to a specific community of individuals, often in defined geographic areas. An operation may create localized content using local language and dialects to resonate with its target audience and blend in with other local news and social media. Localized content may help an operation increase legitimacy, avoid detection, and complicate external attribution.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c49618b7-d40e-42af-ba51-6eca0964ec92"
+ "marking-definition--e440ec90-1df2-46d9-bc31-b0c89d7e6240"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--284293b6-e1fd-4072-96d3-b5ed72056848.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--284293b6-e1fd-4072-96d3-b5ed72056848.json
deleted file mode 100644
index 05db5eb..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--284293b6-e1fd-4072-96d3-b5ed72056848.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--7fa460cb-27cb-445b-8922-025624c87eea",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--284293b6-e1fd-4072-96d3-b5ed72056848",
- "created_by_ref": "identity--cc6a0050-4a41-40e5-8b08-fc87e8ba515d",
- "created": "2022-07-02T17:28:36.94269Z",
- "modified": "2022-07-02T17:28:36.94269Z",
- "name": "Seed Kernel of truth",
- "description": "TA08",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "conduct-pump-priming"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0042.md",
- "external_id": "T0042"
- }
- ],
- "object_marking_refs": [
- "marking-definition--ff60f339-b9ec-4c6b-89bb-79e4740a345a"
- ],
- "x_mitre_is_subtechnique": false,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--87790d44-0beb-434e-bfae-178a7765a765.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--28efce68-0e87-431b-920f-9d678eb6f444.json
similarity index 58%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--87790d44-0beb-434e-bfae-178a7765a765.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--28efce68-0e87-431b-920f-9d678eb6f444.json
index 20b4ccf..73ec6e3 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--87790d44-0beb-434e-bfae-178a7765a765.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--28efce68-0e87-431b-920f-9d678eb6f444.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--699c29a8-b659-41ef-83a2-be360c02bd31",
+ "id": "bundle--2a592aa8-88ee-4556-abae-d98ed96b047e",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--87790d44-0beb-434e-bfae-178a7765a765",
- "created_by_ref": "identity--5bca8e21-6916-400f-a191-709b54d36368",
- "created": "2022-07-02T17:28:36.97001Z",
- "modified": "2022-07-02T17:28:36.97001Z",
+ "id": "attack-pattern--28efce68-0e87-431b-920f-9d678eb6f444",
+ "created_by_ref": "identity--2ddc4452-b30b-4f7f-9bf9-0adbd5bf1261",
+ "created": "2022-07-02T19:59:12.656068Z",
+ "modified": "2022-07-02T19:59:12.656068Z",
"name": "Develop AI-Generated Audio (Deepfakes)",
- "description": "TA06",
+ "description": "Deepfakes refer to AI-generated falsified photos, videos, or soundbites. An influence operation may use deepfakes to depict an inauthentic situation by synthetically recreating an individual\u2019s face, body, voice, and physical gestures.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--0b60d30e-dd14-4f81-ab6a-1cba0bfcffaf"
+ "marking-definition--90bbb32a-bc70-48e6-a2b2-ecf39cc99fab"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6bc7f315-d082-49de-b664-9fb7b9b1184c.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--29f4ee70-1a5c-4fcd-b76b-07b7a99b356a.json
similarity index 64%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--6bc7f315-d082-49de-b664-9fb7b9b1184c.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--29f4ee70-1a5c-4fcd-b76b-07b7a99b356a.json
index d2af018..e646930 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6bc7f315-d082-49de-b664-9fb7b9b1184c.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--29f4ee70-1a5c-4fcd-b76b-07b7a99b356a.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--651bd410-3027-46b2-8bda-c0208d01d33b",
+ "id": "bundle--1179b6cf-ff0e-4262-a4fe-79f2ac9d0534",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--6bc7f315-d082-49de-b664-9fb7b9b1184c",
- "created_by_ref": "identity--cccd6f9a-3a47-4c33-9c50-6315504e053b",
- "created": "2022-07-02T17:28:37.005227Z",
- "modified": "2022-07-02T17:28:37.005227Z",
+ "id": "attack-pattern--29f4ee70-1a5c-4fcd-b76b-07b7a99b356a",
+ "created_by_ref": "identity--d966710e-85b1-4115-be93-ff6aad5fc30a",
+ "created": "2022-07-02T19:59:12.729758Z",
+ "modified": "2022-07-02T19:59:12.729758Z",
"name": "Encourage Physical Violence",
- "description": "TA10",
+ "description": "An influence operation may Encourage others to engage in Physical Violence to achieve campaign goals. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2098d78b-89f8-49cd-9f5c-72041e533a9f"
+ "marking-definition--7c9476a4-ca41-4ec5-936a-4ff3e579f594"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2a0404a5-1a70-4be4-979c-6ecfd5595560.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2a0404a5-1a70-4be4-979c-6ecfd5595560.json
new file mode 100644
index 0000000..06d2310
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2a0404a5-1a70-4be4-979c-6ecfd5595560.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--f2e8acfe-6571-48ea-b3f4-61b39007f04e",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--2a0404a5-1a70-4be4-979c-6ecfd5595560",
+ "created_by_ref": "identity--f45c1a1b-52a1-497c-af7d-3a19009b4031",
+ "created": "2022-07-02T19:59:12.628516Z",
+ "modified": "2022-07-02T19:59:12.628516Z",
+ "name": "Demand insurmountable proof",
+ "description": "Campaigns often leverage tactical and informational asymmetries on the threat surface, as seen in the Distort and Deny strategies, and the \"firehose of misinformation\". Specifically, conspiracy theorists can be repeatedly wrong, but advocates of the truth need to be perfect. By constantly escalating demands for proof, propagandists can effectively leverage this asymmetry while also priming its future use, often with an even greater asymmetric advantage. The conspiracist is offered freer rein for a broader range of \"questions\" while the truth teller is burdened with higher and higher standards of proof.",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "develop-narratives"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0040.md",
+ "external_id": "T0040"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--02b0b700-bc50-45e7-a923-9fa628d65eda"
+ ],
+ "x_mitre_is_subtechnique": false,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--57c32589-908b-4293-aeab-c965c4bf3e51.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2a53870d-aad2-44df-9129-dfd6d1c2d8cc.json
similarity index 63%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--57c32589-908b-4293-aeab-c965c4bf3e51.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--2a53870d-aad2-44df-9129-dfd6d1c2d8cc.json
index 74050d2..dc7322c 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--57c32589-908b-4293-aeab-c965c4bf3e51.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2a53870d-aad2-44df-9129-dfd6d1c2d8cc.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--93743baa-d9fb-4f78-b75b-e17825d1eb45",
+ "id": "bundle--5362e6b4-9d7f-4f2e-8074-0a9741b1ebaf",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--57c32589-908b-4293-aeab-c965c4bf3e51",
- "created_by_ref": "identity--f5804c45-b5ae-4986-a182-5086728405fa",
- "created": "2022-07-02T17:28:36.996578Z",
- "modified": "2022-07-02T17:28:36.996578Z",
+ "id": "attack-pattern--2a53870d-aad2-44df-9129-dfd6d1c2d8cc",
+ "created_by_ref": "identity--dcfa4dc7-b1f8-4aa3-bcb3-290c456bbb95",
+ "created": "2022-07-02T19:59:12.720782Z",
+ "modified": "2022-07-02T19:59:12.720782Z",
"name": "Amplify Existing Narrative",
- "description": "TA17",
+ "description": "An influence operation may amplify existing narratives that align with its narratives to support operation objectives. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--61b605ac-0b02-49be-95a1-0826d0e46da2"
+ "marking-definition--c86a5d90-6fb6-4c04-be5d-e58cb26096b2"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2a7c503c-ec0b-4697-9e9e-9a036af8b3f1.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2a7c503c-ec0b-4697-9e9e-9a036af8b3f1.json
new file mode 100644
index 0000000..49aaf41
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2a7c503c-ec0b-4697-9e9e-9a036af8b3f1.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--3a1ced50-b989-4aa8-b54d-e4f2f0eba88b",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--2a7c503c-ec0b-4697-9e9e-9a036af8b3f1",
+ "created_by_ref": "identity--fe9ad911-7029-4966-a74c-776f17908d1e",
+ "created": "2022-07-02T19:59:12.628924Z",
+ "modified": "2022-07-02T19:59:12.628924Z",
+ "name": "Seed Kernel of truth",
+ "description": "Wrap lies or altered context/facts around truths. Influence campaigns pursue a variety of objectives with respect to target audiences, prominent among them: 1. undermine a narrative commonly referenced in the target audience; or 2. promote a narrative less common in the target audience, but preferred by the attacker. In both cases, the attacker is presented with a heavy lift. They must change the relative importance of various narratives in the interpretation of events, despite contrary tendencies. When messaging makes use of factual reporting to promote these adjustments in the narrative space, they are less likely to be dismissed out of hand; when messaging can juxtapose a (factual) truth about current affairs with the (abstract) truth explicated in these narratives, propagandists can undermine or promote them selectively. Context matters.",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "conduct-pump-priming"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0042.md",
+ "external_id": "T0042"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--09c6b85a-54b3-425b-abb1-d196e40d30af"
+ ],
+ "x_mitre_is_subtechnique": false,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ccde7e48-1f25-46dd-a38f-39758274a024.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2b2b06d9-26d3-4e69-93b3-5a3f37363b5f.json
similarity index 51%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--ccde7e48-1f25-46dd-a38f-39758274a024.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--2b2b06d9-26d3-4e69-93b3-5a3f37363b5f.json
index a5423bb..d409cf3 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ccde7e48-1f25-46dd-a38f-39758274a024.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2b2b06d9-26d3-4e69-93b3-5a3f37363b5f.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--2d3d7622-cd61-436f-8bf4-28ef9d826f6d",
+ "id": "bundle--eadb3b83-aed5-45b2-a8be-28f55ae4d23c",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--ccde7e48-1f25-46dd-a38f-39758274a024",
- "created_by_ref": "identity--f1f36b0b-dc11-4139-a742-b1843513f115",
- "created": "2022-07-02T17:28:36.957551Z",
- "modified": "2022-07-02T17:28:36.957551Z",
+ "id": "attack-pattern--2b2b06d9-26d3-4e69-93b3-5a3f37363b5f",
+ "created_by_ref": "identity--f1bc29f3-e0ff-4d3c-bf96-fa830dd15a9a",
+ "created": "2022-07-02T19:59:12.644481Z",
+ "modified": "2022-07-02T19:59:12.644481Z",
"name": "Map Target Audience Information Environment",
- "description": "TA13",
+ "description": "Mapping the target audience information environment analyzes the information space itself, including social media analytics, web traffic, and media surveys. Mapping the information environment may help the influence operation determine the most realistic and popular information channels to reach its target audience. \nMapping the target audience information environment aids influence operations in determining the most vulnerable areas of the information space to target with messaging.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--37465520-e34e-4053-afe6-5406331485cd"
+ "marking-definition--52766689-e041-4dc5-bba3-71a239f06ea1"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2bd6c575-4b68-4623-bc01-6964c53476cc.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2c7bded2-3bf3-4c5b-8c70-958b3856dc7a.json
similarity index 61%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--2bd6c575-4b68-4623-bc01-6964c53476cc.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--2c7bded2-3bf3-4c5b-8c70-958b3856dc7a.json
index d65119d..0741767 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2bd6c575-4b68-4623-bc01-6964c53476cc.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2c7bded2-3bf3-4c5b-8c70-958b3856dc7a.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--20012c63-3c79-4ac4-a309-1963865e9a7f",
+ "id": "bundle--76dc05f2-fc6d-438e-a43a-5e2ab38d0f5b",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--2bd6c575-4b68-4623-bc01-6964c53476cc",
- "created_by_ref": "identity--cbe0be43-5485-49aa-acf1-6009a3aea0f9",
- "created": "2022-07-02T17:28:36.986995Z",
- "modified": "2022-07-02T17:28:36.986995Z",
+ "id": "attack-pattern--2c7bded2-3bf3-4c5b-8c70-958b3856dc7a",
+ "created_by_ref": "identity--95f06451-4dbd-4c09-a0aa-1a7f73694fab",
+ "created": "2022-07-02T19:59:12.673593Z",
+ "modified": "2022-07-02T19:59:12.673593Z",
"name": "Private/Closed Social Networks",
- "description": "TA07",
+ "description": "An audio livestream refers to an online audio broadcast capability that allows for real-time communication to closed or open networks. Examples include Twitter Spaces, ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c5d6a9fb-b26d-4086-a5ec-af336a8a8389"
+ "marking-definition--48408254-1db7-4679-85d5-c85aefa93b8a"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--18dfaddc-b4d8-43dc-baff-e92c4ad7b6c1.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2cf97da8-f92c-49f3-bc58-d2527ce2a931.json
similarity index 60%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--18dfaddc-b4d8-43dc-baff-e92c4ad7b6c1.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--2cf97da8-f92c-49f3-bc58-d2527ce2a931.json
index 84364ac..1efe8c6 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--18dfaddc-b4d8-43dc-baff-e92c4ad7b6c1.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2cf97da8-f92c-49f3-bc58-d2527ce2a931.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--aa74a0b1-4ec2-412f-9f88-2d7c5279b970",
+ "id": "bundle--b0e59946-83ee-41b3-9122-b78afd0cd70f",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--18dfaddc-b4d8-43dc-baff-e92c4ad7b6c1",
- "created_by_ref": "identity--afa36676-23d9-491d-bcc0-a88be3320eb7",
- "created": "2022-07-02T17:28:36.969219Z",
- "modified": "2022-07-02T17:28:36.969219Z",
+ "id": "attack-pattern--2cf97da8-f92c-49f3-bc58-d2527ce2a931",
+ "created_by_ref": "identity--6fafe263-0f92-45ca-a9fd-246d4bf6bdd6",
+ "created": "2022-07-02T19:59:12.655418Z",
+ "modified": "2022-07-02T19:59:12.655418Z",
"name": "Deceptively Edit Video (Cheap fakes)",
- "description": "TA06",
+ "description": "Cheap fakes utilize less sophisticated measures of altering an image, video, or audio for example, slowing, speeding, or cutting footage to create a false context surrounding an image or event.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--badf82a7-0778-48a2-afb4-fa793734fb2d"
+ "marking-definition--974c743a-3157-4513-ac26-b95b97291258"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--75b32a49-e97e-4f8d-884a-870fad05bcc6.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2e57c2b3-f885-4684-bc08-47d334463c48.json
similarity index 55%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--75b32a49-e97e-4f8d-884a-870fad05bcc6.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--2e57c2b3-f885-4684-bc08-47d334463c48.json
index de7f976..05bb5a6 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--75b32a49-e97e-4f8d-884a-870fad05bcc6.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2e57c2b3-f885-4684-bc08-47d334463c48.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--e7437447-84ae-4c5e-a3fe-0f70f4beb3e0",
+ "id": "bundle--c0b74225-6fb4-488f-90fc-863e260f2a46",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--75b32a49-e97e-4f8d-884a-870fad05bcc6",
- "created_by_ref": "identity--74261b56-1dea-44fd-bf85-1fbed3f9d041",
- "created": "2022-07-02T17:28:36.969656Z",
- "modified": "2022-07-02T17:28:36.969656Z",
+ "id": "attack-pattern--2e57c2b3-f885-4684-bc08-47d334463c48",
+ "created_by_ref": "identity--86c23365-0713-4f85-aa98-4dba3d6952dd",
+ "created": "2022-07-02T19:59:12.655743Z",
+ "modified": "2022-07-02T19:59:12.655743Z",
"name": "Develop Audio-based Content",
- "description": "TA06",
+ "description": "Creating and editing false or misleading audio artifacts, often aligned with one or more specific narratives, for use in a disinformation campaign. This may include creating completely new audio content, repurposing existing audio artifacts (including cheap fakes), or using AI-generated audio creation and editing technologies (including deepfakes).",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--b4f4c30b-1853-44f1-82a1-5d89281c7b89"
+ "marking-definition--05a5db55-a642-42c3-be35-bada9c946bcd"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--05dc1204-4147-4a09-a017-2484ee5fdc6b.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--33e2b7b3-b9d0-47d4-ab63-fcd15740a325.json
similarity index 65%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--05dc1204-4147-4a09-a017-2484ee5fdc6b.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--33e2b7b3-b9d0-47d4-ab63-fcd15740a325.json
index 18b0e7e..6c61d4e 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--05dc1204-4147-4a09-a017-2484ee5fdc6b.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--33e2b7b3-b9d0-47d4-ab63-fcd15740a325.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--9d0487bc-36bd-4ef9-8974-ada7dc96bbcf",
+ "id": "bundle--e0557641-a8f0-40b8-8bb9-ec5f1bf9088c",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--05dc1204-4147-4a09-a017-2484ee5fdc6b",
- "created_by_ref": "identity--54dd59c1-3577-4998-ac45-09aad4d1c819",
- "created": "2022-07-02T17:28:36.987631Z",
- "modified": "2022-07-02T17:28:36.987631Z",
+ "id": "attack-pattern--33e2b7b3-b9d0-47d4-ab63-fcd15740a325",
+ "created_by_ref": "identity--27ab65f2-8827-433e-b9d1-42fbcc0e8f29",
+ "created": "2022-07-02T19:59:12.674233Z",
+ "modified": "2022-07-02T19:59:12.674233Z",
"name": "Use hashtags",
- "description": "TA07",
+ "description": "Use a dedicated, existing hashtag for the campaign/incident.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--db5a9eb8-5fae-4f04-8f48-186768a5c5e9"
+ "marking-definition--4711c835-302b-4291-83ac-f14187d242a3"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f8b62817-d507-4c49-a766-00057ef21734.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--35486a04-35f6-4737-a554-7465e4d842ff.json
similarity index 65%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--f8b62817-d507-4c49-a766-00057ef21734.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--35486a04-35f6-4737-a554-7465e4d842ff.json
index 4fad954..eb67461 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f8b62817-d507-4c49-a766-00057ef21734.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--35486a04-35f6-4737-a554-7465e4d842ff.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--f4d38d28-c298-4810-a4b7-82433aca3259",
+ "id": "bundle--5451b165-5de6-426c-9b72-dd7afa8cc241",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--f8b62817-d507-4c49-a766-00057ef21734",
- "created_by_ref": "identity--ef1f8a2e-af87-4639-abb7-28b64bb8fefd",
- "created": "2022-07-02T17:28:37.017431Z",
- "modified": "2022-07-02T17:28:37.017431Z",
+ "id": "attack-pattern--35486a04-35f6-4737-a554-7465e4d842ff",
+ "created_by_ref": "identity--c861ec49-201c-45c7-b71e-0cf8eb01e51a",
+ "created": "2022-07-02T19:59:12.742514Z",
+ "modified": "2022-07-02T19:59:12.742514Z",
"name": "Message reach",
- "description": "TA12",
+ "description": "Monitor and evaluate message reach in misinformation incidents. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2c5fa877-3dfd-4757-ad4e-e66483ab7828"
+ "marking-definition--71c14eba-3866-44d5-9634-be84a40a1f46"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--35550613-e5ec-4d78-8518-1990ade69aec.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--35550613-e5ec-4d78-8518-1990ade69aec.json
new file mode 100644
index 0000000..318bbdd
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--35550613-e5ec-4d78-8518-1990ade69aec.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--73f6ae39-3d92-427c-a8c1-f746b0e390d5",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--35550613-e5ec-4d78-8518-1990ade69aec",
+ "created_by_ref": "identity--a20d7f99-0240-4d4f-813f-8bfe83504995",
+ "created": "2022-07-02T19:59:12.667529Z",
+ "modified": "2022-07-02T19:59:12.667529Z",
+ "name": "Prepare Assets Impersonating Legitimate Entities",
+ "description": "An influence operation may prepare assets impersonating legitimate entities to further conceal its network identity and add a layer of legitimacy to its operation content. Users will more likely believe and less likely fact-check news from recognizable sources rather than unknown sites. Legitimate entities may include authentic news outlets, public figures, organizations, or state entities. \nAn influence operation may use a wide variety of cyber techniques to impersonate a legitimate entity\u2019s website or social media account. Typosquatting87 is the international registration of a domain name with purposeful variations of the impersonated domain name through intentional typos, top-level domain (TLD) manipulation, or punycode. Typosquatting facilitates the creation of falsified websites by creating similar domain names in the URL box, leaving it to the user to confirm that the URL is correct. ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "establish-legitimacy"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0099.md",
+ "external_id": "T0099"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--a1a2dafb-7fc7-48db-b1ae-d1bc996ed311"
+ ],
+ "x_mitre_is_subtechnique": false,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--edea2df0-2c56-46b7-9264-1622a44476e2.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--35c84f14-34e0-479a-b6b4-043750313fc4.json
similarity index 53%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--edea2df0-2c56-46b7-9264-1622a44476e2.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--35c84f14-34e0-479a-b6b4-043750313fc4.json
index afe9a02..4db94b8 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--edea2df0-2c56-46b7-9264-1622a44476e2.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--35c84f14-34e0-479a-b6b4-043750313fc4.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--cc2fde6b-bbd5-420a-9478-55a20cc9e567",
+ "id": "bundle--a0472552-89fc-4d00-bb57-8cee6e46bb5c",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--edea2df0-2c56-46b7-9264-1622a44476e2",
- "created_by_ref": "identity--52485474-019c-4bd0-afa6-4f39cf895592",
- "created": "2022-07-02T17:28:36.981905Z",
- "modified": "2022-07-02T17:28:36.981905Z",
+ "id": "attack-pattern--35c84f14-34e0-479a-b6b4-043750313fc4",
+ "created_by_ref": "identity--10551072-2fec-440f-808e-d46a00535785",
+ "created": "2022-07-02T19:59:12.668178Z",
+ "modified": "2022-07-02T19:59:12.668178Z",
"name": "Spoof/parody account/site",
- "description": "TA16",
+ "description": "An influence operation may prepare assets impersonating legitimate entities to further conceal its network identity and add a layer of legitimacy to its operation content. Users will more likely believe and less likely fact-check news from recognizable sources rather than unknown sites. Legitimate entities may include authentic news outlets, public figures, organizations, or state entities. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--42b8f0c1-c5f4-4633-9ce7-f48aa732b6da"
+ "marking-definition--5f6fba74-b814-4c81-9023-d43ddd1b84ee"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--36203197-90da-4681-b394-0bad48a2dea5.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--36203197-90da-4681-b394-0bad48a2dea5.json
new file mode 100644
index 0000000..c505fbf
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--36203197-90da-4681-b394-0bad48a2dea5.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--68aba449-84d3-4c93-ad33-928287d7739a",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--36203197-90da-4681-b394-0bad48a2dea5",
+ "created_by_ref": "identity--04cfd5d6-8344-4af2-b058-fdd2e7c79970",
+ "created": "2022-07-02T19:59:12.622991Z",
+ "modified": "2022-07-02T19:59:12.622991Z",
+ "name": "Conduct fundraising",
+ "description": "Fundraising campaigns refer to an influence operation\u2019s systematic effort to seek financial support for a charity, cause, or other enterprise using online activities that further promote operation information pathways while raising a profit. Many influence operations have engaged in crowdfunding services166 on platforms including Tipee, Patreon, and GoFundMe. An operation may use its previously prepared fundraising campaigns to promote operation messaging while raising money to support its activities. ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "drive-offline-activity"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0017.md",
+ "external_id": "T0017"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--dc4ba4b0-d802-43e8-a1f1-7f8ee6ef3f77"
+ ],
+ "x_mitre_is_subtechnique": false,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--38ceb33f-7654-48dd-ac72-d0d596c2123b.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--38ceb33f-7654-48dd-ac72-d0d596c2123b.json
new file mode 100644
index 0000000..5addc22
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--38ceb33f-7654-48dd-ac72-d0d596c2123b.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--dea5faf8-cb0b-4415-a214-e2115fe1e3ff",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--38ceb33f-7654-48dd-ac72-d0d596c2123b",
+ "created_by_ref": "identity--a5561d28-3e53-41d8-91ce-f979d458f92b",
+ "created": "2022-07-02T19:59:12.736613Z",
+ "modified": "2022-07-02T19:59:12.736613Z",
+ "name": "Utilize Bulletproof Hosting",
+ "description": "Hosting refers to services through which storage and computing resources are provided to an individual or organization for the accommodation and maintenance of one or more websites and related services. Services may include web hosting, file sharing, and email distribution. Bulletproof hosting refers to services provided by an entity, such as a domain hosting or web hosting firm, that allows its customer considerable leniency in use of the service. An influence operation may utilize bulletproof hosting to maintain continuity of service for suspicious, illegal, or disruptive operation activities that stricter hosting services would limit, report, or suspend. ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "persist-in-the-information-environment"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0130.002.md",
+ "external_id": "T0130.002"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--1eaea2c0-838c-430a-a517-994fd5825b77"
+ ],
+ "x_mitre_is_subtechnique": true,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a500a0b8-2780-497c-82cf-6b053542e489.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3984387e-adea-4ccd-88d3-8a481e41a045.json
similarity index 56%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--a500a0b8-2780-497c-82cf-6b053542e489.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--3984387e-adea-4ccd-88d3-8a481e41a045.json
index 7c0b4a6..552843a 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a500a0b8-2780-497c-82cf-6b053542e489.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3984387e-adea-4ccd-88d3-8a481e41a045.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--9a92b7c3-29e4-4177-aedf-5ff3974be288",
+ "id": "bundle--8a1c56a5-836c-4937-ad74-32e1c1974dcb",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a500a0b8-2780-497c-82cf-6b053542e489",
- "created_by_ref": "identity--2ef2211e-b641-42b9-98e2-159ef661e69a",
- "created": "2022-07-02T17:28:36.967807Z",
- "modified": "2022-07-02T17:28:36.967807Z",
- "name": "Deceptively Edit Image (Cheap fakes)",
- "description": "TA06",
+ "id": "attack-pattern--3984387e-adea-4ccd-88d3-8a481e41a045",
+ "created_by_ref": "identity--044ed2e3-8618-4244-8075-8f3e31443f76",
+ "created": "2022-07-02T19:59:12.654096Z",
+ "modified": "2022-07-02T19:59:12.654096Z",
+ "name": "Deceptively Edit Images (Cheap fakes)",
+ "description": "Cheap fakes utilize less sophisticated measures of altering an image, video, or audio for example, slowing, speeding, or cutting footage to create a false context surrounding an image or event.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--875151fe-6dd1-4cf7-a4e4-30e6fa796f51"
+ "marking-definition--f479185c-2c89-4d11-954e-2cec7a37be4c"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a495269c-e4e5-4a1a-88f4-7554c43a8a56.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3ab5afb2-e07d-4086-a010-89f351caf489.json
similarity index 59%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--a495269c-e4e5-4a1a-88f4-7554c43a8a56.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--3ab5afb2-e07d-4086-a010-89f351caf489.json
index 8bdc00e..c1c47a4 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a495269c-e4e5-4a1a-88f4-7554c43a8a56.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3ab5afb2-e07d-4086-a010-89f351caf489.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--aaae7b80-3c57-428d-aa13-1ab03d7437fa",
+ "id": "bundle--14a73f4f-9853-4039-84d2-fc6ac3956603",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a495269c-e4e5-4a1a-88f4-7554c43a8a56",
- "created_by_ref": "identity--560f6a8e-3053-487f-9baf-38857f2c2bb3",
- "created": "2022-07-02T17:28:37.006182Z",
- "modified": "2022-07-02T17:28:37.006182Z",
+ "id": "attack-pattern--3ab5afb2-e07d-4086-a010-89f351caf489",
+ "created_by_ref": "identity--bc8634ab-8ba3-4010-8924-301270e19062",
+ "created": "2022-07-02T19:59:12.730809Z",
+ "modified": "2022-07-02T19:59:12.730809Z",
"name": "Conceal Network Identity",
- "description": "TA11",
+ "description": "Concealing network identity aims to hide the existence an influence operation\u2019s network completely. Unlike concealing sponsorship, concealing network identity denies the existence of any sort of organization. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--26276921-f8b8-4529-b52e-671b315ee689"
+ "marking-definition--7647cf2f-58cb-4620-be30-42bb625f8974"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3b04c334-059e-4983-80c7-c602062352c4.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3b04c334-059e-4983-80c7-c602062352c4.json
new file mode 100644
index 0000000..7ad2b42
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3b04c334-059e-4983-80c7-c602062352c4.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--3c7b8aca-8582-494b-bf85-139532812598",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--3b04c334-059e-4983-80c7-c602062352c4",
+ "created_by_ref": "identity--e0347ed6-f4bb-4b16-a157-f49e981f4938",
+ "created": "2022-07-02T19:59:12.664285Z",
+ "modified": "2022-07-02T19:59:12.664285Z",
+ "name": "Utilize Butterfly Attacks",
+ "description": "Butterfly attacks occur when operators pretend to be members of a certain social group, usually a group that struggles for representation. An influence operation may mimic a group to insert controversial statements into the discourse, encourage the spread of operation content, or promote harassment among group members. Unlike astroturfing, butterfly attacks aim to infiltrate and discredit existing grassroots movements, organizations, and media campaigns. ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "establish-social-assets"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0094.002.md",
+ "external_id": "T0094.002"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--20b472eb-f674-4e4a-9785-2c8ca7479801"
+ ],
+ "x_mitre_is_subtechnique": true,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c236acce-da3a-44b6-ab3a-24268c897c0e.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3c2e9e26-3af7-44f8-b046-694d9efbcd14.json
similarity index 65%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--c236acce-da3a-44b6-ab3a-24268c897c0e.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--3c2e9e26-3af7-44f8-b046-694d9efbcd14.json
index 83ebae7..827e819 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c236acce-da3a-44b6-ab3a-24268c897c0e.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3c2e9e26-3af7-44f8-b046-694d9efbcd14.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--47c6d2f9-2a36-4926-b623-a69d6ab9d194",
+ "id": "bundle--089f7f73-0c7c-4ef4-aab5-f6081276f0f3",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c236acce-da3a-44b6-ab3a-24268c897c0e",
- "created_by_ref": "identity--5f43354b-d187-4d24-91f6-5a71e1a50b66",
- "created": "2022-07-02T17:28:37.011027Z",
- "modified": "2022-07-02T17:28:37.011027Z",
+ "id": "attack-pattern--3c2e9e26-3af7-44f8-b046-694d9efbcd14",
+ "created_by_ref": "identity--0fdbda64-2d2e-478b-b6d6-1ae14a86d525",
+ "created": "2022-07-02T19:59:12.735943Z",
+ "modified": "2022-07-02T19:59:12.735943Z",
"name": "Conceal Infrastructure",
- "description": "TA11",
+ "description": "Conceal the campaign's infrastructure to avoid takedown and attribution.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--bbd3d08c-0698-4f3d-bd93-467164c30207"
+ "marking-definition--414309e6-3d26-4b07-9639-a1d999be20cc"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c472a384-f73e-4d83-b22d-6b42fb25a2e7.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3cdec22a-d46b-4fab-b15a-20db08e58221.json
similarity index 53%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--c472a384-f73e-4d83-b22d-6b42fb25a2e7.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--3cdec22a-d46b-4fab-b15a-20db08e58221.json
index d21d7ad..7029954 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c472a384-f73e-4d83-b22d-6b42fb25a2e7.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3cdec22a-d46b-4fab-b15a-20db08e58221.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--176dc6e6-8893-4257-b363-649460a7a57d",
+ "id": "bundle--1bb454a0-c7d4-4f85-86f4-efcdb11b52c1",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c472a384-f73e-4d83-b22d-6b42fb25a2e7",
- "created_by_ref": "identity--3d67dec8-53a7-49eb-888a-b711521917dd",
- "created": "2022-07-02T17:28:36.950043Z",
- "modified": "2022-07-02T17:28:36.950043Z",
+ "id": "attack-pattern--3cdec22a-d46b-4fab-b15a-20db08e58221",
+ "created_by_ref": "identity--93c0885b-27f7-481c-9e1f-6a8d5ba1a03d",
+ "created": "2022-07-02T19:59:12.636604Z",
+ "modified": "2022-07-02T19:59:12.636604Z",
"name": "Pay for Physical Action",
- "description": "TA10",
+ "description": "Paying for physical action occurs when an influence operation pays individuals to act in the physical realm. An influence operation may pay for physical action to create specific situations and frame them in a way that supports operation narratives, for example, paying a group of people to burn a car to later post an image of the burning car and frame it as an act of protest. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--169c4f3d-5eda-43a2-86f7-c53fbf5fc13f"
+ "marking-definition--ca889b23-874b-43be-afae-452e6549f21c"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b410c8af-d88e-483e-bf89-594d70de8f11.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3ce95024-49f8-4fa3-b333-8819ef562fa8.json
similarity index 57%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--b410c8af-d88e-483e-bf89-594d70de8f11.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--3ce95024-49f8-4fa3-b333-8819ef562fa8.json
index 40b69f7..a7bd43e 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b410c8af-d88e-483e-bf89-594d70de8f11.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3ce95024-49f8-4fa3-b333-8819ef562fa8.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--12131fd4-3ca0-414a-92b0-f85bff8e8a02",
+ "id": "bundle--7362ca1f-6695-418d-9289-6683ed2dff01",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b410c8af-d88e-483e-bf89-594d70de8f11",
- "created_by_ref": "identity--3566747b-7b21-41c1-95a7-c0ab276cbdec",
- "created": "2022-07-02T17:28:37.008126Z",
- "modified": "2022-07-02T17:28:37.008126Z",
+ "id": "attack-pattern--3ce95024-49f8-4fa3-b333-8819ef562fa8",
+ "created_by_ref": "identity--61799769-30a3-4ff1-9076-2049eec8bf5e",
+ "created": "2022-07-02T19:59:12.732774Z",
+ "modified": "2022-07-02T19:59:12.732774Z",
"name": "Generate Content Unrelated to Narrative",
- "description": "TA11",
+ "description": "An influence operation may mix its own operation content with legitimate news or external unrelated content to disguise operational objectives, narratives, or existence. For example, an operation may generate \"lifestyle\" or \"cuisine\" content alongside regular operation content. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a4fb08cc-e841-4231-88f1-c15c4d3f9867"
+ "marking-definition--e9b02971-490f-474b-a5de-7a1088a1d337"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1f5bb3dc-8ad8-4e32-9ac5-d408197bb1b1.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3d6c883e-34bb-4c1a-8784-6d3265683039.json
similarity index 67%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--1f5bb3dc-8ad8-4e32-9ac5-d408197bb1b1.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--3d6c883e-34bb-4c1a-8784-6d3265683039.json
index cf8741c..0e1579e 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1f5bb3dc-8ad8-4e32-9ac5-d408197bb1b1.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3d6c883e-34bb-4c1a-8784-6d3265683039.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--b5b33cc4-4828-41f0-b315-c64932a09520",
+ "id": "bundle--b5be1bed-779b-47bd-a21c-c90f0c0d8e7c",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--1f5bb3dc-8ad8-4e32-9ac5-d408197bb1b1",
- "created_by_ref": "identity--416f6c3d-8ca0-4d0d-aeb4-1a332a2a4efd",
- "created": "2022-07-02T17:28:37.002979Z",
- "modified": "2022-07-02T17:28:37.002979Z",
+ "id": "attack-pattern--3d6c883e-34bb-4c1a-8784-6d3265683039",
+ "created_by_ref": "identity--c95de225-6152-492c-8361-18ec68fb7f2c",
+ "created": "2022-07-02T19:59:12.727352Z",
+ "modified": "2022-07-02T19:59:12.727352Z",
"name": "Exploit Platform TOS/Content Moderation",
- "description": "TA18",
+ "description": "Exploit Platform TOS/Content Moderation",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7cf882a2-da4a-4bf5-9cc2-2620e861a624"
+ "marking-definition--8e2ee928-c4ad-437b-9f09-cd9b10b20436"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a395b52a-994b-4887-b339-d28a65ea46e4.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--405b0ae6-af27-46f0-b88e-96847318690c.json
similarity index 55%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--a395b52a-994b-4887-b339-d28a65ea46e4.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--405b0ae6-af27-46f0-b88e-96847318690c.json
index 756ade5..adfca32 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a395b52a-994b-4887-b339-d28a65ea46e4.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--405b0ae6-af27-46f0-b88e-96847318690c.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--69afdb7a-870a-4d7b-b409-f0c96e756e09",
+ "id": "bundle--854f11c8-8e45-4447-8245-23291f59e0d6",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a395b52a-994b-4887-b339-d28a65ea46e4",
- "created_by_ref": "identity--4d1106b8-63dd-4a8b-af96-b765fc16840c",
- "created": "2022-07-02T17:28:36.950727Z",
- "modified": "2022-07-02T17:28:36.950727Z",
+ "id": "attack-pattern--405b0ae6-af27-46f0-b88e-96847318690c",
+ "created_by_ref": "identity--2f667329-3963-46a1-a2a6-a798b2634267",
+ "created": "2022-07-02T19:59:12.637258Z",
+ "modified": "2022-07-02T19:59:12.637258Z",
"name": "Play the long game",
- "description": "TA11",
+ "description": "Play the long game refers to two phenomena: 1. To plan messaging and allow it to grow organically without conducting your own amplification. This is methodical and slow and requires years for the message to take hold 2. To develop a series of seemingly disconnected messaging narratives that eventually combine into a new narrative.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--9f31107d-69a5-4c2b-a036-54a1d0957894"
+ "marking-definition--1ebf30b4-f360-4780-834e-7158ea941df6"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--409a1740-f916-4c9f-a672-aa5012221aec.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--409a1740-f916-4c9f-a672-aa5012221aec.json
new file mode 100644
index 0000000..7f64413
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--409a1740-f916-4c9f-a672-aa5012221aec.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--4c9ea73b-24db-447a-b449-36d36d39964f",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--409a1740-f916-4c9f-a672-aa5012221aec",
+ "created_by_ref": "identity--eca669fe-1d84-41f8-b57b-eac1f9866ee1",
+ "created": "2022-07-02T19:59:12.724267Z",
+ "modified": "2022-07-02T19:59:12.724267Z",
+ "name": "Direct Users to Alternative Platforms",
+ "description": "Direct users to alternative platforms refers to encouraging users to move from the platform on which they initially viewed operation content and engage with content on alternate information channels, including separate social media channels and inauthentic websites. An operation may drive users to alternative platforms to diversify its information channels and ensure the target audience knows where to access operation content if the initial platform suspends, flags, or otherwise removes original operation assets and content. ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "maximize-exposure"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0122.md",
+ "external_id": "T0122"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--da4f85e2-ef5e-46c9-8b11-106c50ba22af"
+ ],
+ "x_mitre_is_subtechnique": false,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fe3d67af-3f3c-4cc0-9514-2feef326b494.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4163a8ac-c555-49bf-a17e-b9e15036b667.json
similarity index 53%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--fe3d67af-3f3c-4cc0-9514-2feef326b494.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--4163a8ac-c555-49bf-a17e-b9e15036b667.json
index a99b5c8..0b20beb 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fe3d67af-3f3c-4cc0-9514-2feef326b494.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4163a8ac-c555-49bf-a17e-b9e15036b667.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--5ade34b2-a210-4fc9-91d1-3c219bbe87bd",
+ "id": "bundle--55bd264a-bd08-4889-a8ec-88b40b7c67f0",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--fe3d67af-3f3c-4cc0-9514-2feef326b494",
- "created_by_ref": "identity--2bd9dca6-d802-4636-87d6-e21d4565042b",
- "created": "2022-07-02T17:28:36.979283Z",
- "modified": "2022-07-02T17:28:36.979283Z",
+ "id": "attack-pattern--4163a8ac-c555-49bf-a17e-b9e15036b667",
+ "created_by_ref": "identity--adebf0cc-3b15-462f-81c7-2ab3cc78a145",
+ "created": "2022-07-02T19:59:12.665591Z",
+ "modified": "2022-07-02T19:59:12.665591Z",
"name": "Outsource Content Creation to External Organizations",
- "description": "TA15",
+ "description": "An influence operation may outsource content creation to external companies to avoid attribution, increase the rate of content creation, or improve content quality, i.e., by employing an organization that can create content in the target audience\u2019s native language. Employed organizations may include marketing companies for tailored advertisements or external content farms for high volumes of targeted media. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--eff6a292-ff1f-4afd-9966-e1b994c8d9a9"
+ "marking-definition--d6bb0100-2d28-4537-842e-460440239257"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8c2967be-eca2-4a8e-948c-b94e0ca8e436.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--41b86953-289e-4960-87a5-45549ce47a5e.json
similarity index 55%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--8c2967be-eca2-4a8e-948c-b94e0ca8e436.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--41b86953-289e-4960-87a5-45549ce47a5e.json
index a4a0e9f..bc13b78 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8c2967be-eca2-4a8e-948c-b94e0ca8e436.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--41b86953-289e-4960-87a5-45549ce47a5e.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--f37fd67a-7c37-48d4-af02-26e75c111200",
+ "id": "bundle--73207803-befe-4b4b-988d-1048377baaef",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--8c2967be-eca2-4a8e-948c-b94e0ca8e436",
- "created_by_ref": "identity--03da93ff-db58-418f-8f65-46c5a6a0e76d",
- "created": "2022-07-02T17:28:37.009731Z",
- "modified": "2022-07-02T17:28:37.009731Z",
+ "id": "attack-pattern--41b86953-289e-4960-87a5-45549ce47a5e",
+ "created_by_ref": "identity--ef611905-b883-4c53-82b7-cb151de4f236",
+ "created": "2022-07-02T19:59:12.734399Z",
+ "modified": "2022-07-02T19:59:12.734399Z",
"name": "Delete Accounts/Account Activity",
- "description": "TA11",
+ "description": "Deleting accounts and account activity occurs when an influence operation removes its online social media assets, including social media accounts, posts, likes, comments, and other online artifacts. An influence operation may delete its accounts and account activity to complicate attribution or remove online documentation that the operation ever occurred. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--602595fb-1aa1-483c-bd2c-db588c5ed584"
+ "marking-definition--a675116a-3372-4519-b074-ba907f725455"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--41bdae21-3938-47e4-81e9-a4ffa5cffb61.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--41bdae21-3938-47e4-81e9-a4ffa5cffb61.json
deleted file mode 100644
index 0c61212..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--41bdae21-3938-47e4-81e9-a4ffa5cffb61.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--07ef12c6-feea-4090-a042-034ce93b57fb",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--41bdae21-3938-47e4-81e9-a4ffa5cffb61",
- "created_by_ref": "identity--b8dac218-44eb-4225-b0fe-4c2a4ffce874",
- "created": "2022-07-02T17:28:36.981264Z",
- "modified": "2022-07-02T17:28:36.981264Z",
- "name": "Prepare Assets Impersonating Legitimate Entities",
- "description": "TA16",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "establish-legitimacy"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0099.md",
- "external_id": "T0099"
- }
- ],
- "object_marking_refs": [
- "marking-definition--58b0ef60-3d30-4e7b-91df-d046144e0854"
- ],
- "x_mitre_is_subtechnique": false,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b853d155-bc09-4306-9e6c-a405be53a6a4.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--41f18b17-3ff2-4339-ad2c-3eca924a07d8.json
similarity index 62%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--b853d155-bc09-4306-9e6c-a405be53a6a4.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--41f18b17-3ff2-4339-ad2c-3eca924a07d8.json
index c0bde41..5954553 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b853d155-bc09-4306-9e6c-a405be53a6a4.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--41f18b17-3ff2-4339-ad2c-3eca924a07d8.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--b34bb920-9a7e-4a83-924b-8f6b9e540cd7",
+ "id": "bundle--88fdaa4d-4e27-4088-8173-80f6b11d5310",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b853d155-bc09-4306-9e6c-a405be53a6a4",
- "created_by_ref": "identity--6f3c1fa7-e852-4f4e-8f67-ab17f50493d0",
- "created": "2022-07-02T17:28:36.992758Z",
- "modified": "2022-07-02T17:28:36.992758Z",
+ "id": "attack-pattern--41f18b17-3ff2-4339-ad2c-3eca924a07d8",
+ "created_by_ref": "identity--60e4bf79-5c91-42b2-8326-c2d995a822c9",
+ "created": "2022-07-02T19:59:12.679667Z",
+ "modified": "2022-07-02T19:59:12.679667Z",
"name": "Email",
- "description": "TA07",
+ "description": "Delivering content and narratives via email. This can include using list management or high-value individually targeted messaging.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--827e29a2-e2d3-4db8-a75b-0d63365ffd0d"
+ "marking-definition--1faf9a07-6d1c-468d-ac49-3ac1afcec104"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d6094ec0-284e-458d-9b26-ff22b5f1f09c.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--428ae731-7efc-4a69-9da4-a7399e76e3ee.json
similarity index 68%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--d6094ec0-284e-458d-9b26-ff22b5f1f09c.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--428ae731-7efc-4a69-9da4-a7399e76e3ee.json
index e8f83cb..9d874e6 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d6094ec0-284e-458d-9b26-ff22b5f1f09c.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--428ae731-7efc-4a69-9da4-a7399e76e3ee.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--65412e11-a067-4811-8f6d-19e2eb6d5a15",
+ "id": "bundle--622bf972-c2d8-47a7-9e81-e872bc20670d",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--d6094ec0-284e-458d-9b26-ff22b5f1f09c",
- "created_by_ref": "identity--7d875338-0a95-409b-87cd-8b86b5142845",
- "created": "2022-07-02T17:28:37.014834Z",
- "modified": "2022-07-02T17:28:37.014834Z",
+ "id": "attack-pattern--428ae731-7efc-4a69-9da4-a7399e76e3ee",
+ "created_by_ref": "identity--36cafddb-0259-4c61-934f-3bf91229afd6",
+ "created": "2022-07-02T19:59:12.739896Z",
+ "modified": "2022-07-02T19:59:12.739896Z",
"name": "View Focused",
- "description": "TA12",
+ "description": "View Focused",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--46c6a5bf-1bf9-41ef-af18-e4c8467e6449"
+ "marking-definition--9d4537a2-0e1f-4c94-a12b-dbb224406b72"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1d35a05b-99d7-4efb-8619-c0bfc4ef13a7.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--437280b4-4445-456f-ab6c-2ef6d9913c4d.json
similarity index 66%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--1d35a05b-99d7-4efb-8619-c0bfc4ef13a7.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--437280b4-4445-456f-ab6c-2ef6d9913c4d.json
index d993fb8..ec7bc5b 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1d35a05b-99d7-4efb-8619-c0bfc4ef13a7.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--437280b4-4445-456f-ab6c-2ef6d9913c4d.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--a068b5ee-b89b-433e-823e-a72b5ac2ff53",
+ "id": "bundle--afa1c407-089b-410c-93c0-989d24b246c8",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--1d35a05b-99d7-4efb-8619-c0bfc4ef13a7",
- "created_by_ref": "identity--bd5f1cf0-4496-464d-be7d-1fb96711b1bf",
- "created": "2022-07-02T17:28:36.974068Z",
- "modified": "2022-07-02T17:28:36.974068Z",
+ "id": "attack-pattern--437280b4-4445-456f-ab6c-2ef6d9913c4d",
+ "created_by_ref": "identity--7e4b79b1-425b-4343-8d3c-24031ad1d8bc",
+ "created": "2022-07-02T19:59:12.660033Z",
+ "modified": "2022-07-02T19:59:12.660033Z",
"name": "Recruit Contractors",
- "description": "TA15",
+ "description": "Operators recruit paid contractor to support the campaign.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c2f7b249-aeb9-49fd-bd74-717bc60c2952"
+ "marking-definition--84169122-4c45-4b07-8046-f8b412019ef1"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4459b053-585e-4160-b54c-de6db94f0d08.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4459b053-585e-4160-b54c-de6db94f0d08.json
deleted file mode 100644
index 97a3316..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4459b053-585e-4160-b54c-de6db94f0d08.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--b59c9b02-6619-4fff-b813-dfa4212e1892",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--4459b053-585e-4160-b54c-de6db94f0d08",
- "created_by_ref": "identity--e3567cc7-e95b-466d-8d15-04bf5c479949",
- "created": "2022-07-02T17:28:36.934998Z",
- "modified": "2022-07-02T17:28:36.934998Z",
- "name": "Cultivate ignorant agents",
- "description": "TA15",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "establish-social-assets"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0010.md",
- "external_id": "T0010"
- }
- ],
- "object_marking_refs": [
- "marking-definition--2f5402f3-bdd4-4881-900a-c45226181bff"
- ],
- "x_mitre_is_subtechnique": false,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c96daf1f-ac43-40d9-88a7-0f6244a38c3c.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--46b33983-93aa-40b2-b70f-cbcf47e346e3.json
similarity index 54%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--c96daf1f-ac43-40d9-88a7-0f6244a38c3c.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--46b33983-93aa-40b2-b70f-cbcf47e346e3.json
index 06dfe21..142ac5b 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c96daf1f-ac43-40d9-88a7-0f6244a38c3c.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--46b33983-93aa-40b2-b70f-cbcf47e346e3.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--fe6e7868-9033-4a1a-a182-52cdd7cd419e",
+ "id": "bundle--f3dc32fd-cf87-45f4-88ae-2c115c7cae74",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c96daf1f-ac43-40d9-88a7-0f6244a38c3c",
- "created_by_ref": "identity--c62b3acb-477a-4277-a980-da224e28c838",
- "created": "2022-07-02T17:28:36.945272Z",
- "modified": "2022-07-02T17:28:36.945272Z",
+ "id": "attack-pattern--46b33983-93aa-40b2-b70f-cbcf47e346e3",
+ "created_by_ref": "identity--449017f3-a995-4cbb-8b71-2d5de6bc90e1",
+ "created": "2022-07-02T19:59:12.631699Z",
+ "modified": "2022-07-02T19:59:12.631699Z",
"name": "Harass",
- "description": "TA18",
+ "description": "Threatening or harassing believers of opposing narratives refers to the use of intimidation techniques, including cyberbullying and doxing, to discourage opponents from voicing their dissent. An influence operation may threaten or harass believers of the opposing narratives to deter individuals from posting or proliferating conflicting content. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2448856f-1947-4c33-abdc-aad31687c14b"
+ "marking-definition--7280bf79-5ecf-42de-8c3b-47a7b799f894"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--08ee90a4-5d68-4c14-bd0a-583535d27b92.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--471067d8-da62-4984-b4f6-e5e8f297babe.json
similarity index 67%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--08ee90a4-5d68-4c14-bd0a-583535d27b92.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--471067d8-da62-4984-b4f6-e5e8f297babe.json
index d63e7be..469178e 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--08ee90a4-5d68-4c14-bd0a-583535d27b92.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--471067d8-da62-4984-b4f6-e5e8f297babe.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--0199ab04-2f1f-4299-afce-53249075eca8",
+ "id": "bundle--ccfe3dbf-98b3-4942-bc11-f1023ee5ca40",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--08ee90a4-5d68-4c14-bd0a-583535d27b92",
- "created_by_ref": "identity--bd83f834-15cb-41ed-9be8-cd98e74f72b4",
- "created": "2022-07-02T17:28:36.997892Z",
- "modified": "2022-07-02T17:28:36.997892Z",
+ "id": "attack-pattern--471067d8-da62-4984-b4f6-e5e8f297babe",
+ "created_by_ref": "identity--7e53dc0f-837a-466a-9599-e5e6e0c119c8",
+ "created": "2022-07-02T19:59:12.722221Z",
+ "modified": "2022-07-02T19:59:12.722221Z",
"name": "Post Across Disciplines",
- "description": "TA17",
+ "description": "Post Across Disciplines",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a64de13e-f81f-44dc-936d-e46cc6e3d9d6"
+ "marking-definition--3bcbf3ad-0c66-41dd-b573-42212a4548fc"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0c3753ba-ec86-4186-97c8-242aa9d53b0f.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--47939552-d779-467a-b393-92d25b0f9561.json
similarity index 62%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--0c3753ba-ec86-4186-97c8-242aa9d53b0f.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--47939552-d779-467a-b393-92d25b0f9561.json
index ed7c0fa..e363ce6 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0c3753ba-ec86-4186-97c8-242aa9d53b0f.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--47939552-d779-467a-b393-92d25b0f9561.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--6c675412-b821-445e-919a-d776961e6c3c",
+ "id": "bundle--6d38e990-6809-446f-925f-064c92c86d46",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--0c3753ba-ec86-4186-97c8-242aa9d53b0f",
- "created_by_ref": "identity--349fb903-bc56-4256-af39-dd9b2333b029",
- "created": "2022-07-02T17:28:37.015177Z",
- "modified": "2022-07-02T17:28:37.015177Z",
+ "id": "attack-pattern--47939552-d779-467a-b393-92d25b0f9561",
+ "created_by_ref": "identity--02560f30-a08f-4df8-b33c-a254c0279573",
+ "created": "2022-07-02T19:59:12.74022Z",
+ "modified": "2022-07-02T19:59:12.74022Z",
"name": "Measure Effectiveness",
- "description": "TA12",
+ "description": "A metric used to measure a current system state. \u201cAre we on track to achieve the intended new system state within the planned timescale?\u201d",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--ca502497-d901-4f77-876b-0215dda1fc01"
+ "marking-definition--b21e9780-10f4-4870-9f43-4e625f0d5a78"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9d00ac60-7376-4db3-b5d4-43c8864a5b06.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--49b98725-5779-44e4-afd0-2602525a9f63.json
similarity index 66%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--9d00ac60-7376-4db3-b5d4-43c8864a5b06.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--49b98725-5779-44e4-afd0-2602525a9f63.json
index 2d749d6..19ac16d 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9d00ac60-7376-4db3-b5d4-43c8864a5b06.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--49b98725-5779-44e4-afd0-2602525a9f63.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--0e07a3d3-dd19-45e2-b4c3-ee5e3a178d1f",
+ "id": "bundle--2959e0cf-69fd-4e6d-a1f5-5b043074abb7",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--9d00ac60-7376-4db3-b5d4-43c8864a5b06",
- "created_by_ref": "identity--cac35478-7b37-41ba-a8ed-0eb027038d53",
- "created": "2022-07-02T17:28:37.014513Z",
- "modified": "2022-07-02T17:28:37.014513Z",
+ "id": "attack-pattern--49b98725-5779-44e4-afd0-2602525a9f63",
+ "created_by_ref": "identity--610c5092-f4ef-48a6-bf10-c9e2c0589c42",
+ "created": "2022-07-02T19:59:12.739566Z",
+ "modified": "2022-07-02T19:59:12.739566Z",
"name": "Content Focused",
- "description": "TA12",
+ "description": "Measure the performance of campaign content",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--5853a9a6-2d91-4162-ac41-d7193156f272"
+ "marking-definition--eba3b183-00a1-461d-a7ef-80c1948e4823"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0caea8dd-90d8-4652-97cb-261c62065cf5.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4c1c82a2-472b-4b47-8c5e-21d2bfee7d2e.json
similarity index 53%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--0caea8dd-90d8-4652-97cb-261c62065cf5.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--4c1c82a2-472b-4b47-8c5e-21d2bfee7d2e.json
index f12ea3c..29c8f18 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0caea8dd-90d8-4652-97cb-261c62065cf5.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4c1c82a2-472b-4b47-8c5e-21d2bfee7d2e.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--57a7cf0d-9f47-4b61-af08-5d6ba9338dd0",
+ "id": "bundle--00204bcf-4972-4c51-b966-c619745a7da0",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--0caea8dd-90d8-4652-97cb-261c62065cf5",
- "created_by_ref": "identity--f3725b38-62d8-42f0-84be-2495e5df48da",
- "created": "2022-07-02T17:28:37.010707Z",
- "modified": "2022-07-02T17:28:37.010707Z",
+ "id": "attack-pattern--4c1c82a2-472b-4b47-8c5e-21d2bfee7d2e",
+ "created_by_ref": "identity--a8e469c7-4cdc-48e5-8a70-ac9062394b80",
+ "created": "2022-07-02T19:59:12.735522Z",
+ "modified": "2022-07-02T19:59:12.735522Z",
"name": "Misattribute Activity",
- "description": "TA11",
+ "description": "Misattributed activity refers to incorrectly attributed operation activity. For example, a state sponsored influence operation may conduct operation activity in a way that mimics another state so that external entities misattribute activity to the incorrect state. An operation may misattribute their activities to complicate attribution, avoid detection, or frame an adversary for negative behavior. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--49250ba5-810e-4c89-b0b7-06f630363296"
+ "marking-definition--89701ab3-0436-4c2b-a1a0-ef84381ac1d7"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4faa614b-8a0a-4e5e-8492-59d12b08df18.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4c396c44-aafa-4651-9478-9db90638238d.json
similarity index 65%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--4faa614b-8a0a-4e5e-8492-59d12b08df18.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--4c396c44-aafa-4651-9478-9db90638238d.json
index c1de54f..e5cc6ad 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4faa614b-8a0a-4e5e-8492-59d12b08df18.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4c396c44-aafa-4651-9478-9db90638238d.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--b5e1caeb-5dd6-4edd-899a-ef6d1cf2e001",
+ "id": "bundle--5f86d6a4-d38b-4f15-a605-61cbd7ee9f11",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4faa614b-8a0a-4e5e-8492-59d12b08df18",
- "created_by_ref": "identity--cdb93746-e9be-4868-9b57-c5887de3aa6a",
- "created": "2022-07-02T17:28:36.993395Z",
- "modified": "2022-07-02T17:28:36.993395Z",
+ "id": "attack-pattern--4c396c44-aafa-4651-9478-9db90638238d",
+ "created_by_ref": "identity--06f85bb8-677b-4d4a-ad98-479a7554fef7",
+ "created": "2022-07-02T19:59:12.680317Z",
+ "modified": "2022-07-02T19:59:12.680317Z",
"name": "Deliver Ads",
- "description": "TA09",
+ "description": "Delivering content via any form of paid media or advertising.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--14f1b63b-be50-4902-a9b5-a2b9a1ea76ea"
+ "marking-definition--016822cb-0710-4614-9b25-94b97219c117"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4c41d3b8-b60c-428a-b728-24e58c506687.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4c41d3b8-b60c-428a-b728-24e58c506687.json
deleted file mode 100644
index 006ec24..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4c41d3b8-b60c-428a-b728-24e58c506687.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--0c89c9fc-8fd6-4c9b-a6fe-04a51e5ead03",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--4c41d3b8-b60c-428a-b728-24e58c506687",
- "created_by_ref": "identity--d65a2ea9-4cab-4694-b8e1-70da1489ddfa",
- "created": "2022-07-02T17:28:36.98478Z",
- "modified": "2022-07-02T17:28:36.98478Z",
- "name": "Exploit Data Voids",
- "description": "TA05",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "microtarget"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0102.003.md",
- "external_id": "T0102.003"
- }
- ],
- "object_marking_refs": [
- "marking-definition--912fa75b-11ac-4b4b-a3d0-b9fb9376b80a"
- ],
- "x_mitre_is_subtechnique": true,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--74e63495-e877-4ffa-859c-d73ad1c7dfcf.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4d1d222d-28c3-4e31-b32d-b7eb240fd115.json
similarity index 60%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--74e63495-e877-4ffa-859c-d73ad1c7dfcf.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--4d1d222d-28c3-4e31-b32d-b7eb240fd115.json
index 0df8fbb..df50b94 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--74e63495-e877-4ffa-859c-d73ad1c7dfcf.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4d1d222d-28c3-4e31-b32d-b7eb240fd115.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--8e167002-136a-440c-8724-ae57cad25804",
+ "id": "bundle--d7e31a3e-5c56-459d-b8f5-bd5ef1374bcc",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--74e63495-e877-4ffa-859c-d73ad1c7dfcf",
- "created_by_ref": "identity--14101647-36f6-4563-bd2d-3fb0bdbfc9ab",
- "created": "2022-07-02T17:28:36.956589Z",
- "modified": "2022-07-02T17:28:36.956589Z",
+ "id": "attack-pattern--4d1d222d-28c3-4e31-b32d-b7eb240fd115",
+ "created_by_ref": "identity--843ebb61-0a43-4c9a-a76f-12479c27581b",
+ "created": "2022-07-02T19:59:12.643248Z",
+ "modified": "2022-07-02T19:59:12.643248Z",
"name": "Distract",
- "description": "TA02",
+ "description": "Shift attention to a different narrative or actor, for instance by accusing critics of the same activity that they\u2019ve accused you of (e.g. police brutality).",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--d884f06f-54a9-462d-a330-51c4ccbfc6d1"
+ "marking-definition--b7b1a968-f717-426c-909f-da075d3cd2dc"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4dd718fa-805c-44c9-a65b-25ac3414d433.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4dd718fa-805c-44c9-a65b-25ac3414d433.json
new file mode 100644
index 0000000..cd8a907
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4dd718fa-805c-44c9-a65b-25ac3414d433.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--c06ab387-5835-4521-924a-3ac4fc9a8c98",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--4dd718fa-805c-44c9-a65b-25ac3414d433",
+ "created_by_ref": "identity--a1f731ef-8d5b-4cf7-b7ae-f7e728aa69d6",
+ "created": "2022-07-02T19:59:12.671079Z",
+ "modified": "2022-07-02T19:59:12.671079Z",
+ "name": "Exploit Data Voids",
+ "description": "A data void refers to a word or phrase that results in little, manipulative, or low-quality search engine data. Data voids are hard to detect and relatively harmless until exploited by an entity aiming to quickly proliferate false or misleading information during a phenomenon that causes a high number of individuals to query the term or phrase. In the Plan phase, an influence operation may identify data voids for later exploitation in the operation. \nA 2019 report by Michael Golebiewski identifies five types of data voids. (1) \u201cBreaking news\u201d data voids occur when a keyword gains popularity during a short period of time, allowing an influence operation to publish false content before legitimate news outlets have an opportunity to publish relevant information. (2) An influence operation may create a \u201cstrategic new terms\u201d data void by creating their own terms and publishing information online before promoting their keyword to the target audience. (3) An influence operation may publish content on \u201coutdated terms\u201d that have decreased in popularity, capitalizing on most search engines\u2019 preferences for recency. (4) \u201cFragmented concepts\u201d data voids separate connections between similar ideas, isolating segment queries to distinct search engine results. (5) An influence operation may use \u201cproblematic queries\u201d that previously resulted in disturbing or inappropriate content to promote messaging until mainstream media recontextualizes the term. ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "microtarget"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0102.003.md",
+ "external_id": "T0102.003"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--fcc474e3-5ec1-45a3-a4c4-e25e7fcdc639"
+ ],
+ "x_mitre_is_subtechnique": true,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1880ffbe-6164-4bb5-9986-7a5fb0d10751.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4fe2d898-b1ec-4de1-bbd0-c42de0e2bda7.json
similarity index 67%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--1880ffbe-6164-4bb5-9986-7a5fb0d10751.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--4fe2d898-b1ec-4de1-bbd0-c42de0e2bda7.json
index eddbd4f..c63cb85 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1880ffbe-6164-4bb5-9986-7a5fb0d10751.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4fe2d898-b1ec-4de1-bbd0-c42de0e2bda7.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--202a5467-c8ea-43ec-98c8-59fd866a9ef8",
+ "id": "bundle--9d78dac7-082e-4f3f-87fd-609dcec362b2",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--1880ffbe-6164-4bb5-9986-7a5fb0d10751",
- "created_by_ref": "identity--4676f667-6a86-4217-b68f-35d3be2a08bb",
- "created": "2022-07-02T17:28:36.982858Z",
- "modified": "2022-07-02T17:28:36.982858Z",
+ "id": "attack-pattern--4fe2d898-b1ec-4de1-bbd0-c42de0e2bda7",
+ "created_by_ref": "identity--6d0e461f-7d90-4f23-b72c-6d8e617fb6f5",
+ "created": "2022-07-02T19:59:12.669135Z",
+ "modified": "2022-07-02T19:59:12.669135Z",
"name": "Co-Opt Grassroots Groups",
- "description": "TA16",
+ "description": "Co-Opt Grassroots Groups",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--95fd3ec5-16e4-4ff7-9b1b-560b523a8824"
+ "marking-definition--7f386c0b-1cd9-4dcd-8abe-1acbe78ec870"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7f6a9aa4-712f-4879-9257-4989ff85059d.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4ff0faac-951d-495b-a0f1-a23a1b39d24b.json
similarity index 65%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--7f6a9aa4-712f-4879-9257-4989ff85059d.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--4ff0faac-951d-495b-a0f1-a23a1b39d24b.json
index 2184919..e55e8c0 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7f6a9aa4-712f-4879-9257-4989ff85059d.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4ff0faac-951d-495b-a0f1-a23a1b39d24b.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--2b40b49b-2a8c-43a6-aad0-c1be797316c1",
+ "id": "bundle--0e92ad2b-3947-40b5-b22e-abe31cf54469",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--7f6a9aa4-712f-4879-9257-4989ff85059d",
- "created_by_ref": "identity--451d0251-3a6a-4239-83d8-c5ce970f5b9a",
- "created": "2022-07-02T17:28:36.951061Z",
- "modified": "2022-07-02T17:28:36.951061Z",
+ "id": "attack-pattern--4ff0faac-951d-495b-a0f1-a23a1b39d24b",
+ "created_by_ref": "identity--0eded895-6d69-42f6-a8d5-c40d8fd215fc",
+ "created": "2022-07-02T19:59:12.63759Z",
+ "modified": "2022-07-02T19:59:12.63759Z",
"name": "Continue to Amplify",
- "description": "TA11",
+ "description": "continue narrative or message amplification after the main incident work has finished",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--d7b93def-0b80-49a1-8826-e40418992c52"
+ "marking-definition--759822c1-291e-44e4-95b7-a8ec58ce87dd"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9b2e19bc-c4ef-4ce5-9e67-55be58b13579.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--501987ea-c8a7-494e-a250-f5f25314959c.json
similarity index 64%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--9b2e19bc-c4ef-4ce5-9e67-55be58b13579.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--501987ea-c8a7-494e-a250-f5f25314959c.json
index 497d087..a2774a0 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9b2e19bc-c4ef-4ce5-9e67-55be58b13579.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--501987ea-c8a7-494e-a250-f5f25314959c.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--fc4974de-e1c1-45dd-b660-b21634d80dc8",
+ "id": "bundle--24c1dc8f-b6b7-48a4-a240-024a22e1707e",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--9b2e19bc-c4ef-4ce5-9e67-55be58b13579",
- "created_by_ref": "identity--1cd0ef6f-ba83-411f-9c70-e983119f471e",
- "created": "2022-07-02T17:28:37.016133Z",
- "modified": "2022-07-02T17:28:37.016133Z",
+ "id": "attack-pattern--501987ea-c8a7-494e-a250-f5f25314959c",
+ "created_by_ref": "identity--2fc3a9cf-526d-4780-9d84-e6dc9076cf69",
+ "created": "2022-07-02T19:59:12.741193Z",
+ "modified": "2022-07-02T19:59:12.741193Z",
"name": "Awareness",
- "description": "TA12",
+ "description": "Measure current system state with respect to the effectiveness of influencing awareness. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--ab43a7ff-211b-40ca-8852-9b4898a084fd"
+ "marking-definition--19a0c7d3-34c8-4e1b-b54a-33cda63a82fc"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4a00df0a-8591-451b-9f3c-1980c6856dca.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--53019b69-6576-41bb-910a-af037d636c19.json
similarity index 64%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--4a00df0a-8591-451b-9f3c-1980c6856dca.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--53019b69-6576-41bb-910a-af037d636c19.json
index 3e95a28..ba326bb 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4a00df0a-8591-451b-9f3c-1980c6856dca.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--53019b69-6576-41bb-910a-af037d636c19.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--6dcd9661-5fc5-429b-bf6e-cd13ac96d903",
+ "id": "bundle--5d0731f3-da56-4d36-b08a-1acbc75d878f",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4a00df0a-8591-451b-9f3c-1980c6856dca",
- "created_by_ref": "identity--64dbec6e-dba1-4e7a-8395-7ff125342095",
- "created": "2022-07-02T17:28:36.935318Z",
- "modified": "2022-07-02T17:28:36.935318Z",
+ "id": "attack-pattern--53019b69-6576-41bb-910a-af037d636c19",
+ "created_by_ref": "identity--2882715d-765c-449e-9906-2c4c3eb2687c",
+ "created": "2022-07-02T19:59:12.620698Z",
+ "modified": "2022-07-02T19:59:12.620698Z",
"name": "Compromise legitimate accounts",
- "description": "TA16",
+ "description": "Hack or take over legimate accounts to distribute misinformation or damaging content.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--310c0ee9-665a-4d4f-8f2f-e26211ee0359"
+ "marking-definition--2b6a6a04-7c14-45c5-9a54-3df187f44345"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--530a85d9-8fed-48dc-8c59-7c36d7d5d11e.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--530a85d9-8fed-48dc-8c59-7c36d7d5d11e.json
deleted file mode 100644
index ef3c639..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--530a85d9-8fed-48dc-8c59-7c36d7d5d11e.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--414ee795-b8c7-48c7-a977-1f71581106d2",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--530a85d9-8fed-48dc-8c59-7c36d7d5d11e",
- "created_by_ref": "identity--8ab9cd5b-8ec8-4abd-a0ad-2f6dc59fab7c",
- "created": "2022-07-02T17:28:36.933662Z",
- "modified": "2022-07-02T17:28:36.933662Z",
- "name": "Develop Competing Narratives",
- "description": "TA14",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "develop-narratives"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0004.md",
- "external_id": "T0004"
- }
- ],
- "object_marking_refs": [
- "marking-definition--e9034ecf-dfa4-40d5-9e94-9fd201a5f216"
- ],
- "x_mitre_is_subtechnique": false,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--709c2d40-c1c8-4a87-b63b-35968701d12c.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--539ad344-a6e3-4cff-aae8-bc592d7404a1.json
similarity index 68%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--709c2d40-c1c8-4a87-b63b-35968701d12c.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--539ad344-a6e3-4cff-aae8-bc592d7404a1.json
index 282d75f..6dfa3d3 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--709c2d40-c1c8-4a87-b63b-35968701d12c.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--539ad344-a6e3-4cff-aae8-bc592d7404a1.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--8f64ba72-5264-430f-af10-addf49f390f5",
+ "id": "bundle--73f1c787-c920-4c5c-afb6-99be3442bb79",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--709c2d40-c1c8-4a87-b63b-35968701d12c",
- "created_by_ref": "identity--16ace32c-f17a-438d-b0f7-1a0f5577fa95",
- "created": "2022-07-02T17:28:36.992126Z",
- "modified": "2022-07-02T17:28:36.992126Z",
+ "id": "attack-pattern--539ad344-a6e3-4cff-aae8-bc592d7404a1",
+ "created_by_ref": "identity--4cdb2096-31ca-43e1-861d-ca74ab230d62",
+ "created": "2022-07-02T19:59:12.67902Z",
+ "modified": "2022-07-02T19:59:12.67902Z",
"name": "Newspaper",
- "description": "TA07",
+ "description": "Newspaper",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--192effa8-91fd-44c5-9d25-5ec3cee87894"
+ "marking-definition--180d3335-b6fa-4058-b676-4973645961fb"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--65b42640-21d6-43c8-8dad-3faa2e5079d7.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--55a6e8fc-195d-4a23-99f2-c118716ccf85.json
similarity index 61%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--65b42640-21d6-43c8-8dad-3faa2e5079d7.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--55a6e8fc-195d-4a23-99f2-c118716ccf85.json
index 25ccfb8..991c5d9 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--65b42640-21d6-43c8-8dad-3faa2e5079d7.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--55a6e8fc-195d-4a23-99f2-c118716ccf85.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--2fdf14a2-23c0-4b50-9e55-0985b42c1e8f",
+ "id": "bundle--84e6202e-785a-427b-950b-e81bc9f7152e",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--65b42640-21d6-43c8-8dad-3faa2e5079d7",
- "created_by_ref": "identity--715aa3a5-bdd9-40cc-a6ea-56fb7f8c32b2",
- "created": "2022-07-02T17:28:36.954984Z",
- "modified": "2022-07-02T17:28:36.954984Z",
+ "id": "attack-pattern--55a6e8fc-195d-4a23-99f2-c118716ccf85",
+ "created_by_ref": "identity--0882da00-b166-4bef-8e84-feade215cba4",
+ "created": "2022-07-02T19:59:12.641593Z",
+ "modified": "2022-07-02T19:59:12.641593Z",
"name": "Determine Target Audiences",
- "description": "TA01",
+ "description": "Determining the target audiences (segments of the population) who will receive campaign narratives and artifacts intended to achieve the strategic ends.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--4409a307-4123-4a6a-a184-5037031f6097"
+ "marking-definition--5dbdcbb9-9b94-4777-a491-436c6e7a1308"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b8caa5f9-fcf8-4ec4-a288-22c0e04db8ab.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--55a851b9-86a9-4d24-b361-78d22e942057.json
similarity index 66%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--b8caa5f9-fcf8-4ec4-a288-22c0e04db8ab.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--55a851b9-86a9-4d24-b361-78d22e942057.json
index 670cf3b..f1639cc 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b8caa5f9-fcf8-4ec4-a288-22c0e04db8ab.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--55a851b9-86a9-4d24-b361-78d22e942057.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--5fb46752-e603-4f3e-80ec-17fc14a55729",
+ "id": "bundle--e3197ed0-193d-458b-8496-13689877959f",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b8caa5f9-fcf8-4ec4-a288-22c0e04db8ab",
- "created_by_ref": "identity--dfa595d3-a90e-415f-9c57-007efe67cad2",
- "created": "2022-07-02T17:28:36.99403Z",
- "modified": "2022-07-02T17:28:36.99403Z",
+ "id": "attack-pattern--55a851b9-86a9-4d24-b361-78d22e942057",
+ "created_by_ref": "identity--f751343f-123c-47ad-ba1a-8553ed13f1bb",
+ "created": "2022-07-02T19:59:12.68097Z",
+ "modified": "2022-07-02T19:59:12.68097Z",
"name": "Traditional Media",
- "description": "TA09",
+ "description": "Examples include TV, Radio, Newspaper, billboards",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--bb7cfca5-9de6-4f93-ac0d-d76dbc45c49c"
+ "marking-definition--23426623-22f5-45bc-98d0-030d7fea9345"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3ff7e5b9-ac4b-44f9-81d7-1475ee208c20.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--57be87ef-21e0-478e-9afc-996a244602f2.json
similarity index 62%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--3ff7e5b9-ac4b-44f9-81d7-1475ee208c20.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--57be87ef-21e0-478e-9afc-996a244602f2.json
index a593ecf..0609291 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3ff7e5b9-ac4b-44f9-81d7-1475ee208c20.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--57be87ef-21e0-478e-9afc-996a244602f2.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--752b6734-8756-487c-8861-b1ff70708910",
+ "id": "bundle--32415364-b483-4d25-ab9b-2a39bd53a61a",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--3ff7e5b9-ac4b-44f9-81d7-1475ee208c20",
- "created_by_ref": "identity--d0ea6102-778f-4d35-a141-4d7ab4a8dd71",
- "created": "2022-07-02T17:28:36.954654Z",
- "modified": "2022-07-02T17:28:36.954654Z",
+ "id": "attack-pattern--57be87ef-21e0-478e-9afc-996a244602f2",
+ "created_by_ref": "identity--83cc907f-2378-49ff-9241-c79b32db33ca",
+ "created": "2022-07-02T19:59:12.641254Z",
+ "modified": "2022-07-02T19:59:12.641254Z",
"name": "Political Segmentation",
- "description": "TA13",
+ "description": "An influence operation may target populations based on their political affiliations, especially when aiming to manipulate voting or change policy.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--5f9a364f-d1e8-42f6-a108-bba8d4b1eb70"
+ "marking-definition--9816e4a9-d3e8-4991-a773-c483c082e4e6"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--eb58a67d-72ef-4b62-8d0c-e14dcfc6032d.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5927a58a-2416-4205-9000-e4a7824ade15.json
similarity index 53%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--eb58a67d-72ef-4b62-8d0c-e14dcfc6032d.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--5927a58a-2416-4205-9000-e4a7824ade15.json
index 939f706..cd273cf 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--eb58a67d-72ef-4b62-8d0c-e14dcfc6032d.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5927a58a-2416-4205-9000-e4a7824ade15.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--f363e2ed-18f1-4c37-a77a-6b6c27700223",
+ "id": "bundle--eabd858d-7a31-46f1-bf23-03192672ec70",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--eb58a67d-72ef-4b62-8d0c-e14dcfc6032d",
- "created_by_ref": "identity--57a74622-a881-4eba-ab1b-8d7016151b4c",
- "created": "2022-07-02T17:28:36.995305Z",
- "modified": "2022-07-02T17:28:36.995305Z",
+ "id": "attack-pattern--5927a58a-2416-4205-9000-e4a7824ade15",
+ "created_by_ref": "identity--6fe4287e-52e4-432a-9161-8747372811e1",
+ "created": "2022-07-02T19:59:12.719223Z",
+ "modified": "2022-07-02T19:59:12.719223Z",
"name": "One-Way Direct Posting",
- "description": "TA09",
+ "description": "Direct posting refers to a method of posting content via a one-way messaging service, where the recipient cannot directly respond to the poster\u2019s messaging. An influence operation may post directly to promote operation narratives to the target audience without allowing opportunities for fact-checking or disagreement, creating a false sense of support for the narrative. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c739f87e-852e-4225-b47b-798715eeb2fb"
+ "marking-definition--323b4d6c-a3a6-41f9-a7f1-d7ef2e7e5ae6"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1397b0db-f680-4e24-a827-b0f25e18e56c.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5b0e4950-7343-480f-b585-e6673e65d8c6.json
similarity index 57%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--1397b0db-f680-4e24-a827-b0f25e18e56c.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--5b0e4950-7343-480f-b585-e6673e65d8c6.json
index e4a2139..2adaed4 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1397b0db-f680-4e24-a827-b0f25e18e56c.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5b0e4950-7343-480f-b585-e6673e65d8c6.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--cca2be8b-0407-4282-9335-6e97175734da",
+ "id": "bundle--0a39f450-3655-4c41-ad48-57b850bcdfd0",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--1397b0db-f680-4e24-a827-b0f25e18e56c",
- "created_by_ref": "identity--62a17978-9671-4a26-b098-91102fab98a3",
- "created": "2022-07-02T17:28:37.007169Z",
- "modified": "2022-07-02T17:28:37.007169Z",
+ "id": "attack-pattern--5b0e4950-7343-480f-b585-e6673e65d8c6",
+ "created_by_ref": "identity--26837773-209a-489a-b31f-1706291e6747",
+ "created": "2022-07-02T19:59:12.731795Z",
+ "modified": "2022-07-02T19:59:12.731795Z",
"name": "Change Names of Accounts",
- "description": "TA11",
+ "description": "Changing names of accounts occurs when an operation changes the name of an existing social media account. An operation may change the names of its accounts throughout an operation to avoid detection or alter the names of newly acquired or repurposed accounts to fit operational narratives. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--827375e7-a703-44fd-90cc-9a09056576dd"
+ "marking-definition--224afd89-3fa7-4484-b27f-6089b1cbc669"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5f5ff744-b5d2-45c2-a45a-412c2d43cbdf.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5f5ff744-b5d2-45c2-a45a-412c2d43cbdf.json
new file mode 100644
index 0000000..c6ba0c8
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5f5ff744-b5d2-45c2-a45a-412c2d43cbdf.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--65ddd963-dd2e-410c-b16d-9882f02c87a4",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--5f5ff744-b5d2-45c2-a45a-412c2d43cbdf",
+ "created_by_ref": "identity--09ba3ea2-4873-464a-b92f-8f50905e8af9",
+ "created": "2022-07-02T19:59:12.723604Z",
+ "modified": "2022-07-02T19:59:12.723604Z",
+ "name": "Manipulate Platform Algorithm",
+ "description": "Manipulating a platform algorithm refers to conducting activity on a platform in a way that intentionally targets its underlying algorithm. After analyzing a platform\u2019s algorithm (see: Select Platforms), an influence operation may use a platform in a way that increases its content exposure, avoids content removal, or otherwise benefits the operation\u2019s strategy. For example, an influence operation may use bots to amplify its posts so that the platform\u2019s algorithm recognizes engagement with operation content and further promotes the content on user timelines. ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "maximize-exposure"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0121.md",
+ "external_id": "T0121"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--cfbdfc86-114d-459d-a721-536319f3d43f"
+ ],
+ "x_mitre_is_subtechnique": false,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a3f80665-0ad7-4321-bcea-dfd1f45e8e4c.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--649f96b3-7163-4b98-9aa6-0276e2336371.json
similarity index 68%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--a3f80665-0ad7-4321-bcea-dfd1f45e8e4c.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--649f96b3-7163-4b98-9aa6-0276e2336371.json
index 2dfcb5a..a868ec4 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a3f80665-0ad7-4321-bcea-dfd1f45e8e4c.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--649f96b3-7163-4b98-9aa6-0276e2336371.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--dabcfa39-3080-4b94-823e-751cab34309c",
+ "id": "bundle--63939dad-e52c-40fb-9a5d-735c13273943",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a3f80665-0ad7-4321-bcea-dfd1f45e8e4c",
- "created_by_ref": "identity--995acae5-3e61-44fa-89e0-62742853d716",
- "created": "2022-07-02T17:28:36.991808Z",
- "modified": "2022-07-02T17:28:36.991808Z",
+ "id": "attack-pattern--649f96b3-7163-4b98-9aa6-0276e2336371",
+ "created_by_ref": "identity--1fd731cd-2c70-490a-9bb6-041d45013dfe",
+ "created": "2022-07-02T19:59:12.678665Z",
+ "modified": "2022-07-02T19:59:12.678665Z",
"name": "TV",
- "description": "TA07",
+ "description": "TV",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--da6006ab-9f12-4516-a918-3568967349e9"
+ "marking-definition--d16c3d64-6a6e-417d-94ec-c8855ea30737"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--09c7c07b-108f-41a6-82e1-a5fff2b8182b.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6565d00e-6281-4157-b050-3974e3c55616.json
similarity index 60%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--09c7c07b-108f-41a6-82e1-a5fff2b8182b.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--6565d00e-6281-4157-b050-3974e3c55616.json
index 9881e45..8d32126 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--09c7c07b-108f-41a6-82e1-a5fff2b8182b.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6565d00e-6281-4157-b050-3974e3c55616.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--930ca439-fc14-4e54-8d94-0e6c7d2adc37",
+ "id": "bundle--43e4bd95-3445-466c-a228-df03a4d36a4a",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--09c7c07b-108f-41a6-82e1-a5fff2b8182b",
- "created_by_ref": "identity--0330d19a-d028-4478-bf80-d6c3659544bc",
- "created": "2022-07-02T17:28:36.986045Z",
- "modified": "2022-07-02T17:28:36.986045Z",
+ "id": "attack-pattern--6565d00e-6281-4157-b050-3974e3c55616",
+ "created_by_ref": "identity--63e1d0f4-a845-4e1b-83a8-7788028607b1",
+ "created": "2022-07-02T19:59:12.672621Z",
+ "modified": "2022-07-02T19:59:12.672621Z",
"name": "Social Networks",
- "description": "TA07",
+ "description": "Social media are interactive digital channels that facilitate the creation and sharing of information, ideas, interests, and other forms of expression through virtual communities and networks.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--37565e7d-ad00-4604-a990-8e109c28717c"
+ "marking-definition--e58e3e08-12b2-4cd1-9796-d8eb100b4382"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ff934521-e3f4-4f11-871c-8e7aa23574fe.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--65eced1b-ac40-47db-a9ac-9b4fbfdf73ac.json
similarity index 56%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--ff934521-e3f4-4f11-871c-8e7aa23574fe.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--65eced1b-ac40-47db-a9ac-9b4fbfdf73ac.json
index d332b10..36578db 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ff934521-e3f4-4f11-871c-8e7aa23574fe.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--65eced1b-ac40-47db-a9ac-9b4fbfdf73ac.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--00a7fe8d-a22e-495c-97e1-5d48ca92bdc6",
+ "id": "bundle--14cd5099-fcdc-4bab-8629-32a18413af37",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--ff934521-e3f4-4f11-871c-8e7aa23574fe",
- "created_by_ref": "identity--dcb7e42b-07cb-4c2d-9791-9bba133131d0",
- "created": "2022-07-02T17:28:36.997562Z",
- "modified": "2022-07-02T17:28:36.997562Z",
+ "id": "attack-pattern--65eced1b-ac40-47db-a9ac-9b4fbfdf73ac",
+ "created_by_ref": "identity--296c1457-2cce-485c-ba1c-d48247992ab4",
+ "created": "2022-07-02T19:59:12.721856Z",
+ "modified": "2022-07-02T19:59:12.721856Z",
"name": "Post Across Platform",
- "description": "TA17",
+ "description": "An influence operation may post content across platforms to spread narratives and content to new communities within the target audiences or to new target audiences. Posting across platforms can also remove opposition and context, helping the narrative spread with less opposition on the cross-posted platform. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--55ccc45c-eda4-4649-b375-f3ec1d145515"
+ "marking-definition--9d9f1c27-fdb6-4a4f-96b0-3cadedefd659"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b7a97f05-92a6-434d-922b-9be6f49225c7.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6632ab1a-e798-45f7-8703-e09c110f11ea.json
similarity index 63%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--b7a97f05-92a6-434d-922b-9be6f49225c7.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--6632ab1a-e798-45f7-8703-e09c110f11ea.json
index 7179f75..02346e1 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b7a97f05-92a6-434d-922b-9be6f49225c7.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6632ab1a-e798-45f7-8703-e09c110f11ea.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--0b165087-426a-4ccc-b0d0-53531ec97bd7",
+ "id": "bundle--5de78ba1-59a0-49b4-830d-ca3dd6b9ae62",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b7a97f05-92a6-434d-922b-9be6f49225c7",
- "created_by_ref": "identity--5530bea1-b0e1-4113-bcb8-14148c0055d2",
- "created": "2022-07-02T17:28:37.012927Z",
- "modified": "2022-07-02T17:28:37.012927Z",
+ "id": "attack-pattern--6632ab1a-e798-45f7-8703-e09c110f11ea",
+ "created_by_ref": "identity--fb417f9a-c4ea-446c-8e69-b17ec5f2f1f4",
+ "created": "2022-07-02T19:59:12.737944Z",
+ "modified": "2022-07-02T19:59:12.737944Z",
"name": "Exploit TOS/Content Moderation",
- "description": "TA11",
+ "description": "Exploiting weaknesses in platforms' terms of service and content moderation policies to avoid takedowns and platform actions.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--6dd5fbdb-24d2-4444-bb42-d0b949f9f593"
+ "marking-definition--5ef9eab3-8a48-42f7-b1da-1675e5e39de0"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6e237bc1-7a16-49c4-ad7a-4d3849e26109.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6743a7f5-1cbd-470a-afcc-bbd48afdcfc0.json
similarity index 51%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--6e237bc1-7a16-49c4-ad7a-4d3849e26109.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--6743a7f5-1cbd-470a-afcc-bbd48afdcfc0.json
index 0a22efd..92134a8 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6e237bc1-7a16-49c4-ad7a-4d3849e26109.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6743a7f5-1cbd-470a-afcc-bbd48afdcfc0.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--66b8a336-fb54-43a9-acbd-5cd72fbbbc91",
+ "id": "bundle--01db2139-9c98-4797-9f3f-10b8dc309f40",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--6e237bc1-7a16-49c4-ad7a-4d3849e26109",
- "created_by_ref": "identity--604a3383-4562-4196-b013-a7fbc9dbb0dc",
- "created": "2022-07-02T17:28:37.008444Z",
- "modified": "2022-07-02T17:28:37.008444Z",
+ "id": "attack-pattern--6743a7f5-1cbd-470a-afcc-bbd48afdcfc0",
+ "created_by_ref": "identity--f55e0eec-6590-40c3-aa3b-cd84634db7a8",
+ "created": "2022-07-02T19:59:12.733096Z",
+ "modified": "2022-07-02T19:59:12.733096Z",
"name": "Break Association with Content",
- "description": "TA11",
+ "description": "Breaking association with content occurs when an influence operation actively separates itself from its own content. An influence operation may break association with content by unfollowing, unliking, or unsharing its content, removing attribution from its content, or otherwise taking actions that distance the operation from its messaging. An influence operation may break association with its content to complicate attribution or regain credibility for a new operation. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c4f67ffb-b823-4780-b372-46d2cb172a1d"
+ "marking-definition--0226fda4-6260-495d-84be-fdbfe17e2d6a"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cd282f8b-686c-44c1-af4d-02ce5b4c707a.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--68c24d5c-02f4-4dda-b876-da222c052d86.json
similarity index 62%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--cd282f8b-686c-44c1-af4d-02ce5b4c707a.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--68c24d5c-02f4-4dda-b876-da222c052d86.json
index 6cd4846..d03fef7 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cd282f8b-686c-44c1-af4d-02ce5b4c707a.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--68c24d5c-02f4-4dda-b876-da222c052d86.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--b9843b4e-43fa-4914-9016-78894d53ea4e",
+ "id": "bundle--8ea7f2e7-bb15-44ae-838b-45e693d65eae",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--cd282f8b-686c-44c1-af4d-02ce5b4c707a",
- "created_by_ref": "identity--44a7a18b-0aa1-4a7f-b8d4-7c780e1bb169",
- "created": "2022-07-02T17:28:36.960089Z",
- "modified": "2022-07-02T17:28:36.960089Z",
+ "id": "attack-pattern--68c24d5c-02f4-4dda-b876-da222c052d86",
+ "created_by_ref": "identity--9ce890f1-a373-4b1c-9d23-0fdb1d655c0a",
+ "created": "2022-07-02T19:59:12.646892Z",
+ "modified": "2022-07-02T19:59:12.646892Z",
"name": "Find Echo Chambers",
- "description": "TA13",
+ "description": "Find or plan to create areas (social media groups, search term groups, hashtag groups etc) where individuals only engage with people they agree with. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--5dc1f9e5-601f-478d-b52e-c6b1c097ee52"
+ "marking-definition--44fe75d9-e693-40ee-96a2-11da2f46c1dd"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--692ddfe6-92da-4b8a-8c1e-7371c6eb0da5.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--692ddfe6-92da-4b8a-8c1e-7371c6eb0da5.json
deleted file mode 100644
index 855e1b0..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--692ddfe6-92da-4b8a-8c1e-7371c6eb0da5.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--a3971bf2-8cee-4ffb-beae-32eac3d847cf",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--692ddfe6-92da-4b8a-8c1e-7371c6eb0da5",
- "created_by_ref": "identity--85293c5a-bdf3-41c9-b2ab-8cf5d19ed149",
- "created": "2022-07-02T17:28:37.006531Z",
- "modified": "2022-07-02T17:28:37.006531Z",
- "name": "Distance Reputable Individuals from Operation",
- "description": "TA11",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "persist-in-the-information-environment"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0128.003.md",
- "external_id": "T0128.003"
- }
- ],
- "object_marking_refs": [
- "marking-definition--7ffdbb57-4ff3-425a-b87d-50bcbd7cc868"
- ],
- "x_mitre_is_subtechnique": true,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3ff18f87-55ce-47c5-822d-94f2cd6aeb9f.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--695e41fe-b084-4065-953c-e2cffd80ea5f.json
similarity index 51%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--3ff18f87-55ce-47c5-822d-94f2cd6aeb9f.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--695e41fe-b084-4065-953c-e2cffd80ea5f.json
index ae9460f..fdbaf72 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3ff18f87-55ce-47c5-822d-94f2cd6aeb9f.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--695e41fe-b084-4065-953c-e2cffd80ea5f.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--45de2d42-8a12-47c4-bf59-2c9510105e0e",
+ "id": "bundle--eff44465-0c76-43c9-b7bc-292cde1f5922",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--3ff18f87-55ce-47c5-822d-94f2cd6aeb9f",
- "created_by_ref": "identity--4eb4c2a4-3763-434b-b492-479c3f3cc162",
- "created": "2022-07-02T17:28:36.962946Z",
- "modified": "2022-07-02T17:28:36.962946Z",
+ "id": "attack-pattern--695e41fe-b084-4065-953c-e2cffd80ea5f",
+ "created_by_ref": "identity--fe106c43-02ee-48da-bc4a-4ce3f45c1997",
+ "created": "2022-07-02T19:59:12.649163Z",
+ "modified": "2022-07-02T19:59:12.649163Z",
"name": "Identify Media System Vulnerabilities",
- "description": "TA13",
+ "description": "An influence operation may exploit existing weaknesses in a target\u2019s media system. These weaknesses may include existing biases among media agencies, vulnerability to false news agencies on social media, or existing distrust of traditional media sources. An existing distrust among the public in the media system\u2019s credibility holds high potential for exploitation by an influence operation when establishing alternative news agencies to spread operation content. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--6e6a2078-8bd8-4fc4-a609-02a11a8f77b2"
+ "marking-definition--11eb273f-6181-4492-901f-218ebca563ae"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7acde6e3-f824-4ba8-bb8d-ef8018935e3c.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6a0c006b-9572-4983-8e5c-074cf837fc20.json
similarity index 64%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--7acde6e3-f824-4ba8-bb8d-ef8018935e3c.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--6a0c006b-9572-4983-8e5c-074cf837fc20.json
index ab84afe..316f7db 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7acde6e3-f824-4ba8-bb8d-ef8018935e3c.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6a0c006b-9572-4983-8e5c-074cf837fc20.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--f0f093a8-fe0c-433d-861a-671711a9d200",
+ "id": "bundle--7e66c6b2-6b3f-40f9-b3ba-ebb5465c2976",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--7acde6e3-f824-4ba8-bb8d-ef8018935e3c",
- "created_by_ref": "identity--03159edd-88cd-4187-84bf-0acc6c98171b",
- "created": "2022-07-02T17:28:37.002658Z",
- "modified": "2022-07-02T17:28:37.002658Z",
+ "id": "attack-pattern--6a0c006b-9572-4983-8e5c-074cf837fc20",
+ "created_by_ref": "identity--404bfdc7-ac95-475c-8a9d-dcc6aac58ddc",
+ "created": "2022-07-02T19:59:12.727024Z",
+ "modified": "2022-07-02T19:59:12.727024Z",
"name": "Goad People into Harmful Action (Stop Hitting Yourself)",
- "description": "TA18",
+ "description": "Goad people into actions that violate terms of service or will lead to having their content or accounts taken down. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--ae21156f-964f-4d19-88d7-e804a714875e"
+ "marking-definition--c9651241-5083-4474-9d98-4294edb33fdc"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e980357d-5953-4590-8986-c8ba4ad00d7d.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6a163058-b912-4e00-9cd0-17ae46341215.json
similarity index 63%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--e980357d-5953-4590-8986-c8ba4ad00d7d.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--6a163058-b912-4e00-9cd0-17ae46341215.json
index 7cd7d82..ac15d88 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e980357d-5953-4590-8986-c8ba4ad00d7d.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6a163058-b912-4e00-9cd0-17ae46341215.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--2ca2a5f7-5e05-48e0-9ee3-18bae78b5070",
+ "id": "bundle--96a66145-231d-4df3-8f6c-30d923eaca1a",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--e980357d-5953-4590-8986-c8ba4ad00d7d",
- "created_by_ref": "identity--41a582bd-2a66-4194-a9b6-fea6d5fdda5d",
- "created": "2022-07-02T17:28:36.932981Z",
- "modified": "2022-07-02T17:28:36.932981Z",
+ "id": "attack-pattern--6a163058-b912-4e00-9cd0-17ae46341215",
+ "created_by_ref": "identity--45c57c42-ce17-4a1b-8008-6857475452a6",
+ "created": "2022-07-02T19:59:12.618229Z",
+ "modified": "2022-07-02T19:59:12.618229Z",
"name": "Facilitate State Propaganda",
- "description": "TA02",
+ "description": "Organize citizens around pro-state messaging. Coordinate paid or volunteer groups to push state propaganda.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--b6ce7864-b8ae-4573-9c25-f5476ebf71f9"
+ "marking-definition--a8efac97-6520-4bf3-82b1-01278215c187"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0b7d2ef1-9719-410e-9ae3-10c646709317.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6a6e6893-a55f-4437-befd-e3cf4af8fa96.json
similarity index 65%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--0b7d2ef1-9719-410e-9ae3-10c646709317.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--6a6e6893-a55f-4437-befd-e3cf4af8fa96.json
index e8915eb..06c919d 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0b7d2ef1-9719-410e-9ae3-10c646709317.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6a6e6893-a55f-4437-befd-e3cf4af8fa96.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--9c71b958-212c-44cf-8b37-e915fe6288ef",
+ "id": "bundle--bbed766b-5f2c-45c8-9077-48386a420a15",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--0b7d2ef1-9719-410e-9ae3-10c646709317",
- "created_by_ref": "identity--bb67574b-d3c9-4645-a15c-a2388848dc4a",
- "created": "2022-07-02T17:28:37.015495Z",
- "modified": "2022-07-02T17:28:37.015495Z",
+ "id": "attack-pattern--6a6e6893-a55f-4437-befd-e3cf4af8fa96",
+ "created_by_ref": "identity--78201d30-efee-4de6-8158-f253faf474f8",
+ "created": "2022-07-02T19:59:12.74055Z",
+ "modified": "2022-07-02T19:59:12.74055Z",
"name": "Behavior changes",
- "description": "TA12",
+ "description": "Monitor and evaluate behaviour changes from misinformation incidents. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--f6c963e8-cd4d-4fa2-b394-52a6371e9fe9"
+ "marking-definition--5c204f25-7e6e-4e54-b5c2-bd2d6264ce8e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--223e9f84-f894-484b-9359-0743edd6584e.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6b4f7e4e-d68a-40de-b94a-be132e1a4d99.json
similarity index 62%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--223e9f84-f894-484b-9359-0743edd6584e.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--6b4f7e4e-d68a-40de-b94a-be132e1a4d99.json
index 00fe3f8..25ee602 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--223e9f84-f894-484b-9359-0743edd6584e.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6b4f7e4e-d68a-40de-b94a-be132e1a4d99.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--7a89a4c0-df58-423c-80a2-d9385b01e629",
+ "id": "bundle--e59db184-3a62-462a-b251-3c9c48f9e949",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--223e9f84-f894-484b-9359-0743edd6584e",
- "created_by_ref": "identity--3c4abe5a-6b48-497e-ab7b-17ecb28f16d5",
- "created": "2022-07-02T17:28:36.93725Z",
- "modified": "2022-07-02T17:28:36.93725Z",
+ "id": "attack-pattern--6b4f7e4e-d68a-40de-b94a-be132e1a4d99",
+ "created_by_ref": "identity--0618a591-c581-4776-a13b-3e673f105ec2",
+ "created": "2022-07-02T19:59:12.622666Z",
+ "modified": "2022-07-02T19:59:12.622666Z",
"name": "Create Clickbait",
- "description": "TA05",
+ "description": "Create attention grabbing headlines (outrage, doubt, humor) required to drive traffic & engagement. This is a key asset.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e79486d8-4dab-4f59-bb83-96aac4b9662a"
+ "marking-definition--12fe0574-53e2-4f86-aab8-047e07e186f6"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6dccbf81-1fb1-47c3-b6c5-4d1d6286be19.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6dccbf81-1fb1-47c3-b6c5-4d1d6286be19.json
new file mode 100644
index 0000000..6845f92
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6dccbf81-1fb1-47c3-b6c5-4d1d6286be19.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--317c3865-7c3b-4fb9-9ada-2fd5201b02b5",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--6dccbf81-1fb1-47c3-b6c5-4d1d6286be19",
+ "created_by_ref": "identity--2bc0fd98-818f-4fa1-8258-641a571d95b3",
+ "created": "2022-07-02T19:59:12.670125Z",
+ "modified": "2022-07-02T19:59:12.670125Z",
+ "name": "Leverage Echo Chambers/Filter Bubbles",
+ "description": "An echo chamber refers to an internet subgroup, often along ideological lines, where individuals only engage with \u201cothers with which they are already in agreement.\u201d A filter bubble refers to an algorithm's placement of an individual in content that they agree with or regularly engage with, possibly entrapping the user into a bubble of their own making. An operation may create these isolated areas of the internet by match existing groups, or aggregating individuals into a single target audience based on shared interests, politics, values, demographics, and other characteristics. Echo chambers and filter bubbles help to reinforce similar biases and content to the same target audience members. ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "microtarget"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0102.md",
+ "external_id": "T0102"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--cc3e553a-6948-4a51-a6c7-124ae7c3fb77"
+ ],
+ "x_mitre_is_subtechnique": false,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6dd3c20a-878e-497a-b471-173b82749edc.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6dd3c20a-878e-497a-b471-173b82749edc.json
new file mode 100644
index 0000000..97e002b
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6dd3c20a-878e-497a-b471-173b82749edc.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--ed74bc74-9272-4a01-8884-65d20165a038",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--6dd3c20a-878e-497a-b471-173b82749edc",
+ "created_by_ref": "identity--413f9e83-96e2-4197-832e-d247fc926803",
+ "created": "2022-07-02T19:59:12.620365Z",
+ "modified": "2022-07-02T19:59:12.620365Z",
+ "name": "Cultivate ignorant agents",
+ "description": "Cultivate propagandists for a cause, the goals of which are not fully comprehended, and who are used cynically by the leaders of the cause. Independent actors use social media and specialised web sites to strategically reinforce and spread messages compatible with their own. Their networks are infiltrated and used by state media disinformation organisations to amplify the state\u2019s own disinformation strategies against target populations. Many are traffickers in conspiracy theories or hoaxes, unified by a suspicion of Western governments and mainstream media. Their narratives, which appeal to leftists hostile to globalism and military intervention and nationalists against immigration, are frequently infiltrated and shaped by state-controlled trolls and altered news items from agencies such as RT and Sputnik. Also know as \"useful idiots\" or \"unwitting agents\".",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "establish-social-assets"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0010.md",
+ "external_id": "T0010"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--e72dbc33-1edc-40ba-b48c-51c943573c54"
+ ],
+ "x_mitre_is_subtechnique": false,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ed4f4eb5-994b-45b3-9018-7a8cd5d6f16a.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6eb226f3-9e7d-4404-ad97-44fdf562de9b.json
similarity index 67%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--ed4f4eb5-994b-45b3-9018-7a8cd5d6f16a.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--6eb226f3-9e7d-4404-ad97-44fdf562de9b.json
index 6e3a8a2..4bbcdb8 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ed4f4eb5-994b-45b3-9018-7a8cd5d6f16a.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6eb226f3-9e7d-4404-ad97-44fdf562de9b.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--790b7c19-0980-4dc1-be09-faf6215ffe96",
+ "id": "bundle--c2ba14d4-5161-4150-b3fc-cae7a814396a",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--ed4f4eb5-994b-45b3-9018-7a8cd5d6f16a",
- "created_by_ref": "identity--96a52b2b-2aab-4a25-969f-31c8bc54d011",
- "created": "2022-07-02T17:28:36.980626Z",
- "modified": "2022-07-02T17:28:36.980626Z",
+ "id": "attack-pattern--6eb226f3-9e7d-4404-ad97-44fdf562de9b",
+ "created_by_ref": "identity--e1663cc3-77c7-4255-9c3d-c8990bffbe6a",
+ "created": "2022-07-02T19:59:12.666887Z",
+ "modified": "2022-07-02T19:59:12.666887Z",
"name": "Create Inauthentic News Sites",
- "description": "TA16",
+ "description": "Create Inauthentic News Sites",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--6977f790-fc1d-4e7b-aebf-23e9c8cbd4b0"
+ "marking-definition--c3a71697-22dc-487c-ac60-2eba66a28291"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c6118c1f-e163-4eb0-a647-44a9d4074bb0.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6fc3a1a6-7989-4d46-8dc5-25ec1be29106.json
similarity index 60%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--c6118c1f-e163-4eb0-a647-44a9d4074bb0.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--6fc3a1a6-7989-4d46-8dc5-25ec1be29106.json
index 18b78df..54c41c1 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c6118c1f-e163-4eb0-a647-44a9d4074bb0.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6fc3a1a6-7989-4d46-8dc5-25ec1be29106.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--e5441da6-c752-4db2-9640-5bd710766218",
+ "id": "bundle--929b2785-7d24-4742-8548-bb1a14f8b8d1",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c6118c1f-e163-4eb0-a647-44a9d4074bb0",
- "created_by_ref": "identity--72eda25d-1364-455d-9244-708fc0e890fd",
- "created": "2022-07-02T17:28:36.940776Z",
- "modified": "2022-07-02T17:28:36.940776Z",
+ "id": "attack-pattern--6fc3a1a6-7989-4d46-8dc5-25ec1be29106",
+ "created_by_ref": "identity--b48e891b-016e-4ce5-bda2-63ab8faaf3c4",
+ "created": "2022-07-02T19:59:12.62663Z",
+ "modified": "2022-07-02T19:59:12.62663Z",
"name": "Distort facts",
- "description": "TA06",
+ "description": "Change, twist, or exaggerate existing facts to construct a narrative that differs from reality. Examples: images and ideas can be distorted by being placed in an improper content",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--78e76db8-c5ea-4236-8bd1-0901fdd3d6fa"
+ "marking-definition--765bd041-282d-4ab1-90ee-b808df7c8921"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--06e0d30d-fddb-4d25-842e-622d8911f444.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--710c216a-b1f4-409f-ad57-3c57fa5bad9b.json
similarity index 63%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--06e0d30d-fddb-4d25-842e-622d8911f444.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--710c216a-b1f4-409f-ad57-3c57fa5bad9b.json
index f985b9c..f9611b9 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--06e0d30d-fddb-4d25-842e-622d8911f444.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--710c216a-b1f4-409f-ad57-3c57fa5bad9b.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--c23bc29d-f6e7-4053-a495-0cd172d770e5",
+ "id": "bundle--0dc5526c-c9a6-41d8-a3e3-09160299b123",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--06e0d30d-fddb-4d25-842e-622d8911f444",
- "created_by_ref": "identity--6be95dd8-9091-428e-873f-c335c19e5466",
- "created": "2022-07-02T17:28:37.009088Z",
- "modified": "2022-07-02T17:28:37.009088Z",
- "name": "Coordinate on encrypted/ closed networks",
- "description": "TA11",
+ "id": "attack-pattern--710c216a-b1f4-409f-ad57-3c57fa5bad9b",
+ "created_by_ref": "identity--54d1cc5a-fc43-4abd-93df-b38db250fd12",
+ "created": "2022-07-02T19:59:12.733732Z",
+ "modified": "2022-07-02T19:59:12.733732Z",
+ "name": "Coordinate on encrypted/closed networks",
+ "description": "Coordinate on encrypted/ closed networks",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--23d2be14-aae3-4064-8dff-b35787efed6b"
+ "marking-definition--14dc7170-f863-4950-880c-3fca06f48723"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1360c84b-8b09-49e5-8950-9d8362008311.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--71f9d8d7-d6c4-4815-a56a-7dfee6d18c30.json
similarity index 67%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--1360c84b-8b09-49e5-8950-9d8362008311.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--71f9d8d7-d6c4-4815-a56a-7dfee6d18c30.json
index 5ec7abf..0717e23 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1360c84b-8b09-49e5-8950-9d8362008311.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--71f9d8d7-d6c4-4815-a56a-7dfee6d18c30.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--c9c2799c-6a5c-4a03-b16a-4dd6665c14e9",
+ "id": "bundle--dc73648f-cf78-4df6-b779-83972689fa75",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--1360c84b-8b09-49e5-8950-9d8362008311",
- "created_by_ref": "identity--f810326e-c1cf-447f-9995-8e6f828df8ab",
- "created": "2022-07-02T17:28:36.989899Z",
- "modified": "2022-07-02T17:28:36.989899Z",
+ "id": "attack-pattern--71f9d8d7-d6c4-4815-a56a-7dfee6d18c30",
+ "created_by_ref": "identity--11a02fc7-73b7-45ec-ab46-809d5eb4b06f",
+ "created": "2022-07-02T19:59:12.676538Z",
+ "modified": "2022-07-02T19:59:12.676538Z",
"name": "Anonymous Message Boards",
- "description": "TA07",
+ "description": "Examples include the Chans",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--03a3d509-42b9-4672-988e-a94d6535e8f0"
+ "marking-definition--2cbdf923-a523-4beb-82de-c9c4449fe2d9"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--838d2d28-0c80-4742-b60d-ceb63c1c864b.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7285bc0e-2e3f-4ee7-ab50-637c84d538e2.json
similarity index 52%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--838d2d28-0c80-4742-b60d-ceb63c1c864b.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--7285bc0e-2e3f-4ee7-ab50-637c84d538e2.json
index aadf081..437fa9e 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--838d2d28-0c80-4742-b60d-ceb63c1c864b.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7285bc0e-2e3f-4ee7-ab50-637c84d538e2.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--a74b8d7a-c93e-4e98-9887-a879d960515a",
+ "id": "bundle--21ce1bfc-ef05-4e29-bf63-3a4e76ded74c",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--838d2d28-0c80-4742-b60d-ceb63c1c864b",
- "created_by_ref": "identity--db790fd8-2f26-493b-babb-c044ed342260",
- "created": "2022-07-02T17:28:36.95854Z",
- "modified": "2022-07-02T17:28:36.95854Z",
+ "id": "attack-pattern--7285bc0e-2e3f-4ee7-ab50-637c84d538e2",
+ "created_by_ref": "identity--b992546e-8144-4e4c-80fd-59bb821a1b74",
+ "created": "2022-07-02T19:59:12.645587Z",
+ "modified": "2022-07-02T19:59:12.645587Z",
"name": "Identify Trending Topics/Hashtags",
- "description": "TA13",
+ "description": "An influence operation may identify trending hashtags on social media platforms for later use in boosting operation content. A hashtag40 refers to a word or phrase preceded by the hash symbol (#) on social media used to identify messages and posts relating to a specific topic. All public posts that use the same hashtag are aggregated onto a centralized page dedicated to the word or phrase and sorted either chronologically or by popularity. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--5a3dc33d-c9e8-45c2-bf50-b37f09de8c47"
+ "marking-definition--f87997ed-0d5d-43ac-9d10-a6e7951292d6"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2fd5387c-c9c4-4de2-bcb7-0ef7364b819c.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--72b26317-80d3-4149-9161-708c83549ac1.json
similarity index 58%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--2fd5387c-c9c4-4de2-bcb7-0ef7364b819c.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--72b26317-80d3-4149-9161-708c83549ac1.json
index 00d3a31..1efab70 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2fd5387c-c9c4-4de2-bcb7-0ef7364b819c.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--72b26317-80d3-4149-9161-708c83549ac1.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--f1f19d39-4b1c-4a41-b7d7-6fd40a205fd1",
+ "id": "bundle--b3ad33d5-a8b3-484b-a1cc-aba4f23caf36",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--2fd5387c-c9c4-4de2-bcb7-0ef7364b819c",
- "created_by_ref": "identity--2c02fedc-a9cd-4754-8a58-896f08e0ea5e",
- "created": "2022-07-02T17:28:36.972415Z",
- "modified": "2022-07-02T17:28:36.972415Z",
+ "id": "attack-pattern--72b26317-80d3-4149-9161-708c83549ac1",
+ "created_by_ref": "identity--777b9242-6ee1-45a9-8340-29e19082e808",
+ "created": "2022-07-02T19:59:12.658326Z",
+ "modified": "2022-07-02T19:59:12.658326Z",
"name": "Create Anonymous Accounts",
- "description": "TA15",
+ "description": "Anonymous accounts or anonymous users refer to users that access network resources without providing a username or password. An influence operation may use anonymous accounts to spread content without direct attribution to the operation. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--65f4f1c7-429e-48d7-b2eb-1ab8f4b93ad1"
+ "marking-definition--a9c8feb5-836a-4c4a-8f52-db6503f2e7ab"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b6db16cc-bbe2-44fe-99b4-c074b3b9595f.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--72e298d1-2ba8-47cb-839a-3a4c06a75de4.json
similarity index 56%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--b6db16cc-bbe2-44fe-99b4-c074b3b9595f.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--72e298d1-2ba8-47cb-839a-3a4c06a75de4.json
index 3f33865..49dd575 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b6db16cc-bbe2-44fe-99b4-c074b3b9595f.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--72e298d1-2ba8-47cb-839a-3a4c06a75de4.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--0d4538d2-f7d5-4ce8-a5be-4b2e94aace5d",
+ "id": "bundle--892017c9-ebee-49de-a632-a696852538c3",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b6db16cc-bbe2-44fe-99b4-c074b3b9595f",
- "created_by_ref": "identity--3c605764-4f38-45cb-87d0-45df0330dec8",
- "created": "2022-07-02T17:28:37.002019Z",
- "modified": "2022-07-02T17:28:37.002019Z",
+ "id": "attack-pattern--72e298d1-2ba8-47cb-839a-3a4c06a75de4",
+ "created_by_ref": "identity--3f7bbc05-2e56-46f8-a7c7-0a9656837742",
+ "created": "2022-07-02T19:59:12.726258Z",
+ "modified": "2022-07-02T19:59:12.726258Z",
"name": "Suppress Opposition",
- "description": "TA18",
+ "description": "Operators can suppress the opposition by exploiting platform content moderation tools and processes like reporting non-violative content to platforms for takedown and goading opposition actors into taking actions that result in platform action or target audience disapproval. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c415a0d3-e76a-4e43-a564-68927eb95d93"
+ "marking-definition--20461297-9aee-4b63-b87e-ef04ce19ae83"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--76f1c6e2-e4b9-4bc1-ae6a-02fe7345325a.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--74722b9d-d4cc-4d80-8261-d4e53b3b7af2.json
similarity index 55%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--76f1c6e2-e4b9-4bc1-ae6a-02fe7345325a.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--74722b9d-d4cc-4d80-8261-d4e53b3b7af2.json
index d6baaaf..363f5d6 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--76f1c6e2-e4b9-4bc1-ae6a-02fe7345325a.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--74722b9d-d4cc-4d80-8261-d4e53b3b7af2.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--7ececc0e-25c7-4330-b3f0-e53301ec7f8f",
+ "id": "bundle--16d1c511-fd74-40a3-b7dd-c83b5426544e",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--76f1c6e2-e4b9-4bc1-ae6a-02fe7345325a",
- "created_by_ref": "identity--019a6d11-1af6-474f-b724-082dd940f6fc",
- "created": "2022-07-02T17:28:36.962611Z",
- "modified": "2022-07-02T17:28:36.962611Z",
+ "id": "attack-pattern--74722b9d-d4cc-4d80-8261-d4e53b3b7af2",
+ "created_by_ref": "identity--05ea3657-2216-486f-a28e-a15e20675631",
+ "created": "2022-07-02T19:59:12.648836Z",
+ "modified": "2022-07-02T19:59:12.648836Z",
"name": "Identify Target Audience Adversaries",
- "description": "TA13",
+ "description": "An influence operation may identify or create a real or imaginary adversary to center operation narratives against. A real adversary may include certain politicians or political parties while imaginary adversaries may include falsified \u201cdeep state\u201d62 actors that, according to conspiracies, run the state behind public view. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--6bb04aa9-5e8c-4c80-a4cb-d6d65b4adac0"
+ "marking-definition--7f54ac2c-b139-4553-abf1-b23862c1ccb9"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ad2ca7cc-3998-441a-b042-a004c07f4b54.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--748bd382-1819-41d9-addc-de7081097b73.json
similarity index 66%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--ad2ca7cc-3998-441a-b042-a004c07f4b54.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--748bd382-1819-41d9-addc-de7081097b73.json
index 6a03a9f..0cd452b 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ad2ca7cc-3998-441a-b042-a004c07f4b54.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--748bd382-1819-41d9-addc-de7081097b73.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--8724dfd7-d075-45a5-a0eb-6dd684ba9246",
+ "id": "bundle--f889df7a-a99f-4bca-814c-961eb95ae506",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--ad2ca7cc-3998-441a-b042-a004c07f4b54",
- "created_by_ref": "identity--79f4ba8a-cb05-4b9f-a5c9-dc35090ed251",
- "created": "2022-07-02T17:28:36.94767Z",
- "modified": "2022-07-02T17:28:36.94767Z",
+ "id": "attack-pattern--748bd382-1819-41d9-addc-de7081097b73",
+ "created_by_ref": "identity--d2d19e9f-ba7d-4bf0-84f0-6c17ee813d6b",
+ "created": "2022-07-02T19:59:12.634036Z",
+ "modified": "2022-07-02T19:59:12.634036Z",
"name": "Hijack existing hashtag",
- "description": "TA17",
+ "description": "Take over an existing hashtag to drive exposure.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--bdd9e3d5-d2e2-45ab-a601-cc98e1d26784"
+ "marking-definition--861a80d4-23e8-424d-9020-53653045adba"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8f344f67-cc73-4826-9edf-9d9a202f1127.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--74a90d3f-f426-4832-9cf7-5e9ec799bec0.json
similarity index 52%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--8f344f67-cc73-4826-9edf-9d9a202f1127.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--74a90d3f-f426-4832-9cf7-5e9ec799bec0.json
index 2bee6ae..a7e8679 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8f344f67-cc73-4826-9edf-9d9a202f1127.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--74a90d3f-f426-4832-9cf7-5e9ec799bec0.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--597a3ef8-b490-4c67-ae7a-97d4b5a1b465",
+ "id": "bundle--a9bcd882-236b-48cb-b26b-2e7f6ea4ec5a",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--8f344f67-cc73-4826-9edf-9d9a202f1127",
- "created_by_ref": "identity--b8c889a2-953f-4b70-8317-269803835252",
- "created": "2022-07-02T17:28:36.939822Z",
- "modified": "2022-07-02T17:28:36.939822Z",
+ "id": "attack-pattern--74a90d3f-f426-4832-9cf7-5e9ec799bec0",
+ "created_by_ref": "identity--fcde2928-aa0f-49ed-8648-e81fce978ade",
+ "created": "2022-07-02T19:59:12.625554Z",
+ "modified": "2022-07-02T19:59:12.625554Z",
"name": "Leverage Conspiracy Theory Narratives",
- "description": "TA14",
+ "description": "\"Conspiracy narratives\" appeal to the human desire for explanatory order, by invoking the participation of poweful (often sinister) actors in pursuit of their own political goals. These narratives are especially appealing when an audience is low-information, marginalized or otherwise inclined to reject the prevailing explanation. Conspiracy narratives are an important component of the \"firehose of falsehoods\" model. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--9f87f987-8087-41d0-8e46-1eaf111d6cb6"
+ "marking-definition--a0a57c95-42f4-4821-8e89-09a3f458e735"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a224996d-effe-42ed-b7a6-78a7d86c662d.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--762233df-b2a8-404c-9136-d97611361d28.json
similarity index 56%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--a224996d-effe-42ed-b7a6-78a7d86c662d.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--762233df-b2a8-404c-9136-d97611361d28.json
index 440b6cd..75eb474 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a224996d-effe-42ed-b7a6-78a7d86c662d.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--762233df-b2a8-404c-9136-d97611361d28.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--ba3aa496-fe93-4874-894b-439a4df34970",
+ "id": "bundle--40b25bed-9c9b-4629-8dec-4845f7b8303c",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a224996d-effe-42ed-b7a6-78a7d86c662d",
- "created_by_ref": "identity--0391a029-df65-4518-b8b9-fa8319cab412",
- "created": "2022-07-02T17:28:36.971021Z",
- "modified": "2022-07-02T17:28:36.971021Z",
- "name": "Leak Authentic Documents",
- "description": "TA06",
+ "id": "attack-pattern--762233df-b2a8-404c-9136-d97611361d28",
+ "created_by_ref": "identity--a7a04e17-5b3f-424f-ab67-31e5d642ec26",
+ "created": "2022-07-02T19:59:12.657036Z",
+ "modified": "2022-07-02T19:59:12.657036Z",
+ "name": "Obtain Authentic Documents",
+ "description": "Procure authentic documents that are not publicly available, by whatever means -- whether legal or illegal, highly-resourced or less so. These documents can be \"leaked\" during later stages in the operation.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--84a96def-aee9-4a96-b74d-46b88f4f9ee9"
+ "marking-definition--c081bc93-ff3c-4a89-b150-4d0db424621c"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--82e0d266-415c-495b-989e-9c029298646f.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--76e6a962-860b-461c-a6ed-6de2e9922be1.json
similarity index 59%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--82e0d266-415c-495b-989e-9c029298646f.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--76e6a962-860b-461c-a6ed-6de2e9922be1.json
index b2aa9ae..d6095eb 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--82e0d266-415c-495b-989e-9c029298646f.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--76e6a962-860b-461c-a6ed-6de2e9922be1.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--b5a31079-8334-4f14-9e06-1f24928dacb9",
+ "id": "bundle--88c7f3fa-106d-4e93-bdff-4c32b4373cc7",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--82e0d266-415c-495b-989e-9c029298646f",
- "created_by_ref": "identity--846d1766-3f1d-4caa-98ea-616d4b934797",
- "created": "2022-07-02T17:28:36.976396Z",
- "modified": "2022-07-02T17:28:36.976396Z",
- "name": "Acquire/ recruit Network",
- "description": "TA15",
+ "id": "attack-pattern--76e6a962-860b-461c-a6ed-6de2e9922be1",
+ "created_by_ref": "identity--8797daf0-5b36-41bb-8d6e-05467371987e",
+ "created": "2022-07-02T19:59:12.662591Z",
+ "modified": "2022-07-02T19:59:12.662591Z",
+ "name": "Acquire/Recruit Network",
+ "description": "Operators acquire an existing network by paying, recruiting, or exerting control over the leaders of the existing network. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--cc3b331c-ecfa-4faa-be5e-0c41230c5cdc"
+ "marking-definition--bc25de8f-c6cb-4aef-b7a7-26cc71b3be42"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3006fa0c-25d6-4ea8-a9fa-bcaa272fbc1d.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--771a4024-a91e-4b1e-8744-c91b32196d63.json
similarity index 57%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--3006fa0c-25d6-4ea8-a9fa-bcaa272fbc1d.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--771a4024-a91e-4b1e-8744-c91b32196d63.json
index 1e1e59e..05ae275 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3006fa0c-25d6-4ea8-a9fa-bcaa272fbc1d.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--771a4024-a91e-4b1e-8744-c91b32196d63.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--97d96271-2a77-42c4-b89e-d221d070421a",
+ "id": "bundle--65374851-ce76-4b4d-8c83-c8e212f5e92b",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--3006fa0c-25d6-4ea8-a9fa-bcaa272fbc1d",
- "created_by_ref": "identity--e2a4a14b-d618-47fb-a484-0ebf40082161",
- "created": "2022-07-02T17:28:36.979605Z",
- "modified": "2022-07-02T17:28:36.979605Z",
+ "id": "attack-pattern--771a4024-a91e-4b1e-8744-c91b32196d63",
+ "created_by_ref": "identity--61551fa0-8485-4e90-8f9a-1864f4ff6e58",
+ "created": "2022-07-02T19:59:12.665922Z",
+ "modified": "2022-07-02T19:59:12.665922Z",
"name": "Create personas",
- "description": "TA16",
+ "description": "Creating fake people, often with accounts across multiple platforms. These personas can be as simple as a name, can contain slightly more background like location, profile pictures, backstory, or can be effectively backstopped with indicators like fake identity documents. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--95c5aee8-695f-4b68-97be-e450e309fc98"
+ "marking-definition--f3127fa8-ad54-48ee-8c6c-8a581e896655"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--30d1076a-9f74-4aba-a61a-20339888ef0f.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7763a745-0e8f-4319-b877-440860e304e7.json
similarity index 53%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--30d1076a-9f74-4aba-a61a-20339888ef0f.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--7763a745-0e8f-4319-b877-440860e304e7.json
index 9d5f1f7..28150b3 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--30d1076a-9f74-4aba-a61a-20339888ef0f.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7763a745-0e8f-4319-b877-440860e304e7.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--52ad0c80-d682-48ab-88bd-f695b78bc979",
+ "id": "bundle--0a78f273-bec2-4bc4-bb8b-98d12cd1a654",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--30d1076a-9f74-4aba-a61a-20339888ef0f",
- "created_by_ref": "identity--daa93585-f755-4265-9a71-9228e2f539b0",
- "created": "2022-07-02T17:28:36.97672Z",
- "modified": "2022-07-02T17:28:36.97672Z",
+ "id": "attack-pattern--7763a745-0e8f-4319-b877-440860e304e7",
+ "created_by_ref": "identity--47399482-4979-4318-a257-30fcce1fb09f",
+ "created": "2022-07-02T19:59:12.662918Z",
+ "modified": "2022-07-02T19:59:12.662918Z",
"name": "Fund Proxies",
- "description": "TA15",
+ "description": "An influence operation may fund proxies, or external entities that work for the operation. An operation may recruit/train users with existing sympathies towards the operation\u2019s narratives and/or goals as proxies. Funding proxies serves various purposes including: \n- Diversifying operation locations to complicate attribution \n- Reducing the workload for direct operation assets ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--cf502bed-e521-4459-9578-2bcee6a94a2b"
+ "marking-definition--f958993d-04d3-4aeb-a0ff-0854d5e56e22"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--467c2c32-1353-4c04-b5cc-3707f88885eb.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7aa9d580-7c3e-4e10-ac50-4fd541c7b7f2.json
similarity index 66%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--467c2c32-1353-4c04-b5cc-3707f88885eb.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--7aa9d580-7c3e-4e10-ac50-4fd541c7b7f2.json
index 6f0db38..cb80788 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--467c2c32-1353-4c04-b5cc-3707f88885eb.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7aa9d580-7c3e-4e10-ac50-4fd541c7b7f2.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--0cdc57c7-b7aa-435d-a5c8-88f124b19bbd",
+ "id": "bundle--bbd883b9-69d4-4e4a-bb1e-5ad213dfd747",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--467c2c32-1353-4c04-b5cc-3707f88885eb",
- "created_by_ref": "identity--fb6a7205-93f9-47a2-b905-164612715e59",
- "created": "2022-07-02T17:28:36.988932Z",
- "modified": "2022-07-02T17:28:36.988932Z",
+ "id": "attack-pattern--7aa9d580-7c3e-4e10-ac50-4fd541c7b7f2",
+ "created_by_ref": "identity--03d34677-51d5-4d1e-962a-271048357a13",
+ "created": "2022-07-02T19:59:12.675567Z",
+ "modified": "2022-07-02T19:59:12.675567Z",
"name": "Video Sharing",
- "description": "TA07",
+ "description": "Examples include Youtube, TikTok, ShareChat, Rumble, etc",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--70e398d5-01c2-488d-a134-b31291a13f30"
+ "marking-definition--d89a88b5-98d9-487c-9a85-1e7a6595190b"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a0e829cf-8a6f-43e8-a6a4-a5ed92d95116.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7b3fd751-1c2a-4647-926a-989392be9b06.json
similarity index 54%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--a0e829cf-8a6f-43e8-a6a4-a5ed92d95116.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--7b3fd751-1c2a-4647-926a-989392be9b06.json
index 95204ff..bab33cf 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a0e829cf-8a6f-43e8-a6a4-a5ed92d95116.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7b3fd751-1c2a-4647-926a-989392be9b06.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--6d56e4cc-3929-499e-8f51-7a49914087ea",
+ "id": "bundle--be4df90a-073d-41bf-a366-cd9f79015fc0",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a0e829cf-8a6f-43e8-a6a4-a5ed92d95116",
- "created_by_ref": "identity--b269691d-dc2d-4870-84d9-f9d630b8caf0",
- "created": "2022-07-02T17:28:36.993079Z",
- "modified": "2022-07-02T17:28:36.993079Z",
+ "id": "attack-pattern--7b3fd751-1c2a-4647-926a-989392be9b06",
+ "created_by_ref": "identity--3e614ed4-5c23-4640-a892-ca748299042b",
+ "created": "2022-07-02T19:59:12.679992Z",
+ "modified": "2022-07-02T19:59:12.679992Z",
"name": "Employ Commercial Analytic Firms",
- "description": "TA08",
+ "description": "Commercial analytic firms collect data on target audience activities and evaluate the data to detect trends, such as content receiving high click-rates. An influence operation may employ commercial analytic firms to facilitate external collection on its target audience, complicating attribution efforts and better tailoring the content to audience preferences. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--4601eae1-ecfd-4dce-b91a-e87e6568d48b"
+ "marking-definition--fddb49a3-816c-4494-895e-bafec03763da"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7be98bc2-6d02-413b-bf2d-cd3f71a72526.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7be98bc2-6d02-413b-bf2d-cd3f71a72526.json
new file mode 100644
index 0000000..8a19839
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7be98bc2-6d02-413b-bf2d-cd3f71a72526.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--565e7054-91ae-41ef-a9eb-b8289bfad5a2",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--7be98bc2-6d02-413b-bf2d-cd3f71a72526",
+ "created_by_ref": "identity--4fb17639-2a3e-4381-b996-1573b9ce43d2",
+ "created": "2022-07-02T19:59:12.658997Z",
+ "modified": "2022-07-02T19:59:12.658997Z",
+ "name": "Create Bot Accounts",
+ "description": "Bots refer to autonomous internet users that interact with systems or other users while imitating traditional human behavior. Bots use a variety of tools to stay active without direct human operation, including artificial intelligence and big data analytics. For example, an individual may program a Twitter bot to retweet a tweet every time it contains a certain keyword or hashtag. An influence operation may use bots to increase its exposure and artificially promote its content across the internet without dedicating additional time or human resources. \nAmplifier bots promote operation content through reposts, shares, and likes to increase the content\u2019s online popularity. Hacker bots are traditionally covert bots running on computer scripts that rarely engage with users and work primarily as agents of larger cyberattacks, such as a Distributed Denial of Service attacks. Spammer bots are programmed to post content on social media or in comment sections, usually as a supplementary tool. Impersonator bots102 pose as real people by mimicking human behavior, complicating their detection. ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "establish-social-assets"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0090.003.md",
+ "external_id": "T0090.003"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--0fbede3a-ab10-4da3-af03-8d92ea57f2a0"
+ ],
+ "x_mitre_is_subtechnique": true,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--be9355e4-570e-4252-8a1a-8f517f0487b8.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7c5ee3f1-be04-4a22-a9ee-b0474b78df40.json
similarity index 58%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--be9355e4-570e-4252-8a1a-8f517f0487b8.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--7c5ee3f1-be04-4a22-a9ee-b0474b78df40.json
index 80fee9c..84f3562 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--be9355e4-570e-4252-8a1a-8f517f0487b8.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7c5ee3f1-be04-4a22-a9ee-b0474b78df40.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--79a253e6-b2ab-4047-8cf4-c45a2441d9c0",
+ "id": "bundle--61a94a6e-7b27-4161-9d11-1f079f0d3cf2",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--be9355e4-570e-4252-8a1a-8f517f0487b8",
- "created_by_ref": "identity--9b0804c8-c838-471e-a466-18d9fbd9b3cb",
- "created": "2022-07-02T17:28:37.00876Z",
- "modified": "2022-07-02T17:28:37.00876Z",
+ "id": "attack-pattern--7c5ee3f1-be04-4a22-a9ee-b0474b78df40",
+ "created_by_ref": "identity--0ec158d9-87dd-4bb8-984d-5dbb764385f1",
+ "created": "2022-07-02T19:59:12.733418Z",
+ "modified": "2022-07-02T19:59:12.733418Z",
"name": "Delete URLs",
- "description": "TA11",
+ "description": "URL deletion occurs when an influence operation completely removes its website registration, rendering the URL inaccessible. An influence operation may delete its URLs to complicate attribution or remove online documentation that the operation ever occurred.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2a5f8ea8-a3cf-4061-91ff-c56192e6e036"
+ "marking-definition--d4de3887-ce43-4338-80f5-8bdea3225bfb"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5d997782-dd27-4c59-a2e2-ba5220dc555e.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7c5fcef9-4dac-4231-8065-97b5af4a187c.json
similarity index 66%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--5d997782-dd27-4c59-a2e2-ba5220dc555e.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--7c5fcef9-4dac-4231-8065-97b5af4a187c.json
index 66d2a09..b040da7 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5d997782-dd27-4c59-a2e2-ba5220dc555e.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7c5fcef9-4dac-4231-8065-97b5af4a187c.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--efe5ea8b-cc95-444a-80f5-2b19849f593e",
+ "id": "bundle--332df7c3-f2a9-4c1c-8c55-dbdcf4327a14",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--5d997782-dd27-4c59-a2e2-ba5220dc555e",
- "created_by_ref": "identity--8d440788-7c55-4ea7-bf77-2e90ba8a577c",
- "created": "2022-07-02T17:28:37.004263Z",
- "modified": "2022-07-02T17:28:37.004263Z",
+ "id": "attack-pattern--7c5fcef9-4dac-4231-8065-97b5af4a187c",
+ "created_by_ref": "identity--72c39f12-c58d-438b-8fa7-8e77ff9303bd",
+ "created": "2022-07-02T19:59:12.728707Z",
+ "modified": "2022-07-02T19:59:12.728707Z",
"name": "Facilitate logistics or support for attendance",
- "description": "TA10",
+ "description": "Facilitate logistics or support for travel, food, housing, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a4b22c17-02d0-46aa-b005-bc01790b87e8"
+ "marking-definition--46d01d7c-6b1a-4ce6-bc61-f50525f9526c"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2c7e9fd6-8fe3-448e-99e5-81d4cc6fa9e4.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7cab144f-1942-4393-8f30-25d1f73160b6.json
similarity index 50%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--2c7e9fd6-8fe3-448e-99e5-81d4cc6fa9e4.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--7cab144f-1942-4393-8f30-25d1f73160b6.json
index 2858527..8fc3408 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2c7e9fd6-8fe3-448e-99e5-81d4cc6fa9e4.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7cab144f-1942-4393-8f30-25d1f73160b6.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--c72d73fe-f000-489c-904c-533819200340",
+ "id": "bundle--4e58cd73-94ec-43ae-b2df-471094965231",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--2c7e9fd6-8fe3-448e-99e5-81d4cc6fa9e4",
- "created_by_ref": "identity--db6a9846-f6ad-4cf5-9421-38011a93c696",
- "created": "2022-07-02T17:28:36.947255Z",
- "modified": "2022-07-02T17:28:36.947255Z",
+ "id": "attack-pattern--7cab144f-1942-4393-8f30-25d1f73160b6",
+ "created_by_ref": "identity--2796d1b8-1b0c-4dad-81f5-cdc2c42438d2",
+ "created": "2022-07-02T19:59:12.633703Z",
+ "modified": "2022-07-02T19:59:12.633703Z",
"name": "Trolls amplify and manipulate",
- "description": "TA17",
+ "description": "Use trolls to amplify narratives and/or manipulate narratives. Fake profiles/sockpuppets operating to support individuals/narratives from the entire political spectrum (left/right binary). Operating with increased emphasis on promoting local content and promoting real Twitter users generating their own, often divisive political content, as it's easier to amplify existing content than create new/original content. Trolls operate where ever there's a socially divisive issue (issues that can/are be politicized).",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--5a4bd136-ad2f-4f6b-8432-cd8f1e85846f"
+ "marking-definition--62e350a7-bb0d-4668-8986-6599fb88d9c9"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--08f58eed-79eb-4a78-9ae5-ec93ec5aaaa0.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7dbaf7b4-0485-4671-8541-065b99c4dc06.json
similarity index 56%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--08f58eed-79eb-4a78-9ae5-ec93ec5aaaa0.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--7dbaf7b4-0485-4671-8541-065b99c4dc06.json
index 520cb43..3f675ac 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--08f58eed-79eb-4a78-9ae5-ec93ec5aaaa0.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7dbaf7b4-0485-4671-8541-065b99c4dc06.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--db740ddc-f40e-4281-8377-ffb06256049e",
+ "id": "bundle--3fb1aa55-d931-4a7b-b572-d482b5899eec",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--08f58eed-79eb-4a78-9ae5-ec93ec5aaaa0",
- "created_by_ref": "identity--1881a3b0-4cbd-4d05-b180-78634db0de58",
- "created": "2022-07-02T17:28:36.978314Z",
- "modified": "2022-07-02T17:28:36.978314Z",
+ "id": "attack-pattern--7dbaf7b4-0485-4671-8541-065b99c4dc06",
+ "created_by_ref": "identity--930e5cc3-c567-452d-938e-5a40255b929e",
+ "created": "2022-07-02T19:59:12.664611Z",
+ "modified": "2022-07-02T19:59:12.664611Z",
"name": "Develop Owned Media Assets",
- "description": "TA15",
+ "description": "An owned media asset refers to an agency or organization through which an influence operation may create, develop, and host content and narratives. Owned media assets include websites, blogs, social media pages, forums, and other platforms that facilitate the creation and organization of content.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--18d9fbe7-f202-47bf-8f7f-a4cc95c2faca"
+ "marking-definition--057460f8-0e1c-45ef-9887-48054eb3898f"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4a3f721a-82a7-43b6-9889-acacda9e7617.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7e2d4014-b049-4d8a-b902-2f08fd820ef8.json
similarity index 64%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--4a3f721a-82a7-43b6-9889-acacda9e7617.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--7e2d4014-b049-4d8a-b902-2f08fd820ef8.json
index 6fdc621..da6fcce 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4a3f721a-82a7-43b6-9889-acacda9e7617.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7e2d4014-b049-4d8a-b902-2f08fd820ef8.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--4fc0c07f-0631-4124-bcc3-ac1e67534096",
+ "id": "bundle--6dd84627-d94e-4c4e-a676-ddc0539485fa",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4a3f721a-82a7-43b6-9889-acacda9e7617",
- "created_by_ref": "identity--b030e5ed-8218-4f2c-9be2-e5ec9ade718c",
- "created": "2022-07-02T17:28:37.004906Z",
- "modified": "2022-07-02T17:28:37.004906Z",
+ "id": "attack-pattern--7e2d4014-b049-4d8a-b902-2f08fd820ef8",
+ "created_by_ref": "identity--b045792e-e2f0-4f9b-86f2-5d0cf07210d2",
+ "created": "2022-07-02T19:59:12.72936Z",
+ "modified": "2022-07-02T19:59:12.72936Z",
"name": "Conduct Physical Violence",
- "description": "TA10",
+ "description": "An influence operation may directly Conduct Physical Violence to achieve campaign goals. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--bbe1fb76-4b7e-4eff-b804-227cf10f9e19"
+ "marking-definition--3f52d3bf-c1ad-48b6-b5dd-97ef34b4c94e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3dc7575f-3242-497a-a47c-23d50e05cbfc.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7e30b889-c9f9-4932-aa0d-82d5f1d79e45.json
similarity index 53%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--3dc7575f-3242-497a-a47c-23d50e05cbfc.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--7e30b889-c9f9-4932-aa0d-82d5f1d79e45.json
index e27bd02..d3bdcd4 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3dc7575f-3242-497a-a47c-23d50e05cbfc.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7e30b889-c9f9-4932-aa0d-82d5f1d79e45.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--6b1867dd-0068-4439-9fa5-36b5beeec319",
+ "id": "bundle--51893872-73ab-4726-a42e-cb3941a538ea",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--3dc7575f-3242-497a-a47c-23d50e05cbfc",
- "created_by_ref": "identity--a7a4f86b-050a-45f8-be5d-d6c0d2be6bf5",
- "created": "2022-07-02T17:28:36.973402Z",
- "modified": "2022-07-02T17:28:36.973402Z",
+ "id": "attack-pattern--7e30b889-c9f9-4932-aa0d-82d5f1d79e45",
+ "created_by_ref": "identity--3529d4d3-6f11-49ed-afce-8b59dd90d796",
+ "created": "2022-07-02T19:59:12.659319Z",
+ "modified": "2022-07-02T19:59:12.659319Z",
"name": "Create Sockpuppet Accounts",
- "description": "TA15",
+ "description": "Sockpuppet accounts refer to falsified accounts that either promote the influence operation\u2019s own material or attack critics of the material online. Individuals who control sockpuppet accounts also man at least one other user account.67 Sockpuppet accounts help legitimize operation narratives by providing an appearance of external support for the material and discrediting opponents of the operation. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--13adfddf-3975-421a-963b-753e100927e1"
+ "marking-definition--f0ca3c70-6890-4d7f-b6f9-ca0d932f2b93"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3603a527-d7c9-4562-ae2d-e66c49d597c5.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7f3088ee-6c4b-48d3-894e-2b33db9d6260.json
similarity index 56%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--3603a527-d7c9-4562-ae2d-e66c49d597c5.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--7f3088ee-6c4b-48d3-894e-2b33db9d6260.json
index 916094a..2066f78 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3603a527-d7c9-4562-ae2d-e66c49d597c5.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7f3088ee-6c4b-48d3-894e-2b33db9d6260.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--2bfd3917-fa95-4c2f-a092-85dab6f191a0",
+ "id": "bundle--0a7dd2f2-61a4-4c37-ad5f-bd5a700e4876",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--3603a527-d7c9-4562-ae2d-e66c49d597c5",
- "created_by_ref": "identity--c29dd83e-f875-4496-8482-ba54f2fdd2c4",
- "created": "2022-07-02T17:28:36.951707Z",
- "modified": "2022-07-02T17:28:36.951707Z",
+ "id": "attack-pattern--7f3088ee-6c4b-48d3-894e-2b33db9d6260",
+ "created_by_ref": "identity--65eb7b06-827c-411c-9751-21fa895ca05b",
+ "created": "2022-07-02T19:59:12.638252Z",
+ "modified": "2022-07-02T19:59:12.638252Z",
"name": "Sell Merchandise",
- "description": "TA10",
+ "description": "Selling merchandise refers to the sale of often branded items to the target audience. An influence operation may sell merchandise to raise funds and promote its messaging in the physical information space, for example, by selling t-shirts with operational messaging displayed on the clothing. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2b2cf559-3b13-45de-be95-97ef4de6c069"
+ "marking-definition--ddad1c12-fcdd-444f-81ea-a05f3f6c9566"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8342730a-496e-460b-9a2f-bad4316b43d7.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--809f414f-c81e-448a-8e2b-14704a0b743a.json
similarity index 66%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--8342730a-496e-460b-9a2f-bad4316b43d7.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--809f414f-c81e-448a-8e2b-14704a0b743a.json
index 2505749..27a752d 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8342730a-496e-460b-9a2f-bad4316b43d7.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--809f414f-c81e-448a-8e2b-14704a0b743a.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--18abe976-1370-4537-acac-b29fa56c269b",
+ "id": "bundle--54e7a7d2-75a0-4b2e-9821-fd10829510e1",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--8342730a-496e-460b-9a2f-bad4316b43d7",
- "created_by_ref": "identity--e132962e-2b99-4c7d-b360-ee2621e37dae",
- "created": "2022-07-02T17:28:36.989257Z",
- "modified": "2022-07-02T17:28:36.989257Z",
+ "id": "attack-pattern--809f414f-c81e-448a-8e2b-14704a0b743a",
+ "created_by_ref": "identity--a96cb603-3f6d-4f99-9954-e8e800e23cf7",
+ "created": "2022-07-02T19:59:12.675894Z",
+ "modified": "2022-07-02T19:59:12.675894Z",
"name": "Audio sharing",
- "description": "TA07",
+ "description": "Examples include podcasting apps, Soundcloud, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--46ef5c17-2c47-4ccf-a820-69aa473a9194"
+ "marking-definition--59b3d332-2dc8-4477-8cc9-b3c123771299"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--80cb8777-deb6-4071-8413-7e23f8dfb273.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--80cb8777-deb6-4071-8413-7e23f8dfb273.json
deleted file mode 100644
index d78f680..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--80cb8777-deb6-4071-8413-7e23f8dfb273.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--613600bb-34ca-4e3e-9f6d-fb09a48ba37a",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--80cb8777-deb6-4071-8413-7e23f8dfb273",
- "created_by_ref": "identity--e0d471f6-a399-415a-8501-7b0ad1778cbb",
- "created": "2022-07-02T17:28:36.999248Z",
- "modified": "2022-07-02T17:28:36.999248Z",
- "name": "Manipulate Platform Algorithm",
- "description": "TA17",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "maximize-exposure"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0121.md",
- "external_id": "T0121"
- }
- ],
- "object_marking_refs": [
- "marking-definition--3fe1ab19-52a7-462f-b197-40f529240d3b"
- ],
- "x_mitre_is_subtechnique": false,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8f74ba8b-807b-4b71-81fd-d1fa6edcc1a7.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--81984c05-802f-4dc7-9288-fb3abb263ef5.json
similarity index 52%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--8f74ba8b-807b-4b71-81fd-d1fa6edcc1a7.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--81984c05-802f-4dc7-9288-fb3abb263ef5.json
index a383901..2233662 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8f74ba8b-807b-4b71-81fd-d1fa6edcc1a7.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--81984c05-802f-4dc7-9288-fb3abb263ef5.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--cf2989f8-1053-4753-8733-b0c015444865",
+ "id": "bundle--1cc2be25-070e-4501-bb2b-2a94076b77a6",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--8f74ba8b-807b-4b71-81fd-d1fa6edcc1a7",
- "created_by_ref": "identity--9290262e-d9b2-4f88-8fcd-cc17833bb993",
- "created": "2022-07-02T17:28:36.97069Z",
- "modified": "2022-07-02T17:28:36.97069Z",
+ "id": "attack-pattern--81984c05-802f-4dc7-9288-fb3abb263ef5",
+ "created_by_ref": "identity--6fc82af3-29da-434f-a60f-959c24ef37a6",
+ "created": "2022-07-02T19:59:12.656717Z",
+ "modified": "2022-07-02T19:59:12.656717Z",
"name": "Obtain Private Documents",
- "description": "TA06",
+ "description": "Procuring documents that are not publicly available, by whatever means -- whether legal or illegal, highly-resourced or less so. These documents can include authentic non-public documents, authentic non-public documents have been altered, or inauthentic documents intended to appear as if they are authentic non-public documents. All of these types of documents can be \"leaked\" during later stages in the operation.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--cf2468c4-4e36-4dc9-8717-b3d02bb60e70"
+ "marking-definition--ef94690c-7a67-427c-9b8b-f730cb74aa9d"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2aeca1ac-da54-4744-a23e-c2b1641dac28.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--82052da3-7f68-471c-9991-f1e09eaf8cb2.json
similarity index 64%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--2aeca1ac-da54-4744-a23e-c2b1641dac28.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--82052da3-7f68-471c-9991-f1e09eaf8cb2.json
index 43f4779..bedea79 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2aeca1ac-da54-4744-a23e-c2b1641dac28.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--82052da3-7f68-471c-9991-f1e09eaf8cb2.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--419568d5-d5c2-4682-987a-78863c4a1658",
+ "id": "bundle--e34305cf-894b-41a4-baf3-df1bd4f282b2",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--2aeca1ac-da54-4744-a23e-c2b1641dac28",
- "created_by_ref": "identity--3c5a156b-f144-4ed5-b08e-8bfc1042f78e",
- "created": "2022-07-02T17:28:36.994345Z",
- "modified": "2022-07-02T17:28:36.994345Z",
+ "id": "attack-pattern--82052da3-7f68-471c-9991-f1e09eaf8cb2",
+ "created_by_ref": "identity--e0af056f-9c56-446e-8e2a-9ac695c2d9e0",
+ "created": "2022-07-02T19:59:12.718195Z",
+ "modified": "2022-07-02T19:59:12.718195Z",
"name": "Post Content",
- "description": "TA09",
+ "description": "Delivering content by posting via owned media (assets that the operator controls). ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--344d25b6-9486-49aa-8ca2-397fcac861bb"
+ "marking-definition--51e6d129-d58a-4463-bae1-cdbde77bfbc5"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8409255c-b2a4-41c4-8a32-784dab41e289.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8409255c-b2a4-41c4-8a32-784dab41e289.json
new file mode 100644
index 0000000..114cc53
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8409255c-b2a4-41c4-8a32-784dab41e289.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--1d7dfe09-10b3-4f95-847b-7556eae836aa",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--8409255c-b2a4-41c4-8a32-784dab41e289",
+ "created_by_ref": "identity--b0a5ed99-ed2e-4ca2-aabf-f232e23c0522",
+ "created": "2022-07-02T19:59:12.725601Z",
+ "modified": "2022-07-02T19:59:12.725601Z",
+ "name": "Destroy Information Generation Capabilities",
+ "description": "Destroying information generation capabilities refers to actions taken to limit, degrade, or otherwise incapacitate an actor\u2019s ability to generate conflicting information. An influence operation may destroy an actor\u2019s information generation capabilities by physically dismantling the information infrastructure, disconnecting resources needed for information generation, or redirecting information generation personnel. An operation may destroy an adversary\u2019s information generation capabilities to limit conflicting content exposure to the target audience and crowd the information space with its own narratives. ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "drive-online-harms"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0123.003.md",
+ "external_id": "T0123.003"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--8a884d87-fc5f-408b-9054-05a8cb807df0"
+ ],
+ "x_mitre_is_subtechnique": true,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--06a4372a-4911-4569-9d5a-513bfaf1abc9.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--84a6b4f6-67e3-41e8-b99c-96bd5a4741da.json
similarity index 66%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--06a4372a-4911-4569-9d5a-513bfaf1abc9.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--84a6b4f6-67e3-41e8-b99c-96bd5a4741da.json
index f36f27b..2f36076 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--06a4372a-4911-4569-9d5a-513bfaf1abc9.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--84a6b4f6-67e3-41e8-b99c-96bd5a4741da.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--416d2d23-dea1-4c45-8d09-39839acf489b",
+ "id": "bundle--8438a601-96cf-4f6e-be31-08512f2ff23b",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--06a4372a-4911-4569-9d5a-513bfaf1abc9",
- "created_by_ref": "identity--3d83d2ee-a6ff-4903-ab50-aa89aeac0735",
- "created": "2022-07-02T17:28:36.968121Z",
- "modified": "2022-07-02T17:28:36.968121Z",
+ "id": "attack-pattern--84a6b4f6-67e3-41e8-b99c-96bd5a4741da",
+ "created_by_ref": "identity--0e3a6085-5ab9-458b-b925-a040a662b944",
+ "created": "2022-07-02T19:59:12.654436Z",
+ "modified": "2022-07-02T19:59:12.654436Z",
"name": "Aggregate Information into Evidence Collages",
- "description": "TA06",
+ "description": "Image files that aggregate positive evidence (Joan Donovan)",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--70d84cf5-488d-4945-ba9c-96fadd1df743"
+ "marking-definition--90fed931-e5ed-4cc4-8045-ad34da6bf5c4"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f4a97cf7-af47-4138-8fd4-b45f63b73c9a.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8571126c-cb8e-4ef5-945a-83f7af3d599d.json
similarity index 60%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--f4a97cf7-af47-4138-8fd4-b45f63b73c9a.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--8571126c-cb8e-4ef5-945a-83f7af3d599d.json
index 3d63793..bc3dd7f 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f4a97cf7-af47-4138-8fd4-b45f63b73c9a.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8571126c-cb8e-4ef5-945a-83f7af3d599d.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--1f5ca240-1354-4968-afcc-46de1f02f573",
+ "id": "bundle--5f3763e2-d81b-43e2-898f-9e2bc1ae0a64",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--f4a97cf7-af47-4138-8fd4-b45f63b73c9a",
- "created_by_ref": "identity--086a6d0b-0323-4346-97c3-08f7f973e2c7",
- "created": "2022-07-02T17:28:36.978956Z",
- "modified": "2022-07-02T17:28:36.978956Z",
- "name": "Create a Content Farm",
- "description": "TA15",
+ "id": "attack-pattern--8571126c-cb8e-4ef5-945a-83f7af3d599d",
+ "created_by_ref": "identity--5f62221d-f68f-4dfb-94d9-60b6cbf8fd76",
+ "created": "2022-07-02T19:59:12.665269Z",
+ "modified": "2022-07-02T19:59:12.665269Z",
+ "name": "Create Content Farms",
+ "description": "An influence operation may create an organization for creating and amplifying campaign artifacts at scale.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--167c0d6f-5885-4faa-855f-dda22c0494a7"
+ "marking-definition--bbfa766c-6b2b-407b-972f-672b7d1fd2a4"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--edc140d7-fd0f-40f1-b85c-78c1599da3e1.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8591e263-fb0c-4a9b-bcb6-ac1c940ff152.json
similarity index 62%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--edc140d7-fd0f-40f1-b85c-78c1599da3e1.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--8591e263-fb0c-4a9b-bcb6-ac1c940ff152.json
index 2c071cc..e50b600 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--edc140d7-fd0f-40f1-b85c-78c1599da3e1.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8591e263-fb0c-4a9b-bcb6-ac1c940ff152.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--0385b8cf-a8e6-45ca-9064-8510ce4289f3",
+ "id": "bundle--a8ee649b-4949-46db-9c1b-4886841d4cd4",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--edc140d7-fd0f-40f1-b85c-78c1599da3e1",
- "created_by_ref": "identity--56774b1f-7599-4b9c-adaa-7728134194b5",
- "created": "2022-07-02T17:28:36.977046Z",
- "modified": "2022-07-02T17:28:36.977046Z",
- "name": "Botnets",
- "description": "TA15",
+ "id": "attack-pattern--8591e263-fb0c-4a9b-bcb6-ac1c940ff152",
+ "created_by_ref": "identity--4f66be16-5498-4b7b-999e-4d5be13dbce7",
+ "created": "2022-07-02T19:59:12.663301Z",
+ "modified": "2022-07-02T19:59:12.663301Z",
+ "name": "Acquire Botnets",
+ "description": "A botnet is a group of bots that can function in coordination with each other. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--acd8fb2d-37dc-4e97-bfd4-8aa693adbb47"
+ "marking-definition--82c30519-231c-4d92-9ed9-bf390024176e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--948a6688-c89b-481e-a773-a41ef3398a2e.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--85b91869-8bfa-4bae-846d-5c5645e81f13.json
similarity index 60%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--948a6688-c89b-481e-a773-a41ef3398a2e.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--85b91869-8bfa-4bae-846d-5c5645e81f13.json
index 7d56747..423fd60 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--948a6688-c89b-481e-a773-a41ef3398a2e.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--85b91869-8bfa-4bae-846d-5c5645e81f13.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--66d95288-f99d-41ed-86cb-acaf9bc657ce",
+ "id": "bundle--d2150c0f-9c40-412e-801f-b111624b77d7",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--948a6688-c89b-481e-a773-a41ef3398a2e",
- "created_by_ref": "identity--e9e4e961-7e23-485c-9e42-d3e74e314fc6",
- "created": "2022-07-02T17:28:36.952348Z",
- "modified": "2022-07-02T17:28:36.952348Z",
+ "id": "attack-pattern--85b91869-8bfa-4bae-846d-5c5645e81f13",
+ "created_by_ref": "identity--0862027b-8a54-45bc-a454-a01650686e46",
+ "created": "2022-07-02T19:59:12.638913Z",
+ "modified": "2022-07-02T19:59:12.638913Z",
"name": "Degrade Adversary",
- "description": "TA02",
+ "description": "Plan to degrade an adversary\u2019s image or ability to act. This could include preparation and use of harmful information about the adversary\u2019s actions or reputation.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--76e47b23-f952-416e-92ab-f983170749a5"
+ "marking-definition--01dc8f37-1d47-4d14-b91f-45e68189e5d0"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--03182531-d2e0-4ff4-af66-43ea3256f24d.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--867f2387-626a-4024-a1aa-fa2c77f377b9.json
similarity index 64%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--03182531-d2e0-4ff4-af66-43ea3256f24d.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--867f2387-626a-4024-a1aa-fa2c77f377b9.json
index 49f1204..57e9196 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--03182531-d2e0-4ff4-af66-43ea3256f24d.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--867f2387-626a-4024-a1aa-fa2c77f377b9.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--ce807111-330d-4cdc-bdb0-6ec113474a20",
+ "id": "bundle--94047545-9641-41c9-b433-4e0ddfd9d377",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--03182531-d2e0-4ff4-af66-43ea3256f24d",
- "created_by_ref": "identity--8eb1b72a-00cc-4983-b89d-f92fa2654890",
- "created": "2022-07-02T17:28:36.990218Z",
- "modified": "2022-07-02T17:28:36.990218Z",
+ "id": "attack-pattern--867f2387-626a-4024-a1aa-fa2c77f377b9",
+ "created_by_ref": "identity--8e23b3b6-73c9-4984-8f58-d2a4b71f41c6",
+ "created": "2022-07-02T19:59:12.676914Z",
+ "modified": "2022-07-02T19:59:12.676914Z",
"name": "Bookmarking and Content Curation",
- "description": "TA07",
+ "description": "Platforms for searching, sharing, and curating content and media. Examples include Pinterest, Flipboard, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--b0a2b911-a432-41bc-8252-61a6af015ee8"
+ "marking-definition--7796e8d4-1459-4884-bd46-7b7194cfb775"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a2053dcc-f24c-4aa9-8a84-4f5b3d3b2a95.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--86a9f2a7-2d8c-4d82-9b68-60c133cbe662.json
similarity index 53%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--a2053dcc-f24c-4aa9-8a84-4f5b3d3b2a95.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--86a9f2a7-2d8c-4d82-9b68-60c133cbe662.json
index 2b4530c..ee97c1d 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a2053dcc-f24c-4aa9-8a84-4f5b3d3b2a95.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--86a9f2a7-2d8c-4d82-9b68-60c133cbe662.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--d1135322-f689-4548-8919-3155352519af",
+ "id": "bundle--98304048-74cf-43f9-8f1d-6a9fb3b167c7",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a2053dcc-f24c-4aa9-8a84-4f5b3d3b2a95",
- "created_by_ref": "identity--95ed6bc6-bbf1-42dd-9eb4-aebaf73a84c3",
- "created": "2022-07-02T17:28:36.948731Z",
- "modified": "2022-07-02T17:28:36.948731Z",
+ "id": "attack-pattern--86a9f2a7-2d8c-4d82-9b68-60c133cbe662",
+ "created_by_ref": "identity--84b3ecc5-a7e9-4457-9e95-17e9cdbc68ec",
+ "created": "2022-07-02T19:59:12.635185Z",
+ "modified": "2022-07-02T19:59:12.635185Z",
"name": "Conduct Swarming",
- "description": "TA17",
+ "description": "Swarming refers to the coordinated use of accounts to overwhelm the information space with operation content. Unlike information flooding, swarming centers exclusively around a specific event or actor rather than a general narrative. Swarming relies on \u201chorizontal communication\u201d between information assets rather than a top-down, vertical command-and-control approach. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a08d0d41-e5b9-4664-9c6c-cc15a4af1069"
+ "marking-definition--aaf5e36e-03f1-463c-acfb-47afc5e12add"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--86acec87-a02a-4f80-9012-2f5c610687b1.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--86acec87-a02a-4f80-9012-2f5c610687b1.json
deleted file mode 100644
index 5bf1cf8..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--86acec87-a02a-4f80-9012-2f5c610687b1.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--e42c082c-d4c1-4f98-a68e-6ceefca31f39",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--86acec87-a02a-4f80-9012-2f5c610687b1",
- "created_by_ref": "identity--f8455a79-2bb1-4849-bf05-406eae3ea796",
- "created": "2022-07-02T17:28:36.942048Z",
- "modified": "2022-07-02T17:28:36.942048Z",
- "name": "Bait legitimate influencers",
- "description": "TA08",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "conduct-pump-priming"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0039 .md",
- "external_id": "T0039"
- }
- ],
- "object_marking_refs": [
- "marking-definition--137b13aa-8b01-4c6c-a0a8-ced8e8af88d7"
- ],
- "x_mitre_is_subtechnique": false,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fa82d693-19f4-46be-864a-a660616dd060.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--87287001-e94e-42eb-832d-650f69b1c050.json
similarity index 66%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--fa82d693-19f4-46be-864a-a660616dd060.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--87287001-e94e-42eb-832d-650f69b1c050.json
index ad343b8..d55dbd2 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fa82d693-19f4-46be-864a-a660616dd060.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--87287001-e94e-42eb-832d-650f69b1c050.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--6857870a-7fa4-47f5-8b8d-78331044cce3",
+ "id": "bundle--ac433d27-ea97-4e3c-bf9a-754f2e86ea33",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--fa82d693-19f4-46be-864a-a660616dd060",
- "created_by_ref": "identity--e9eba55a-5895-4483-9a26-796eaec2400f",
- "created": "2022-07-02T17:28:36.952026Z",
- "modified": "2022-07-02T17:28:36.952026Z",
+ "id": "attack-pattern--87287001-e94e-42eb-832d-650f69b1c050",
+ "created_by_ref": "identity--65bda5aa-3fe5-48b6-a4ac-ede436e17a8c",
+ "created": "2022-07-02T19:59:12.638588Z",
+ "modified": "2022-07-02T19:59:12.638588Z",
"name": "Prepare Physical Broadcast Capabilities",
- "description": "TA15",
+ "description": "Create or coopt broadcast capabilities (e.g. TV, radio etc).",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--d0245c31-9575-4301-af40-e4231a6b504a"
+ "marking-definition--0817c012-87b4-478e-9283-3a3f547c7cdd"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4e5b4790-3f96-44c5-9fb4-24cd84d57c31.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8799f5ac-c50d-4e5f-8117-fb242b7617be.json
similarity index 53%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--4e5b4790-3f96-44c5-9fb4-24cd84d57c31.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--8799f5ac-c50d-4e5f-8117-fb242b7617be.json
index bd07ebf..c616fb7 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4e5b4790-3f96-44c5-9fb4-24cd84d57c31.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8799f5ac-c50d-4e5f-8117-fb242b7617be.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--717e3d83-369c-4179-ac0a-bbbd145e497a",
+ "id": "bundle--2fe4c475-753e-42d5-9e97-1dbd89a157cf",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4e5b4790-3f96-44c5-9fb4-24cd84d57c31",
- "created_by_ref": "identity--438a2705-0d5e-46be-bc34-73bff9eb4d9e",
- "created": "2022-07-02T17:28:36.950372Z",
- "modified": "2022-07-02T17:28:36.950372Z",
+ "id": "attack-pattern--8799f5ac-c50d-4e5f-8117-fb242b7617be",
+ "created_by_ref": "identity--080e3d42-dad2-4a56-8d55-b3d6228c96b7",
+ "created": "2022-07-02T19:59:12.636932Z",
+ "modified": "2022-07-02T19:59:12.636932Z",
"name": "Conduct Symbolic Action",
- "description": "TA10",
+ "description": "Symbolic action refers to activities specifically intended to advance an operation\u2019s narrative by signaling something to the audience, for example, a military parade supporting a state\u2019s narrative of military superiority. An influence operation may use symbolic action to create falsified evidence supporting operation narratives in the physical information space. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--9918b3c7-2cec-4222-87c8-ed8c544c0133"
+ "marking-definition--d3281f0d-4fa2-4407-8baa-5564a411274c"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--883a64c8-1f75-49ee-9cba-8e042c284993.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--883a64c8-1f75-49ee-9cba-8e042c284993.json
new file mode 100644
index 0000000..9b9bb80
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--883a64c8-1f75-49ee-9cba-8e042c284993.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--6026005a-d57d-4c0e-a3cf-0c49db959dc3",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--883a64c8-1f75-49ee-9cba-8e042c284993",
+ "created_by_ref": "identity--94709e13-84d4-4877-aa44-dd3973d8c83c",
+ "created": "2022-07-02T19:59:12.731145Z",
+ "modified": "2022-07-02T19:59:12.731145Z",
+ "name": "Distance Reputable Individuals from Operation",
+ "description": "Distancing reputable individuals from the operation occurs when enlisted individuals, such as celebrities or subject matter experts, actively disengage themselves from operation activities and messaging. Individuals may distance themselves from the operation by deleting old posts or statements, unfollowing operation information assets, or otherwise detaching themselves from the operation\u2019s timeline. An influence operation may want reputable individuals to distance themselves from the operation to reduce operation exposure, particularly if the operation aims to remove all evidence.",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "persist-in-the-information-environment"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0128.003.md",
+ "external_id": "T0128.003"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--b11aaead-f5c0-4d34-9117-fcbdf854afce"
+ ],
+ "x_mitre_is_subtechnique": true,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e977dd1f-45db-4762-a34d-2f06c2bd788b.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--88a99ab0-5135-4c6b-9832-74260b6c1dbd.json
similarity index 67%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--e977dd1f-45db-4762-a34d-2f06c2bd788b.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--88a99ab0-5135-4c6b-9832-74260b6c1dbd.json
index ed47f8b..cf4e929 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e977dd1f-45db-4762-a34d-2f06c2bd788b.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--88a99ab0-5135-4c6b-9832-74260b6c1dbd.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--7523abbf-936d-476e-bb37-052fc321a7c5",
+ "id": "bundle--97f30989-1a51-453b-b5f4-0ed708469927",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--e977dd1f-45db-4762-a34d-2f06c2bd788b",
- "created_by_ref": "identity--9bab100e-2406-494a-b41b-ebb02e77d314",
- "created": "2022-07-02T17:28:36.966205Z",
- "modified": "2022-07-02T17:28:36.966205Z",
+ "id": "attack-pattern--88a99ab0-5135-4c6b-9832-74260b6c1dbd",
+ "created_by_ref": "identity--ee344975-686c-4ec0-9831-e3db6d42cc19",
+ "created": "2022-07-02T19:59:12.652423Z",
+ "modified": "2022-07-02T19:59:12.652423Z",
"name": "Develop False or Altered Documents",
- "description": "TA06",
+ "description": "Develop False or Altered Documents",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2ca25000-cc0d-4629-b4e0-8c8de388f192"
+ "marking-definition--7b37ac47-196e-443f-b9dd-ee0e9e0a7795"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--75e85269-638d-4f45-8d25-af320dcb016f.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8b1caa97-3fa6-4615-8646-30234d0399ce.json
similarity index 60%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--75e85269-638d-4f45-8d25-af320dcb016f.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--8b1caa97-3fa6-4615-8646-30234d0399ce.json
index 6739ec0..6ab30af 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--75e85269-638d-4f45-8d25-af320dcb016f.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8b1caa97-3fa6-4615-8646-30234d0399ce.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--10fbe158-63f4-4e2d-a1fc-ee1d2c55e25a",
+ "id": "bundle--3831627e-dd06-4451-ae56-bd64bd723567",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--75e85269-638d-4f45-8d25-af320dcb016f",
- "created_by_ref": "identity--77298d7c-7d70-4887-bbad-156a2f5abdce",
- "created": "2022-07-02T17:28:36.998231Z",
- "modified": "2022-07-02T17:28:36.998231Z",
+ "id": "attack-pattern--8b1caa97-3fa6-4615-8646-30234d0399ce",
+ "created_by_ref": "identity--3a736297-88d7-480b-84f0-de7e7e9ed035",
+ "created": "2022-07-02T19:59:12.722597Z",
+ "modified": "2022-07-02T19:59:12.722597Z",
"name": "Incentivize Sharing",
- "description": "TA17",
+ "description": "Incentivizing content sharing refers to actions that encourage users to share content themselves, reducing the need for the operation itself to post and promote its own content.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--3315b840-aeba-4cf1-bcb6-f6594c045fdd"
+ "marking-definition--b860236b-d914-40ec-96cf-bb1f1bce89d9"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c2651250-61d5-4cfa-92f2-4745198e0c29.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8e486393-6d94-4855-989e-9a9fa9acdd13.json
similarity index 60%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--c2651250-61d5-4cfa-92f2-4745198e0c29.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--8e486393-6d94-4855-989e-9a9fa9acdd13.json
index 0fa327b..81df1d5 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c2651250-61d5-4cfa-92f2-4745198e0c29.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8e486393-6d94-4855-989e-9a9fa9acdd13.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--57455342-ee82-4863-a8f3-a02062895623",
+ "id": "bundle--704baf7d-eab7-43d1-b557-80466cf6ccea",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c2651250-61d5-4cfa-92f2-4745198e0c29",
- "created_by_ref": "identity--2231528e-2ec2-4d72-a613-c137f1eba535",
- "created": "2022-07-02T17:28:36.953023Z",
- "modified": "2022-07-02T17:28:36.953023Z",
+ "id": "attack-pattern--8e486393-6d94-4855-989e-9a9fa9acdd13",
+ "created_by_ref": "identity--ee117265-a292-4a05-a9da-e856f57630d1",
+ "created": "2022-07-02T19:59:12.639572Z",
+ "modified": "2022-07-02T19:59:12.639572Z",
"name": "Segment Audiences",
- "description": "TA13",
+ "description": "Create audience segmentations by features of interest to the influence campaign, including political affiliation, geographic location, income, demographics, and psychographics. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e9d1a4f7-c217-487a-9a68-29db650709b4"
+ "marking-definition--115c0f3e-a0a1-434d-abf2-c28ceeacb491"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--429a7e7f-98f4-48e9-a5a0-a2a8d7038f4d.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--90b784fc-b681-48ab-a15e-f9e38ff64f27.json
similarity index 67%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--429a7e7f-98f4-48e9-a5a0-a2a8d7038f4d.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--90b784fc-b681-48ab-a15e-f9e38ff64f27.json
index b7b8c44..50f1bd7 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--429a7e7f-98f4-48e9-a5a0-a2a8d7038f4d.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--90b784fc-b681-48ab-a15e-f9e38ff64f27.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--1ee1fef2-9045-4e88-a1aa-750f6939d6be",
+ "id": "bundle--e7bdb8b7-1b61-440d-9142-a8f59795a732",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--429a7e7f-98f4-48e9-a5a0-a2a8d7038f4d",
- "created_by_ref": "identity--aaae704d-6e10-4815-ae51-38b77e67d8f6",
- "created": "2022-07-02T17:28:36.998578Z",
- "modified": "2022-07-02T17:28:36.998578Z",
+ "id": "attack-pattern--90b784fc-b681-48ab-a15e-f9e38ff64f27",
+ "created_by_ref": "identity--96822444-15f6-4ffb-baaf-b487dc116cc0",
+ "created": "2022-07-02T19:59:12.722935Z",
+ "modified": "2022-07-02T19:59:12.722935Z",
"name": "Use Affiliate Marketing Programs",
- "description": "TA17",
+ "description": "Use Affiliate Marketing Programs",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--9a005f5e-76a7-46ac-88d9-7eda1fcc5668"
+ "marking-definition--5eda3001-d48f-41fa-a7da-f270a5f9a1ab"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--78596a5d-9d80-4993-81dd-b89edd68cf21.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--91a26229-8c2f-46da-b4fb-5dc291ca84ad.json
similarity index 56%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--78596a5d-9d80-4993-81dd-b89edd68cf21.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--91a26229-8c2f-46da-b4fb-5dc291ca84ad.json
index a58931e..889bc53 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--78596a5d-9d80-4993-81dd-b89edd68cf21.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--91a26229-8c2f-46da-b4fb-5dc291ca84ad.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--c798eaac-3fde-4299-860e-2b45ceccb517",
+ "id": "bundle--b68402e7-855a-4dee-9ffc-bfa2db8fb535",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--78596a5d-9d80-4993-81dd-b89edd68cf21",
- "created_by_ref": "identity--0ee51536-f646-4885-9f41-d029f2088a24",
- "created": "2022-07-02T17:28:36.982226Z",
- "modified": "2022-07-02T17:28:36.982226Z",
+ "id": "attack-pattern--91a26229-8c2f-46da-b4fb-5dc291ca84ad",
+ "created_by_ref": "identity--80449a28-41c9-4c0c-ab88-99d103b8a716",
+ "created": "2022-07-02T19:59:12.6685Z",
+ "modified": "2022-07-02T19:59:12.6685Z",
"name": "Co-opt Trusted Sources",
- "description": "TA16",
+ "description": "An influence operation may co-opt trusted sources by infiltrating or repurposing a source to reach a target audience through existing, previously reliable networks. Co-opted trusted sources may include: \n- National or local new outlets \n- Research or academic publications \n- Online blogs or websites ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--363ff323-9442-4e72-98f0-c25f26a19cb5"
+ "marking-definition--a8b5e6d2-aa24-458a-87aa-f83eca2d85d0"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--00b0e33d-257e-44e0-9195-0c0c3f290d2c.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--92b5c39b-f162-482d-8704-e109b453f35f.json
similarity index 61%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--00b0e33d-257e-44e0-9195-0c0c3f290d2c.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--92b5c39b-f162-482d-8704-e109b453f35f.json
index db0b72e..3b05305 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--00b0e33d-257e-44e0-9195-0c0c3f290d2c.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--92b5c39b-f162-482d-8704-e109b453f35f.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--ecc080fe-b0c9-475b-ba29-1f6e93e4c286",
+ "id": "bundle--9a19cf32-3c13-40f7-a3e6-a81d666cdc92",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--00b0e33d-257e-44e0-9195-0c0c3f290d2c",
- "created_by_ref": "identity--74f6965b-94d2-4f9a-abb4-7516f8ff00dc",
- "created": "2022-07-02T17:28:36.989581Z",
- "modified": "2022-07-02T17:28:36.989581Z",
+ "id": "attack-pattern--92b5c39b-f162-482d-8704-e109b453f35f",
+ "created_by_ref": "identity--c25fa990-8b42-43ae-95f3-96b769c33295",
+ "created": "2022-07-02T19:59:12.676214Z",
+ "modified": "2022-07-02T19:59:12.676214Z",
"name": "Discussion Forums",
- "description": "TA07",
+ "description": "Platforms for finding, discussing, and sharing information and opinions. Examples include Reddit, Quora, Digg, message boards, interest-based discussion forums, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--73cc28c6-e106-407a-889c-c46dba825b1a"
+ "marking-definition--a1d638ab-59cc-45d6-af16-815c2c392c58"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0.json
similarity index 51%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0.json
index 850119a..e2a93ec 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--3946cdf0-0ad7-48c1-9f53-8dafe0776f47",
+ "id": "bundle--3884125d-5827-4905-acee-2f696159241d",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334",
- "created_by_ref": "identity--5342ef84-f577-458b-804c-256ffc7bd56b",
- "created": "2022-07-02T17:28:36.959732Z",
- "modified": "2022-07-02T17:28:36.959732Z",
+ "id": "attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0",
+ "created_by_ref": "identity--875c4f47-bae7-4c40-a92f-e6169a840b57",
+ "created": "2022-07-02T19:59:12.646566Z",
+ "modified": "2022-07-02T19:59:12.646566Z",
"name": "Identify Social and Technical Vulnerabilities",
- "description": "TA13",
+ "description": "Identifying social and technical vulnerabilities determines weaknesses within the target audience information environment for later exploitation. Vulnerabilities include decisive political issues, weak cybersecurity infrastructure, search engine data voids, and other technical and non technical weaknesses in the target information environment. \nIdentifying social and technical vulnerabilities facilitates the later exploitation of the identified weaknesses to advance operation objectives. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e8d5492f-5d18-4455-b160-8c2e002e337b"
+ "marking-definition--db94b503-922d-4110-a7e5-4fe556f70858"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--38a623d7-b925-49be-ac03-cae2586cea18.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--95eff1c5-0c9e-460e-9078-f45922ee4ee3.json
similarity index 65%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--38a623d7-b925-49be-ac03-cae2586cea18.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--95eff1c5-0c9e-460e-9078-f45922ee4ee3.json
index b4cc9bd..b1fa771 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--38a623d7-b925-49be-ac03-cae2586cea18.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--95eff1c5-0c9e-460e-9078-f45922ee4ee3.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--bf928adf-65cb-4ba8-8511-eb5870649a14",
+ "id": "bundle--a2d2375c-6593-425a-81f8-ded611aa2422",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--38a623d7-b925-49be-ac03-cae2586cea18",
- "created_by_ref": "identity--c61a981a-70e8-4a9c-9859-7ec335a6f1ab",
- "created": "2022-07-02T17:28:37.017787Z",
- "modified": "2022-07-02T17:28:37.017787Z",
+ "id": "attack-pattern--95eff1c5-0c9e-460e-9078-f45922ee4ee3",
+ "created_by_ref": "identity--b3cfa1ff-c664-40e0-a529-c1afbbeb2788",
+ "created": "2022-07-02T19:59:12.742835Z",
+ "modified": "2022-07-02T19:59:12.742835Z",
"name": "Social media engagement",
- "description": "TA12",
+ "description": "Monitor and evaluate social media engagement in misinformation incidents.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e84d6ddf-8e22-4eba-8a3c-f124b697d642"
+ "marking-definition--c2ee7399-e98d-41bc-8677-b35df56be6b7"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--04158d63-8072-48ae-a05a-23809682cd1f.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--970f666f-aa3b-4cea-9ca6-c8e2410dedbb.json
similarity index 61%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--04158d63-8072-48ae-a05a-23809682cd1f.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--970f666f-aa3b-4cea-9ca6-c8e2410dedbb.json
index 62530ce..5e130a9 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--04158d63-8072-48ae-a05a-23809682cd1f.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--970f666f-aa3b-4cea-9ca6-c8e2410dedbb.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--d7af83eb-bddf-4046-bd8c-595165846619",
+ "id": "bundle--3de7a681-3c63-4b2c-a296-d8949e2ac827",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--04158d63-8072-48ae-a05a-23809682cd1f",
- "created_by_ref": "identity--ab867de0-2067-4bd5-93af-886a89f62d00",
- "created": "2022-07-02T17:28:36.979936Z",
- "modified": "2022-07-02T17:28:36.979936Z",
+ "id": "attack-pattern--970f666f-aa3b-4cea-9ca6-c8e2410dedbb",
+ "created_by_ref": "identity--068e7816-d23e-4a0f-80c4-d6f75343eb00",
+ "created": "2022-07-02T19:59:12.666241Z",
+ "modified": "2022-07-02T19:59:12.666241Z",
"name": "Backstop personas ",
- "description": "TA16",
+ "description": "Create other assets/dossier/cover/fake relationships and/or connections or documents, sites, bylines, attributions, to establish/augment/inflate crediblity/believability",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--0d66717e-e6af-4eb0-926b-0b8d2fed6911"
+ "marking-definition--b3bd7c6c-a4f6-4280-b62b-e71d80231d2e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9772c4cc-18fd-4563-8119-0d295f90b088.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--973f4b45-2d71-4d57-a1c4-58411b90fa5c.json
similarity index 53%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--9772c4cc-18fd-4563-8119-0d295f90b088.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--973f4b45-2d71-4d57-a1c4-58411b90fa5c.json
index 1850fb9..efee9b0 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9772c4cc-18fd-4563-8119-0d295f90b088.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--973f4b45-2d71-4d57-a1c4-58411b90fa5c.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--bccc808e-d734-4fe8-8618-56f7e5c2f4f8",
+ "id": "bundle--3f3c13f0-539f-4705-97f8-3f3012ff20d5",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--9772c4cc-18fd-4563-8119-0d295f90b088",
- "created_by_ref": "identity--e3db6a0e-9b6a-469b-86ad-3b69acc4b624",
- "created": "2022-07-02T17:28:37.005865Z",
- "modified": "2022-07-02T17:28:37.005865Z",
+ "id": "attack-pattern--973f4b45-2d71-4d57-a1c4-58411b90fa5c",
+ "created_by_ref": "identity--fd2ee5ff-2e67-43f9-9a23-ece8438413c3",
+ "created": "2022-07-02T19:59:12.730481Z",
+ "modified": "2022-07-02T19:59:12.730481Z",
"name": "Use Pseudonyms",
- "description": "TA11",
+ "description": "An operation may use pseudonyms, or fake names, to mask the identity of operation accounts, publish anonymous content, or otherwise use falsified personas to conceal identity of the operation. An operation may coordinate pseudonyms across multiple platforms, for example, by writing an article under a pseudonym and then posting a link to the article on social media on an account with the same falsified name. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--18f6391e-73b6-4092-a633-96d6fa6f7b95"
+ "marking-definition--59fc4478-4c10-493e-9a23-3c04a961614e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--055ffd5d-4aa8-4ce4-8b6b-e91872d4b77d.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--98966f30-7ef7-4620-a9b1-20869084b669.json
similarity index 66%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--055ffd5d-4aa8-4ce4-8b6b-e91872d4b77d.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--98966f30-7ef7-4620-a9b1-20869084b669.json
index 0e1e720..435589e 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--055ffd5d-4aa8-4ce4-8b6b-e91872d4b77d.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--98966f30-7ef7-4620-a9b1-20869084b669.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--46048d65-3389-42dc-a6fd-2f33c312b0b1",
+ "id": "bundle--68a1bc4e-cd74-45f4-9385-8aeaa0bdbf61",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--055ffd5d-4aa8-4ce4-8b6b-e91872d4b77d",
- "created_by_ref": "identity--d8909872-ea5f-459a-aedc-4032bedcc2c9",
- "created": "2022-07-02T17:28:36.986362Z",
- "modified": "2022-07-02T17:28:36.986362Z",
+ "id": "attack-pattern--98966f30-7ef7-4620-a9b1-20869084b669",
+ "created_by_ref": "identity--74e9eead-3c88-4318-91b9-434052853145",
+ "created": "2022-07-02T19:59:12.672944Z",
+ "modified": "2022-07-02T19:59:12.672944Z",
"name": "Mainstream Social Networks",
- "description": "TA07",
+ "description": "Examples include Facebook, Twitter, LinkedIn, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--2330bc62-0a37-43c3-9bc4-98ff1df253b3"
+ "marking-definition--e6f16d2f-5342-4316-be20-1537787e649b"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8d9f0257-a14c-4397-92e5-0ee58ab9ece2.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--99be4349-8c12-4f07-aef1-22feb299c85b.json
similarity index 64%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--8d9f0257-a14c-4397-92e5-0ee58ab9ece2.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--99be4349-8c12-4f07-aef1-22feb299c85b.json
index d3a68f1..8414edf 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8d9f0257-a14c-4397-92e5-0ee58ab9ece2.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--99be4349-8c12-4f07-aef1-22feb299c85b.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--a34c04fe-2b98-4b43-9627-b0922cbf9ea8",
+ "id": "bundle--c10a1852-567c-4eb0-bb4e-2ee49474c9e1",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--8d9f0257-a14c-4397-92e5-0ee58ab9ece2",
- "created_by_ref": "identity--28f79bf4-ca54-4369-bb8e-2aa06c8ec461",
- "created": "2022-07-02T17:28:37.015814Z",
- "modified": "2022-07-02T17:28:37.015814Z",
+ "id": "attack-pattern--99be4349-8c12-4f07-aef1-22feb299c85b",
+ "created_by_ref": "identity--99a2b473-0f53-4df6-923a-447e598430bc",
+ "created": "2022-07-02T19:59:12.74087Z",
+ "modified": "2022-07-02T19:59:12.74087Z",
"name": "Content",
- "description": "TA12",
+ "description": "Measure current system state with respect to the effectiveness of campaign content. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--6c3d9c6a-ee60-4607-9e7f-cbcb54078a4b"
+ "marking-definition--62af16ad-6756-4b0f-b3a2-5a6b99577cee"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--38ac5a3d-12b5-46e5-9875-00514da8587a.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9a82c606-3876-4821-94a2-25aee12190d4.json
similarity index 57%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--38ac5a3d-12b5-46e5-9875-00514da8587a.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--9a82c606-3876-4821-94a2-25aee12190d4.json
index 340ce9d..5d0ca3d 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--38ac5a3d-12b5-46e5-9875-00514da8587a.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9a82c606-3876-4821-94a2-25aee12190d4.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--af38b9a2-c6bb-46c5-a552-70877ef062a6",
+ "id": "bundle--eb4cc968-d904-4b07-91fe-4ac3c038ee63",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--38ac5a3d-12b5-46e5-9875-00514da8587a",
- "created_by_ref": "identity--5fa8da8d-6fbd-4155-9d06-a0dcc3b6dd7d",
- "created": "2022-07-02T17:28:37.01039Z",
- "modified": "2022-07-02T17:28:37.01039Z",
+ "id": "attack-pattern--9a82c606-3876-4821-94a2-25aee12190d4",
+ "created_by_ref": "identity--0594a168-24ea-4308-8e12-14888e6dde54",
+ "created": "2022-07-02T19:59:12.735092Z",
+ "modified": "2022-07-02T19:59:12.735092Z",
"name": "Remove Post Origins",
- "description": "TA11",
+ "description": "Removing post origins refers to the elimination of evidence that indicates the initial source of operation content, often to complicate attribution. An influence operation may remove post origins by deleting watermarks, renaming files, or removing embedded links in its content. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--9abfc32c-4daa-440b-a6ad-439fb022dfc6"
+ "marking-definition--abe202d5-080b-45a2-a95e-ad9ed0287b88"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dc48b236-a1f8-4631-9645-bf76dd558c29.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9ae37313-f374-4007-bf44-91d0b85d8e1a.json
similarity index 64%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--dc48b236-a1f8-4631-9645-bf76dd558c29.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--9ae37313-f374-4007-bf44-91d0b85d8e1a.json
index ebf063b..99ca8d0 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dc48b236-a1f8-4631-9645-bf76dd558c29.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9ae37313-f374-4007-bf44-91d0b85d8e1a.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--ff305755-a634-4006-a1a0-18c8b194576e",
+ "id": "bundle--ec58c9fa-06b5-4eb8-966a-33abe17695f4",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--dc48b236-a1f8-4631-9645-bf76dd558c29",
- "created_by_ref": "identity--dad1c20e-63de-4448-b183-6efa6112d8ff",
- "created": "2022-07-02T17:28:36.972086Z",
- "modified": "2022-07-02T17:28:36.972086Z",
+ "id": "attack-pattern--9ae37313-f374-4007-bf44-91d0b85d8e1a",
+ "created_by_ref": "identity--c3e66673-d857-4d3a-b3ff-71f50ff1a100",
+ "created": "2022-07-02T19:59:12.658007Z",
+ "modified": "2022-07-02T19:59:12.658007Z",
"name": "Create Inauthentic Accounts",
- "description": "TA15",
+ "description": "Inauthentic accounts include bot accounts, cyborg accounts, sockpuppet accounts, and anonymous accounts.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a5d73ac3-eb8b-41fd-a1c5-624f984880bc"
+ "marking-definition--51dec3f0-5ebc-44fa-a974-392ea963cc72"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9c09e7a7-25f0-4d75-bab7-cf7d87dc6aff.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9c09e7a7-25f0-4d75-bab7-cf7d87dc6aff.json
deleted file mode 100644
index 48d8578..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9c09e7a7-25f0-4d75-bab7-cf7d87dc6aff.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--1a017754-69d4-4617-9855-c39c8c5b605c",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--9c09e7a7-25f0-4d75-bab7-cf7d87dc6aff",
- "created_by_ref": "identity--e5552586-b953-4949-a468-f23644a80984",
- "created": "2022-07-02T17:28:37.001367Z",
- "modified": "2022-07-02T17:28:37.001367Z",
- "name": "Destroy Information Generation Capabilities",
- "description": "TA18",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "drive-online-harms"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0123.003.md",
- "external_id": "T0123.003"
- }
- ],
- "object_marking_refs": [
- "marking-definition--79653259-6aba-49f6-b9a7-c0768bb4b1eb"
- ],
- "x_mitre_is_subtechnique": true,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5e2a649f-138b-4262-9397-2ced89d77d0e.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9d40d2ec-4083-40d0-a2ef-370a7366d0aa.json
similarity index 54%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--5e2a649f-138b-4262-9397-2ced89d77d0e.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--9d40d2ec-4083-40d0-a2ef-370a7366d0aa.json
index a33059f..ca325e6 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5e2a649f-138b-4262-9397-2ced89d77d0e.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9d40d2ec-4083-40d0-a2ef-370a7366d0aa.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--b2c7e707-6766-4f0d-9f0f-65af9d0a25ba",
+ "id": "bundle--adb4e5e3-9feb-4dae-a951-b81a3ef06c68",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--5e2a649f-138b-4262-9397-2ced89d77d0e",
- "created_by_ref": "identity--71e7964f-35ec-42c9-9fd6-334f5dc3ee13",
- "created": "2022-07-02T17:28:36.963271Z",
- "modified": "2022-07-02T17:28:36.963271Z",
+ "id": "attack-pattern--9d40d2ec-4083-40d0-a2ef-370a7366d0aa",
+ "created_by_ref": "identity--9c93c304-5f9f-4786-951d-24eed34bf51e",
+ "created": "2022-07-02T19:59:12.649494Z",
+ "modified": "2022-07-02T19:59:12.649494Z",
"name": "Develop New Narratives",
- "description": "TA14",
+ "description": "Actors may develop new narratives to further strategic or tactical goals, especially when existing narratives adequately align with the campaign goals. New narratives provide more control in terms of crafting the message to achieve specific goals. However, new narratives may require more effort to disseminate than adapting or adopting existing narratives. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c42cd74e-8f97-4e44-9f3d-60e8d6c90111"
+ "marking-definition--be1a2137-010b-4a3f-84f5-fa557f9dacba"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b060ced6-1ae3-4eed-a7aa-197f6ab40036.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9d782db0-5bea-45cd-b27b-af2331d4f249.json
similarity index 59%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--b060ced6-1ae3-4eed-a7aa-197f6ab40036.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--9d782db0-5bea-45cd-b27b-af2331d4f249.json
index 1dfaab3..7d2a49d 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b060ced6-1ae3-4eed-a7aa-197f6ab40036.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9d782db0-5bea-45cd-b27b-af2331d4f249.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--b16e080f-44a7-4b36-bc12-4685a758166c",
+ "id": "bundle--08a062bd-3aee-4079-b784-7842e13618bb",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b060ced6-1ae3-4eed-a7aa-197f6ab40036",
- "created_by_ref": "identity--08fd35f9-afaa-4c0a-b831-eb3790d33c50",
- "created": "2022-07-02T17:28:36.944638Z",
- "modified": "2022-07-02T17:28:36.944638Z",
+ "id": "attack-pattern--9d782db0-5bea-45cd-b27b-af2331d4f249",
+ "created_by_ref": "identity--d043f52a-0b41-4320-ad9e-04e34a716009",
+ "created": "2022-07-02T19:59:12.631045Z",
+ "modified": "2022-07-02T19:59:12.631045Z",
"name": "Use Search Engine Optimization",
- "description": "TA08",
+ "description": "Manipulate content engagement metrics (ie: Reddit & Twitter) to influence/impact news search results (e.g. Google), also elevates RT & Sputnik headline into Google news alert emails. aka \"Black-hat SEO\" ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7847d3b3-30f6-46b8-acaf-20f863c1bf63"
+ "marking-definition--82e560b5-5126-4dc4-b377-3f3589027881"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--84a417d1-ee53-43cc-ae7b-440a3e1ba555.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9e00d7b6-72ac-4e51-85cc-ed39df4de126.json
similarity index 55%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--84a417d1-ee53-43cc-ae7b-440a3e1ba555.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--9e00d7b6-72ac-4e51-85cc-ed39df4de126.json
index 988c533..c7b8586 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--84a417d1-ee53-43cc-ae7b-440a3e1ba555.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9e00d7b6-72ac-4e51-85cc-ed39df4de126.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--7d371b67-1333-4592-a0e7-7463f8cb17e6",
+ "id": "bundle--c466f471-d001-4eb6-ae24-ef74b5913f77",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--84a417d1-ee53-43cc-ae7b-440a3e1ba555",
- "created_by_ref": "identity--dd39b0e9-bced-45fd-addd-7a368b10b926",
- "created": "2022-07-02T17:28:36.981584Z",
- "modified": "2022-07-02T17:28:36.981584Z",
+ "id": "attack-pattern--9e00d7b6-72ac-4e51-85cc-ed39df4de126",
+ "created_by_ref": "identity--2c308133-6863-48d6-909c-4b0816cf8c0b",
+ "created": "2022-07-02T19:59:12.667854Z",
+ "modified": "2022-07-02T19:59:12.667854Z",
"name": "Astroturfing",
- "description": "TA16",
+ "description": "Astroturfing occurs when an influence operation disguises itself as grassroots movement or organization that supports operation narratives. Unlike butterfly attacks, astroturfing aims to increase the appearance of popular support for the operation cause and does not infiltrate existing groups to discredit their objectives. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--373a6e38-aca3-45ba-ad9a-299bc5a4c4bd"
+ "marking-definition--585ed65b-771a-45dd-8e2a-bf8976a09c41"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--52d6fdeb-d6c6-4a0b-bf8e-6bc7b29e37ec.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9e3cb11b-78e4-4ff3-9040-0a14d5b20951.json
similarity index 64%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--52d6fdeb-d6c6-4a0b-bf8e-6bc7b29e37ec.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--9e3cb11b-78e4-4ff3-9040-0a14d5b20951.json
index 0067eca..b943041 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--52d6fdeb-d6c6-4a0b-bf8e-6bc7b29e37ec.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9e3cb11b-78e4-4ff3-9040-0a14d5b20951.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--a433e9a5-5f57-40d9-a62c-13654acebeac",
+ "id": "bundle--30173924-3436-4a1b-bff7-df3e6a719386",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--52d6fdeb-d6c6-4a0b-bf8e-6bc7b29e37ec",
- "created_by_ref": "identity--49b61c97-8260-4d89-9c3b-6ed4fe263946",
- "created": "2022-07-02T17:28:36.974405Z",
- "modified": "2022-07-02T17:28:36.974405Z",
+ "id": "attack-pattern--9e3cb11b-78e4-4ff3-9040-0a14d5b20951",
+ "created_by_ref": "identity--63834bff-db7e-4ed7-8030-719074626ce9",
+ "created": "2022-07-02T19:59:12.66044Z",
+ "modified": "2022-07-02T19:59:12.66044Z",
"name": "Recruit Partisans",
- "description": "TA15",
+ "description": "Operators recruit partisans (ideologically-aligned individuals) to support the campaign.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--b487d22d-05cb-4169-91f3-a2735c9bb9aa"
+ "marking-definition--50f2b820-4199-4d85-8eaf-4b858d781353"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f963fd61-4dc3-4267-8aad-ac14a6a3937d.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9e6db77c-67e3-49ce-9cd2-15fdef67464f.json
similarity index 60%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--f963fd61-4dc3-4267-8aad-ac14a6a3937d.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--9e6db77c-67e3-49ce-9cd2-15fdef67464f.json
index fd38d60..402c003 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f963fd61-4dc3-4267-8aad-ac14a6a3937d.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9e6db77c-67e3-49ce-9cd2-15fdef67464f.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--1ff0d869-f573-4663-b70e-653d1ad6c8e2",
+ "id": "bundle--ee1b6061-75ce-4deb-9b2e-d8130eed98a7",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--f963fd61-4dc3-4267-8aad-ac14a6a3937d",
- "created_by_ref": "identity--8419d22c-344a-44c7-bf89-d297c97001a7",
- "created": "2022-07-02T17:28:37.007808Z",
- "modified": "2022-07-02T17:28:37.007808Z",
+ "id": "attack-pattern--9e6db77c-67e3-49ce-9cd2-15fdef67464f",
+ "created_by_ref": "identity--cb3eb4d0-eca5-4d07-bcda-d3bcba0d8698",
+ "created": "2022-07-02T19:59:12.73245Z",
+ "modified": "2022-07-02T19:59:12.73245Z",
"name": "Conceal Network Identity",
- "description": "TA11",
+ "description": "Concealing network identity aims to hide the existence an influence operation\u2019s network completely. Unlike concealing sponsorship, concealing network identity denies the existence of any sort of organization. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--1e9baecf-6dde-4915-bc57-9c87fa6740dd"
+ "marking-definition--b0d30afe-cd0b-439a-940e-8b11b65c8f2a"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--964713f6-d78e-4795-a89f-a4700996614a.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9fbaa5a6-9bbd-4819-866b-22d1a11f8592.json
similarity index 50%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--964713f6-d78e-4795-a89f-a4700996614a.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--9fbaa5a6-9bbd-4819-866b-22d1a11f8592.json
index a24ad30..5a0ab2e 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--964713f6-d78e-4795-a89f-a4700996614a.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9fbaa5a6-9bbd-4819-866b-22d1a11f8592.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--17e63d0d-d22d-47a2-943a-510521c492ae",
+ "id": "bundle--86a51609-ba55-4539-aa42-1be1c041a735",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--964713f6-d78e-4795-a89f-a4700996614a",
- "created_by_ref": "identity--0bc96d3b-c45b-4d8a-896e-0a73db97b600",
- "created": "2022-07-02T17:28:36.946583Z",
- "modified": "2022-07-02T17:28:36.946583Z",
+ "id": "attack-pattern--9fbaa5a6-9bbd-4819-866b-22d1a11f8592",
+ "created_by_ref": "identity--fa8305af-3ec5-4cb3-81ee-8a919fbb6f1f",
+ "created": "2022-07-02T19:59:12.633026Z",
+ "modified": "2022-07-02T19:59:12.633026Z",
"name": "Dox",
- "description": "TA18",
+ "description": "Doxing refers to online harassment in which individuals publicly release private information about another individual, including names, addresses, employment information, pictures, family members, and other sensitive information. An influence operation may dox its opposition to encourage individuals aligned with operation narratives to harass the doxed individuals themselves or otherwise discourage the doxed individuals from posting or proliferating conflicting content. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--9928648e-eee0-41d9-ae74-a84378cedb30"
+ "marking-definition--2386ad57-e1d1-49bf-9ab4-d27265adcbe6"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d7644818-db53-4599-aacb-8d8957496406.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a029c72f-ec8a-4c9e-a5b6-25cd78f37cec.json
similarity index 64%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--d7644818-db53-4599-aacb-8d8957496406.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--a029c72f-ec8a-4c9e-a5b6-25cd78f37cec.json
index a843d21..66daf59 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d7644818-db53-4599-aacb-8d8957496406.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a029c72f-ec8a-4c9e-a5b6-25cd78f37cec.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--234d840f-009a-4ee1-b27f-a390a41f3d8d",
+ "id": "bundle--7c37868c-07b4-43fd-8275-0b5061f46fd7",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--d7644818-db53-4599-aacb-8d8957496406",
- "created_by_ref": "identity--8bd3298d-fef1-40d3-a45f-eab90bb1f58e",
- "created": "2022-07-02T17:28:37.01645Z",
- "modified": "2022-07-02T17:28:37.01645Z",
+ "id": "attack-pattern--a029c72f-ec8a-4c9e-a5b6-25cd78f37cec",
+ "created_by_ref": "identity--705989cf-5835-48c4-a16f-864aba8df5ab",
+ "created": "2022-07-02T19:59:12.741513Z",
+ "modified": "2022-07-02T19:59:12.741513Z",
"name": "Knowledge",
- "description": "TA12",
+ "description": "Measure current system state with respect to the effectiveness of influencing knowledge. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--8b25f549-8c2a-4789-9d74-11aa8bf05eb4"
+ "marking-definition--1f439f9e-194d-4aee-8a76-4b527fea7424"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--42bc5436-0436-4120-81f3-ebc41c61a157.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a0a40ba8-5a7f-46a5-8bcc-8ea5f9bdd832.json
similarity index 67%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--42bc5436-0436-4120-81f3-ebc41c61a157.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--a0a40ba8-5a7f-46a5-8bcc-8ea5f9bdd832.json
index f4e25b6..aeb7802 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--42bc5436-0436-4120-81f3-ebc41c61a157.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a0a40ba8-5a7f-46a5-8bcc-8ea5f9bdd832.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--c10ec805-431d-4ca5-ac9d-5f2dce27ec1f",
+ "id": "bundle--359181a8-6496-4dc8-aab9-2105ff44bc65",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--42bc5436-0436-4120-81f3-ebc41c61a157",
- "created_by_ref": "identity--9bf6e66d-85dc-42c2-b742-81ea30b64a3f",
- "created": "2022-07-02T17:28:36.943681Z",
- "modified": "2022-07-02T17:28:36.943681Z",
+ "id": "attack-pattern--a0a40ba8-5a7f-46a5-8bcc-8ea5f9bdd832",
+ "created_by_ref": "identity--13d5420b-1074-4db5-adfa-f2e5cfea90ed",
+ "created": "2022-07-02T19:59:12.630045Z",
+ "modified": "2022-07-02T19:59:12.630045Z",
"name": "Use Unencrypted Chats Apps",
- "description": "TA07",
+ "description": "Examples include SMS, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--cdac0b8f-298e-4fa6-838d-9fd6f238c6b1"
+ "marking-definition--06ef863e-ee0c-4beb-ad8d-70753b159674"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a0a9b00c-cd91-4bbb-bfe7-546b64d8334d.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a0a9b00c-cd91-4bbb-bfe7-546b64d8334d.json
new file mode 100644
index 0000000..914bdc2
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a0a9b00c-cd91-4bbb-bfe7-546b64d8334d.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--814514c5-f1f0-42e0-8d79-579c21a131bf",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--a0a9b00c-cd91-4bbb-bfe7-546b64d8334d",
+ "created_by_ref": "identity--cbd74599-47fb-487d-aacf-ed5ecafe4cba",
+ "created": "2022-07-02T19:59:12.658659Z",
+ "modified": "2022-07-02T19:59:12.658659Z",
+ "name": "Create Cyborg Accounts",
+ "description": "Cyborg accounts refer to partly manned, partly automated social media accounts. Cyborg accounts primarily act as bots, but a human operator periodically takes control of the account to engage with real social media users by responding to comments and posting original content. Influence operations may use cyborg accounts to reduce the amount of direct human input required to maintain a regular account but increase the apparent legitimacy of the cyborg account by occasionally breaking its bot-like behavior with human interaction. ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "establish-social-assets"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0090.002.md",
+ "external_id": "T0090.002"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--fa557297-80e7-425f-b96e-fb683a2d9abc"
+ ],
+ "x_mitre_is_subtechnique": true,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a94b4289-5956-4b89-a3a8-d1ed9b604840.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a1035e5a-489e-48e5-9a08-4c02118440dc.json
similarity index 57%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--a94b4289-5956-4b89-a3a8-d1ed9b604840.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--a1035e5a-489e-48e5-9a08-4c02118440dc.json
index 6864b4e..c346066 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a94b4289-5956-4b89-a3a8-d1ed9b604840.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a1035e5a-489e-48e5-9a08-4c02118440dc.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--0fe0d3d8-05d5-453b-a352-ccdefb203450",
+ "id": "bundle--808ae930-2831-4f1a-9bc8-c0ea46a7668d",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a94b4289-5956-4b89-a3a8-d1ed9b604840",
- "created_by_ref": "identity--4bba6178-e2f9-4a7d-99a0-674d73da8bf8",
- "created": "2022-07-02T17:28:36.943008Z",
- "modified": "2022-07-02T17:28:36.943008Z",
+ "id": "attack-pattern--a1035e5a-489e-48e5-9a08-4c02118440dc",
+ "created_by_ref": "identity--f873d380-dc93-4249-820c-80d0b0f08330",
+ "created": "2022-07-02T19:59:12.629365Z",
+ "modified": "2022-07-02T19:59:12.629365Z",
"name": "Chat apps",
- "description": "TA07",
+ "description": "Direct messaging via chat app is an increasing method of delivery. These messages are often automated and new delivery and storage methods make them anonymous, viral, and ephemeral. This is a difficult space to monitor, but also a difficult space to build acclaim or notoriety.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--f1901b11-0c26-4296-8180-bd1084534f1c"
+ "marking-definition--d53fa5af-9b3d-4646-96dd-9db9a5b1d73b"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--de49e2b8-5756-4dc9-9f52-ee053a9c9fbc.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a1460819-670d-48a8-8fd0-945c111b1860.json
similarity index 62%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--de49e2b8-5756-4dc9-9f52-ee053a9c9fbc.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--a1460819-670d-48a8-8fd0-945c111b1860.json
index 71feee2..954f5f7 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--de49e2b8-5756-4dc9-9f52-ee053a9c9fbc.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a1460819-670d-48a8-8fd0-945c111b1860.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--f4246744-d517-4923-a451-8048f4010b97",
+ "id": "bundle--4d0ee829-c0b0-47d4-94db-48014025bcb4",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--de49e2b8-5756-4dc9-9f52-ee053a9c9fbc",
- "created_by_ref": "identity--e4f4d93a-31b2-4e5a-b906-72ca0314f590",
- "created": "2022-07-02T17:28:36.943999Z",
- "modified": "2022-07-02T17:28:36.943999Z",
+ "id": "attack-pattern--a1460819-670d-48a8-8fd0-945c111b1860",
+ "created_by_ref": "identity--bae04830-cb66-4b4d-b534-05d9152ae12d",
+ "created": "2022-07-02T19:59:12.630382Z",
+ "modified": "2022-07-02T19:59:12.630382Z",
"name": "Seed distortions",
- "description": "TA08",
+ "description": "Try a wide variety of messages in the early hours surrounding an incident or event, to give a misleading account or impression. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--5760e34d-e246-4e07-9e85-9045d51c239c"
+ "marking-definition--6036d55a-b0da-45f1-9cba-abd3bfe08370"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--20a5cd5a-48be-48e4-83a7-c03efe6f66fa.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a17d4c62-fb85-4dd7-8c0e-9bf4c6787524.json
similarity index 52%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--20a5cd5a-48be-48e4-83a7-c03efe6f66fa.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--a17d4c62-fb85-4dd7-8c0e-9bf4c6787524.json
index 07db1b3..6301862 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--20a5cd5a-48be-48e4-83a7-c03efe6f66fa.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a17d4c62-fb85-4dd7-8c0e-9bf4c6787524.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--63554396-d203-4f38-a545-e161f7c7e8aa",
+ "id": "bundle--5e4f6259-91b1-44d5-9018-9877e6981b4c",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--20a5cd5a-48be-48e4-83a7-c03efe6f66fa",
- "created_by_ref": "identity--ea725fa9-8b4b-4ecd-9d90-9c4611efa4c3",
- "created": "2022-07-02T17:28:36.963605Z",
- "modified": "2022-07-02T17:28:36.963605Z",
+ "id": "attack-pattern--a17d4c62-fb85-4dd7-8c0e-9bf4c6787524",
+ "created_by_ref": "identity--68ef09b8-c250-4bf2-bb14-c4d4d77b8fe3",
+ "created": "2022-07-02T19:59:12.649824Z",
+ "modified": "2022-07-02T19:59:12.649824Z",
"name": "Integrate Target Audience Vulnerabilities into Narrative",
- "description": "TA14",
+ "description": "An influence operation may seek to exploit the preexisting weaknesses, fears, and enemies of the target audience for integration into the operation\u2019s narratives and overall strategy. Integrating existing vulnerabilities into the operational approach conserves resources by exploiting already weak areas of the target information environment instead of forcing the operation to create new vulnerabilities in the environment.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--eb5a95f9-cb0a-4fd9-878d-baffa84f72bd"
+ "marking-definition--7fbc122b-40f0-4dd7-8c85-2d06fe871920"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e4737241-ecc0-4ca1-a029-0ecd8b710862.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a18dda94-01e8-413a-98c4-125f28091614.json
similarity index 63%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--e4737241-ecc0-4ca1-a029-0ecd8b710862.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--a18dda94-01e8-413a-98c4-125f28091614.json
index 810e675..bbddc3e 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e4737241-ecc0-4ca1-a029-0ecd8b710862.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a18dda94-01e8-413a-98c4-125f28091614.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--356c28c7-ad3d-481b-bf15-35afe50dc02c",
+ "id": "bundle--435f68e0-cce3-46c6-89dc-05e5fee94ed0",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--e4737241-ecc0-4ca1-a029-0ecd8b710862",
- "created_by_ref": "identity--57957b2f-1e95-4526-997a-d8b1794a0d49",
- "created": "2022-07-02T17:28:37.005548Z",
- "modified": "2022-07-02T17:28:37.005548Z",
+ "id": "attack-pattern--a18dda94-01e8-413a-98c4-125f28091614",
+ "created_by_ref": "identity--57d46698-88d9-4a9c-965c-e490522af3a9",
+ "created": "2022-07-02T19:59:12.730137Z",
+ "modified": "2022-07-02T19:59:12.730137Z",
"name": "Conceal People",
- "description": "TA11",
+ "description": "Conceal the identity or provenance of a campaign's account and people assets to avoid takedown and attribution.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--640186d3-0dda-4b06-b69b-0c9d63ce44c9"
+ "marking-definition--bc374c8b-e7e6-46fe-b3b6-927bf6aef187"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cc032d4b-b84c-46f7-ba6f-6b04fdf20299.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a463f183-d98c-4bfb-ae1c-7614958be7be.json
similarity index 52%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--cc032d4b-b84c-46f7-ba6f-6b04fdf20299.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--a463f183-d98c-4bfb-ae1c-7614958be7be.json
index 00d669e..bdc8db0 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cc032d4b-b84c-46f7-ba6f-6b04fdf20299.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a463f183-d98c-4bfb-ae1c-7614958be7be.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--91ecb165-fc0c-40c2-8e80-f18c2d17fb03",
+ "id": "bundle--ec3e152c-18b7-4bc1-b8a9-b63a8c00b5ac",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--cc032d4b-b84c-46f7-ba6f-6b04fdf20299",
- "created_by_ref": "identity--5feeb817-b252-4e5f-91e1-ebd2595dbbc1",
- "created": "2022-07-02T17:28:37.00169Z",
- "modified": "2022-07-02T17:28:37.00169Z",
+ "id": "attack-pattern--a463f183-d98c-4bfb-ae1c-7614958be7be",
+ "created_by_ref": "identity--c2f635ef-12ba-4738-9072-571178b45620",
+ "created": "2022-07-02T19:59:12.725924Z",
+ "modified": "2022-07-02T19:59:12.725924Z",
"name": "Conduct Server Redirect",
- "description": "TA18",
+ "description": "A server redirect, also known as a URL redirect, occurs when a server automatically forwards a user from one URL to another using server-side scripting languages. An influence operation may conduct a server redirect to divert target audience members from one website to another without their knowledge. The redirected website may pose as a legitimate source, host malware, or otherwise aid operation objectives.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--4cab0f8d-83cf-45fa-a664-e08aa60122bf"
+ "marking-definition--02d672fc-6539-46fa-8381-6145b1930202"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--939d0f04-b080-47cc-ad3a-c971084d37ca.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a5d16185-7fbd-41e8-b549-f8534a570ca9.json
similarity index 56%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--939d0f04-b080-47cc-ad3a-c971084d37ca.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--a5d16185-7fbd-41e8-b549-f8534a570ca9.json
index c4f7a89..4626bb7 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--939d0f04-b080-47cc-ad3a-c971084d37ca.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a5d16185-7fbd-41e8-b549-f8534a570ca9.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--91e3f612-698c-47ec-a1a5-bea9c3dec9c6",
+ "id": "bundle--47b527bf-5eb2-4eff-9d0b-52cab68a12ee",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--939d0f04-b080-47cc-ad3a-c971084d37ca",
- "created_by_ref": "identity--c1d42c8c-367c-4aea-bd96-d35e890f9df3",
- "created": "2022-07-02T17:28:36.975074Z",
- "modified": "2022-07-02T17:28:36.975074Z",
+ "id": "attack-pattern--a5d16185-7fbd-41e8-b549-f8534a570ca9",
+ "created_by_ref": "identity--0e3efd5a-baf0-4788-b647-75a5a0e7cf03",
+ "created": "2022-07-02T19:59:12.661177Z",
+ "modified": "2022-07-02T19:59:12.661177Z",
"name": "Build Network",
- "description": "TA15",
+ "description": "Operators build their own network, creating links between accounts -- whether authentic or inauthentic -- in order amplify and promote narratives and artifacts, and encourage further growth of ther network, as well as the ongoing sharing and engagement with operational content.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7cb70c73-8093-49bf-8595-6720de0bc5e4"
+ "marking-definition--eccd6ccd-7558-4fb6-8814-38d88bbbbaa3"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a6e4691f-4907-4270-ab84-fbb1b01be00c.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a6e4691f-4907-4270-ab84-fbb1b01be00c.json
new file mode 100644
index 0000000..0ba4e41
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a6e4691f-4907-4270-ab84-fbb1b01be00c.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--ca863949-46b8-4107-89bb-85b911cdfb65",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--a6e4691f-4907-4270-ab84-fbb1b01be00c",
+ "created_by_ref": "identity--2011c19d-8b82-4ba8-b189-8e29794d2689",
+ "created": "2022-07-02T19:59:12.634456Z",
+ "modified": "2022-07-02T19:59:12.634456Z",
+ "name": "Bots Amplify via Automated Forwarding and Reposting",
+ "description": "Automated forwarding and reposting refer to the proliferation of operation content using automated means, such as artificial intelligence or social media bots. An influence operation may use automated activity to increase content exposure without dedicating the resources, including personnel and time, traditionally required to forward and repost content. \nUse bots to amplify narratives above algorithm thresholds. Bots are automated/programmed profiles designed to amplify content (ie: automatically retweet or like) and give appearance it's more \"popular\" than it is. They can operate as a network, to function in a coordinated/orchestrated manner. In some cases (more so now) they are an inexpensive/disposable assets used for minimal deployment as bot detection tools improve and platforms are more responsive.",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "maximize-exposure"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0049.003.md",
+ "external_id": "T0049.003"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--dc054ca6-5041-44df-85a7-d2542b491c76"
+ ],
+ "x_mitre_is_subtechnique": true,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--494544eb-fb55-41f6-82f2-c2a180ebd8b4.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a7cfa600-2359-4fdd-8c5f-d6efef64b498.json
similarity index 66%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--494544eb-fb55-41f6-82f2-c2a180ebd8b4.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--a7cfa600-2359-4fdd-8c5f-d6efef64b498.json
index 4580f02..90466fb 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--494544eb-fb55-41f6-82f2-c2a180ebd8b4.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a7cfa600-2359-4fdd-8c5f-d6efef64b498.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--c3880f04-3178-4b22-af63-41b6bd5b90e4",
+ "id": "bundle--e9fb4374-ba68-46d9-af42-8abdb0a9b6db",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--494544eb-fb55-41f6-82f2-c2a180ebd8b4",
- "created_by_ref": "identity--d754da6d-2eb3-4be0-af01-7e18f16c5c99",
- "created": "2022-07-02T17:28:36.98859Z",
- "modified": "2022-07-02T17:28:36.98859Z",
+ "id": "attack-pattern--a7cfa600-2359-4fdd-8c5f-d6efef64b498",
+ "created_by_ref": "identity--efd0df9f-53be-43e5-b892-1468e5aaf488",
+ "created": "2022-07-02T19:59:12.675212Z",
+ "modified": "2022-07-02T19:59:12.675212Z",
"name": "Photo Sharing",
- "description": "TA07",
+ "description": "Examples include Instagram, Snapchat, Flickr, etc",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--5bb3ffa6-a109-4437-a115-5dd27d72c8fe"
+ "marking-definition--db4377f4-c2c0-46b5-8475-4d3f2a2a584d"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--da6adc03-a37d-45bf-973c-1297375f3f94.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a87a01a1-ae12-4859-8ad3-faeb0dd458af.json
similarity index 53%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--da6adc03-a37d-45bf-973c-1297375f3f94.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--a87a01a1-ae12-4859-8ad3-faeb0dd458af.json
index 6e73e8d..76d131f 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--da6adc03-a37d-45bf-973c-1297375f3f94.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a87a01a1-ae12-4859-8ad3-faeb0dd458af.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--2293d6b5-2fd7-45ba-89b2-915bdd89f9d4",
+ "id": "bundle--bf2e20de-bbdf-45bc-964a-b2a2dc00095c",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--da6adc03-a37d-45bf-973c-1297375f3f94",
- "created_by_ref": "identity--9922dc47-7bf3-4dbf-9d2f-87e7cea04781",
- "created": "2022-07-02T17:28:36.953668Z",
- "modified": "2022-07-02T17:28:36.953668Z",
+ "id": "attack-pattern--a87a01a1-ae12-4859-8ad3-faeb0dd458af",
+ "created_by_ref": "identity--03de22a0-3057-4861-82b2-c57865dd5e85",
+ "created": "2022-07-02T19:59:12.640215Z",
+ "modified": "2022-07-02T19:59:12.640215Z",
"name": "Demographic Segmentation",
- "description": "TA13",
+ "description": "An influence operation may target populations based on demographic segmentation, including age, gender, and income. Demographic segmentation may be useful for influence operations aiming to change state policies that affect a specific population sector. For example, an influence operation attempting to influence Medicare funding in the United States would likely target U.S. voters over 65 years of age. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--877c1556-6477-4d45-8bb5-da084b772050"
+ "marking-definition--70caef3e-4a85-4c5d-a4a6-d1ffd5c3f57a"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4a332cd3-c862-46e1-b571-e888a67ce45a.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a89acdfa-423d-41ea-bb0c-cbe1815b0e58.json
similarity index 62%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--4a332cd3-c862-46e1-b571-e888a67ce45a.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--a89acdfa-423d-41ea-bb0c-cbe1815b0e58.json
index 1c9d4cb..e9801c6 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4a332cd3-c862-46e1-b571-e888a67ce45a.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a89acdfa-423d-41ea-bb0c-cbe1815b0e58.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--6f7dc487-30a4-4033-a504-d58883c23e21",
+ "id": "bundle--b7d28ab0-5b18-42c3-83cc-db51f0be29ca",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4a332cd3-c862-46e1-b571-e888a67ce45a",
- "created_by_ref": "identity--111045d1-6a2e-4077-a536-5024c741a30f",
- "created": "2022-07-02T17:28:36.956907Z",
- "modified": "2022-07-02T17:28:36.956907Z",
+ "id": "attack-pattern--a89acdfa-423d-41ea-bb0c-cbe1815b0e58",
+ "created_by_ref": "identity--80a6339c-b322-457f-94af-58214b2f11a0",
+ "created": "2022-07-02T19:59:12.643684Z",
+ "modified": "2022-07-02T19:59:12.643684Z",
"name": "Dismay",
- "description": "TA02",
+ "description": "Threaten the critic or narrator of events. For instance, threaten journalists or news outlets reporting on a story.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--4ba7978a-0a00-4041-91e0-da3e1f74bef5"
+ "marking-definition--20325c51-1b7f-4d8b-b97a-288c0c9a6af2"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--758bf258-2fad-4905-b920-aa3a1ae3fe0e.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a8cbd92a-bf04-4f6c-85d2-2d8802d3905e.json
similarity index 60%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--758bf258-2fad-4905-b920-aa3a1ae3fe0e.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--a8cbd92a-bf04-4f6c-85d2-2d8802d3905e.json
index a665c57..04d386b 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--758bf258-2fad-4905-b920-aa3a1ae3fe0e.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a8cbd92a-bf04-4f6c-85d2-2d8802d3905e.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--3d770c78-d490-4545-b670-3f628c423b23",
+ "id": "bundle--1b4c1662-0856-4c91-8e5e-84fb3642171c",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--758bf258-2fad-4905-b920-aa3a1ae3fe0e",
- "created_by_ref": "identity--72a8f06f-bd17-4d14-8083-8c766065e38f",
- "created": "2022-07-02T17:28:37.010067Z",
- "modified": "2022-07-02T17:28:37.010067Z",
+ "id": "attack-pattern--a8cbd92a-bf04-4f6c-85d2-2d8802d3905e",
+ "created_by_ref": "identity--5122aed8-f506-421b-be45-cc121d92c6c6",
+ "created": "2022-07-02T19:59:12.734746Z",
+ "modified": "2022-07-02T19:59:12.734746Z",
"name": "Redirect URLs",
- "description": "TA11",
+ "description": "An influence operation may redirect its falsified or typosquatted URLs to legitimate websites to increase the operation's appearance of legitimacy, complicate attribution, and avoid detection. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--5f53e8cf-b8a2-49e8-8777-393f98e60b3c"
+ "marking-definition--8be12637-7a31-4c0f-8d1e-49c0c04f957c"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a922b4a9-b5c1-479e-b471-a06a94320842.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a922b4a9-b5c1-479e-b471-a06a94320842.json
deleted file mode 100644
index 205edf5..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a922b4a9-b5c1-479e-b471-a06a94320842.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--e132f723-07ee-414e-bc7a-720b7d791525",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--a922b4a9-b5c1-479e-b471-a06a94320842",
- "created_by_ref": "identity--f7fb6477-2686-4fe5-86f4-a7d098b67d8c",
- "created": "2022-07-02T17:28:36.937566Z",
- "modified": "2022-07-02T17:28:36.937566Z",
- "name": "Conduct fundraising",
- "description": "TA10",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "drive-offline-activity"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0017.md",
- "external_id": "T0017"
- }
- ],
- "object_marking_refs": [
- "marking-definition--0d3bd0bd-db8b-4588-8394-7f8c7f9cc5ed"
- ],
- "x_mitre_is_subtechnique": false,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--27bd786c-eb5e-4e88-9786-b4cea8789542.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a9ec183d-c4dc-4c17-8571-f6e9dbdc643f.json
similarity index 65%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--27bd786c-eb5e-4e88-9786-b4cea8789542.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--a9ec183d-c4dc-4c17-8571-f6e9dbdc643f.json
index e6b0f72..174a268 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--27bd786c-eb5e-4e88-9786-b4cea8789542.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a9ec183d-c4dc-4c17-8571-f6e9dbdc643f.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--229e4414-f94b-4163-916a-f2704279f3e6",
+ "id": "bundle--8a6abe95-e8c6-4771-93b0-b289fc2c6791",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--27bd786c-eb5e-4e88-9786-b4cea8789542",
- "created_by_ref": "identity--c90f5fcf-ed8f-4027-814f-69687538628b",
- "created": "2022-07-02T17:28:37.003622Z",
- "modified": "2022-07-02T17:28:37.003622Z",
+ "id": "attack-pattern--a9ec183d-c4dc-4c17-8571-f6e9dbdc643f",
+ "created_by_ref": "identity--711efe1b-2ec8-4ea8-b2f6-14de4e75b377",
+ "created": "2022-07-02T19:59:12.728053Z",
+ "modified": "2022-07-02T19:59:12.728053Z",
"name": "Encourage Attendance at Events",
- "description": "TA10",
+ "description": "Operation encourages attendance at existing real world event.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--fee6de2f-602b-475d-b0fe-378c1247203d"
+ "marking-definition--4245be72-a76c-4b0c-b830-39e4c4c80478"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dee53229-382c-48ab-bad6-1e53ab0c24e4.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--aa0a3435-a9b6-4b5e-9874-0aa4a4a828d0.json
similarity index 65%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--dee53229-382c-48ab-bad6-1e53ab0c24e4.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--aa0a3435-a9b6-4b5e-9874-0aa4a4a828d0.json
index 2e36d3f..f241c30 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dee53229-382c-48ab-bad6-1e53ab0c24e4.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--aa0a3435-a9b6-4b5e-9874-0aa4a4a828d0.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--983c5bfd-93a5-4175-a605-87e76c8c2ec4",
+ "id": "bundle--4c3b8af7-49c3-4436-8199-6a626c8b9261",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--dee53229-382c-48ab-bad6-1e53ab0c24e4",
- "created_by_ref": "identity--9262c905-9863-4bcd-b7a9-4548af382516",
- "created": "2022-07-02T17:28:37.014195Z",
- "modified": "2022-07-02T17:28:37.014195Z",
+ "id": "attack-pattern--aa0a3435-a9b6-4b5e-9874-0aa4a4a828d0",
+ "created_by_ref": "identity--b5842654-85cf-41e8-b44e-cb5cdf196894",
+ "created": "2022-07-02T19:59:12.739246Z",
+ "modified": "2022-07-02T19:59:12.739246Z",
"name": "People Focused",
- "description": "TA12",
+ "description": "Measure the performance individuals in achieving campaign goals",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--de1a8231-5c57-4a3e-8c70-f490a64fb9b0"
+ "marking-definition--967d0916-58ec-48d3-98d7-1f6b7917da21"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c8096e1e-bd17-43e9-b7cf-138cf344d73d.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--aa3dd7f6-b16f-4ee4-850a-91394b33622a.json
similarity index 59%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--c8096e1e-bd17-43e9-b7cf-138cf344d73d.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--aa3dd7f6-b16f-4ee4-850a-91394b33622a.json
index aa7d377..43b0038 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c8096e1e-bd17-43e9-b7cf-138cf344d73d.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--aa3dd7f6-b16f-4ee4-850a-91394b33622a.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--e7c2970a-e505-4aa3-a03f-37ef75863644",
+ "id": "bundle--c30808d7-693a-4bcd-9ac8-06b4cbde0ca8",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c8096e1e-bd17-43e9-b7cf-138cf344d73d",
- "created_by_ref": "identity--5bd91aa6-f185-4aaf-9eda-9435a8e22f1a",
- "created": "2022-07-02T17:28:36.973734Z",
- "modified": "2022-07-02T17:28:36.973734Z",
- "name": "Recruit bad actors",
- "description": "TA15",
+ "id": "attack-pattern--aa3dd7f6-b16f-4ee4-850a-91394b33622a",
+ "created_by_ref": "identity--78412889-7213-4314-b440-21473c4c1a28",
+ "created": "2022-07-02T19:59:12.659657Z",
+ "modified": "2022-07-02T19:59:12.659657Z",
+ "name": "Recruit malign actors",
+ "description": "Operators recruit bad actors paying recruiting, or exerting control over individuals includes trolls, partisans, and contractors.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--24c5c541-a327-400e-b565-d37c20709a32"
+ "marking-definition--c0db4859-5ce8-48ec-8b6b-8e0e7dd083ff"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--aa481717-27f3-4896-a28e-44cb68291a6f.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--aa481717-27f3-4896-a28e-44cb68291a6f.json
new file mode 100644
index 0000000..7c751a3
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--aa481717-27f3-4896-a28e-44cb68291a6f.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--19fc6271-3f97-46e7-be9f-1d8fe90af780",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--aa481717-27f3-4896-a28e-44cb68291a6f",
+ "created_by_ref": "identity--6c094982-4d17-489c-8e41-23fb00b6edfc",
+ "created": "2022-07-02T19:59:12.726634Z",
+ "modified": "2022-07-02T19:59:12.726634Z",
+ "name": "Report Non-Violative Opposing Content",
+ "description": "Reporting opposing content refers to notifying and providing an instance of a violation of a platform\u2019s guidelines and policies for conduct on the platform. In addition to simply reporting the content, an operation may leverage copyright regulations to trick social media and web platforms into removing opposing content by manipulating the content to appear in violation of copyright laws. Reporting opposing content facilitates the suppression of contradictory information and allows operation narratives to take priority in the information space. ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "drive-online-harms"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0124.001.md",
+ "external_id": "T0124.001"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--6ce84eaa-a46a-44ab-9532-80cae64cb2e0"
+ ],
+ "x_mitre_is_subtechnique": true,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--aaeceb4e-5f3a-48c9-8e79-5c8e1424ab6d.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--aaeceb4e-5f3a-48c9-8e79-5c8e1424ab6d.json
deleted file mode 100644
index 353df6e..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--aaeceb4e-5f3a-48c9-8e79-5c8e1424ab6d.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--35bf4a8d-eae3-4f49-8fd2-d1397ba90c4d",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--aaeceb4e-5f3a-48c9-8e79-5c8e1424ab6d",
- "created_by_ref": "identity--3e76ed5a-a395-4d8e-be6c-eea3dd3e65b5",
- "created": "2022-07-02T17:28:36.960441Z",
- "modified": "2022-07-02T17:28:36.960441Z",
- "name": "Identify Data Voids",
- "description": "TA13",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "target-audience-analysis"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0081.002.md",
- "external_id": "T0081.002"
- }
- ],
- "object_marking_refs": [
- "marking-definition--3cb615fb-870d-47c5-943b-cd9dbd498c6a"
- ],
- "x_mitre_is_subtechnique": true,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3f07b243-8d61-425e-8bef-b8d95ae62936.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--abd52e1c-f92e-4247-b8bf-e3c9499a50e4.json
similarity index 61%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--3f07b243-8d61-425e-8bef-b8d95ae62936.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--abd52e1c-f92e-4247-b8bf-e3c9499a50e4.json
index c9ecf12..48428b4 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3f07b243-8d61-425e-8bef-b8d95ae62936.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--abd52e1c-f92e-4247-b8bf-e3c9499a50e4.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--27a49500-859a-4621-83a9-f86bc4b132f5",
+ "id": "bundle--ed21b076-0286-49ea-b521-f9dad2fed0a3",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--3f07b243-8d61-425e-8bef-b8d95ae62936",
- "created_by_ref": "identity--e243c433-c58f-4fa9-8e7c-364d0264456e",
- "created": "2022-07-02T17:28:36.94173Z",
- "modified": "2022-07-02T17:28:36.94173Z",
+ "id": "attack-pattern--abd52e1c-f92e-4247-b8bf-e3c9499a50e4",
+ "created_by_ref": "identity--a4cc9e21-ff9d-4233-9d24-57c73aa63564",
+ "created": "2022-07-02T19:59:12.627773Z",
+ "modified": "2022-07-02T19:59:12.627773Z",
"name": "Online polls",
- "description": "TA07",
+ "description": "Create fake online polls, or manipulate existing online polls. Data gathering tactic to target those who engage, and potentially their networks of friends/followers as well",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--0b503589-dec6-442f-8ea6-4929218b727e"
+ "marking-definition--60ff7763-f1d6-411c-a4c3-464bd78476e6"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b.json
similarity index 65%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b.json
index 3c65ca5..378cf85 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--631b7508-feaa-40e5-ab87-56723c4553e0",
+ "id": "bundle--2cbdefdc-feb4-4c3c-b16b-31d6493b1139",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0",
- "created_by_ref": "identity--92b95175-60dc-418e-b042-7018fadd3845",
- "created": "2022-07-02T17:28:37.007491Z",
- "modified": "2022-07-02T17:28:37.007491Z",
+ "id": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b",
+ "created_by_ref": "identity--7d1b1243-797f-431e-9cad-f3c2e13c0a61",
+ "created": "2022-07-02T19:59:12.73212Z",
+ "modified": "2022-07-02T19:59:12.73212Z",
"name": "Conceal Operational Activity",
- "description": "TA11",
+ "description": "Conceal the campaign's operational activity to avoid takedown and attribution.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--354b696b-d52c-4a16-bf8e-cc469605a1cb"
+ "marking-definition--74bc890b-1a79-435f-ba35-09c5b98ed6a8"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--962602ec-2602-4224-b6bd-413c2c8ec4bf.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ac315aea-b839-437d-8b28-4ae7c1cdeed8.json
similarity index 66%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--962602ec-2602-4224-b6bd-413c2c8ec4bf.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--ac315aea-b839-437d-8b28-4ae7c1cdeed8.json
index 3bf6a77..a4eabfe 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--962602ec-2602-4224-b6bd-413c2c8ec4bf.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ac315aea-b839-437d-8b28-4ae7c1cdeed8.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--dd34ed93-e75a-46fc-9072-ba453acc8b35",
+ "id": "bundle--50926a3d-a7b1-46ab-aac2-b5cae91dfc49",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--962602ec-2602-4224-b6bd-413c2c8ec4bf",
- "created_by_ref": "identity--32abab3c-a644-40be-8508-ef5bcaa1193d",
- "created": "2022-07-02T17:28:36.987949Z",
- "modified": "2022-07-02T17:28:36.987949Z",
+ "id": "attack-pattern--ac315aea-b839-437d-8b28-4ae7c1cdeed8",
+ "created_by_ref": "identity--d89beb8e-3330-4323-8d17-b085d69620ca",
+ "created": "2022-07-02T19:59:12.674562Z",
+ "modified": "2022-07-02T19:59:12.674562Z",
"name": "Create dedicated hashtag",
- "description": "TA07",
+ "description": "Create a campaign/incident specific hashtag.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--435de426-a6ad-4b4f-8e08-43ef6baee390"
+ "marking-definition--bae6a1d3-f974-4ca9-a9fb-33e0f675dd10"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--de5a467e-4326-4909-9c2d-d123830edca6.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--acb35a90-5c38-42f4-a32e-5e96bacf0e33.json
similarity index 58%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--de5a467e-4326-4909-9c2d-d123830edca6.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--acb35a90-5c38-42f4-a32e-5e96bacf0e33.json
index ab58b25..ed744b1 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--de5a467e-4326-4909-9c2d-d123830edca6.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--acb35a90-5c38-42f4-a32e-5e96bacf0e33.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--0fbb550a-2ad7-4230-8515-ff2e8b5f60eb",
+ "id": "bundle--72f38df6-0714-4f84-b5bc-11b014f776c0",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--de5a467e-4326-4909-9c2d-d123830edca6",
- "created_by_ref": "identity--3bfdb267-c9b3-4f32-a6cc-2c749f430ce9",
- "created": "2022-07-02T17:28:36.963927Z",
- "modified": "2022-07-02T17:28:36.963927Z",
+ "id": "attack-pattern--acb35a90-5c38-42f4-a32e-5e96bacf0e33",
+ "created_by_ref": "identity--ab023978-2067-49be-9e74-7f0c42fdca15",
+ "created": "2022-07-02T19:59:12.650147Z",
+ "modified": "2022-07-02T19:59:12.650147Z",
"name": "Reuse Existing Content",
- "description": "TA06",
+ "description": "When an operation recycles content from its own previous operations or plagiarizes from external operations. An operation may launder information to conserve resources that would have otherwise been utilized to develop new content. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--61ffcde0-00e8-4ace-9308-a2937eac79d7"
+ "marking-definition--84551930-9961-4062-8a9f-57d4cdc42233"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b5a8668d-e35e-406f-b2a9-62bc4aa25cfe.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--acdb4254-8f84-4ae5-b26a-b4e19f29b6f0.json
similarity index 55%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--b5a8668d-e35e-406f-b2a9-62bc4aa25cfe.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--acdb4254-8f84-4ae5-b26a-b4e19f29b6f0.json
index e00f3b7..0fa2bcc 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b5a8668d-e35e-406f-b2a9-62bc4aa25cfe.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--acdb4254-8f84-4ae5-b26a-b4e19f29b6f0.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--43f46267-d329-4f06-94e7-77e51097c57f",
+ "id": "bundle--abd518a6-ef82-4d5a-a230-c11916c4103f",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b5a8668d-e35e-406f-b2a9-62bc4aa25cfe",
- "created_by_ref": "identity--0ea4e16f-60a5-45a8-8b39-665a1fa2ce93",
- "created": "2022-07-02T17:28:36.968435Z",
- "modified": "2022-07-02T17:28:36.968435Z",
+ "id": "attack-pattern--acdb4254-8f84-4ae5-b26a-b4e19f29b6f0",
+ "created_by_ref": "identity--19d9cd28-2e04-4373-ac46-9f8e22e9ac62",
+ "created": "2022-07-02T19:59:12.654767Z",
+ "modified": "2022-07-02T19:59:12.654767Z",
"name": "Develop Video-based Content",
- "description": "TA06",
+ "description": "Creating and editing false or misleading video artifacts, often aligned with one or more specific narratives, for use in a disinformation campaign. This may include staging videos of purportedly real situations, repurposing existing video artifacts, or using AI-generated video creation and editing technologies (including deepfakes).",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--754738aa-a4fb-48b1-b7a4-2ec8a9fbb0f0"
+ "marking-definition--5d54e8fd-b577-499e-8d14-6dee5653113b"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b802c014-90dc-4e3f-8ee8-9c77ccc07f7c.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ad3872bc-e727-44fb-9f7b-6afc4a54958c.json
similarity index 62%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--b802c014-90dc-4e3f-8ee8-9c77ccc07f7c.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--ad3872bc-e727-44fb-9f7b-6afc4a54958c.json
index 3eb7c77..2663c18 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b802c014-90dc-4e3f-8ee8-9c77ccc07f7c.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ad3872bc-e727-44fb-9f7b-6afc4a54958c.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--e586d2d7-1b40-4b7b-80a3-75cc117d16ee",
+ "id": "bundle--9158f2cc-2d15-4ae7-8526-7bc709762ba4",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b802c014-90dc-4e3f-8ee8-9c77ccc07f7c",
- "created_by_ref": "identity--9c17f28c-0558-4998-b72d-9aa9c23fe726",
- "created": "2022-07-02T17:28:36.976067Z",
- "modified": "2022-07-02T17:28:36.976067Z",
+ "id": "attack-pattern--ad3872bc-e727-44fb-9f7b-6afc4a54958c",
+ "created_by_ref": "identity--3a7448d0-662c-432a-9de3-45a3bc621dbc",
+ "created": "2022-07-02T19:59:12.662248Z",
+ "modified": "2022-07-02T19:59:12.662248Z",
"name": "Create Community or Sub-group",
- "description": "TA15",
+ "description": "When there is not an existing community or sub-group that meets a campaign's goals, an influence operation may seek to create a community or sub-group. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--1bffec35-57a8-4672-a156-73ec31d41f4e"
+ "marking-definition--01b62d86-b56d-45b8-9ad2-c3dc78c1c5cd"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6edfcca7-7816-4f40-b22b-88567ca6a84e.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--aefa40c5-77b1-4716-b1c4-2f45bfa68813.json
similarity index 68%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--6edfcca7-7816-4f40-b22b-88567ca6a84e.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--aefa40c5-77b1-4716-b1c4-2f45bfa68813.json
index 23a5f19..a12c182 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--6edfcca7-7816-4f40-b22b-88567ca6a84e.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--aefa40c5-77b1-4716-b1c4-2f45bfa68813.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--9f8dc19f-0a05-496e-876b-5daddb726307",
+ "id": "bundle--f649a394-bd55-44a9-8a2f-e9161a145350",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--6edfcca7-7816-4f40-b22b-88567ca6a84e",
- "created_by_ref": "identity--357a76bf-0a55-4a94-97c6-1c6d5351db82",
- "created": "2022-07-02T17:28:37.012608Z",
- "modified": "2022-07-02T17:28:37.012608Z",
+ "id": "attack-pattern--aefa40c5-77b1-4716-b1c4-2f45bfa68813",
+ "created_by_ref": "identity--7b9c2c5f-cd04-4ff2-8b25-e1ac4a842e5c",
+ "created": "2022-07-02T19:59:12.737625Z",
+ "modified": "2022-07-02T19:59:12.737625Z",
"name": "Obfuscate Payment",
- "description": "TA11",
+ "description": "Obfuscate Payment",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--4ee2ffe4-c50b-4bda-bf32-a779fbe97814"
+ "marking-definition--39ad4f0e-4f2e-4680-99fd-28ddd4d24da7"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--91a9dfee-6096-44b3-a266-9bbcf2ddb079.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--afdce902-18af-40c1-955a-1355cbdd99d7.json
similarity index 59%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--91a9dfee-6096-44b3-a266-9bbcf2ddb079.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--afdce902-18af-40c1-955a-1355cbdd99d7.json
index a413b80..94a4bf6 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--91a9dfee-6096-44b3-a266-9bbcf2ddb079.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--afdce902-18af-40c1-955a-1355cbdd99d7.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--373937fa-b470-4de5-be3f-0b984d3dad53",
+ "id": "bundle--88ee65b4-48a4-45d2-9b7c-43e78e31b7c3",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--91a9dfee-6096-44b3-a266-9bbcf2ddb079",
- "created_by_ref": "identity--a6f81a17-3a29-4bbb-afc0-6c3f997ca533",
- "created": "2022-07-02T17:28:36.98668Z",
- "modified": "2022-07-02T17:28:36.98668Z",
+ "id": "attack-pattern--afdce902-18af-40c1-955a-1355cbdd99d7",
+ "created_by_ref": "identity--255dddc7-ec2c-4762-8a80-8078c1e10ac7",
+ "created": "2022-07-02T19:59:12.673274Z",
+ "modified": "2022-07-02T19:59:12.673274Z",
"name": "Dating Apps",
- "description": "TA07",
+ "description": "A video livestream refers to an online video broadcast capability that allows for real-time communication to closed or open networks. Examples include Facebook Live, Instagram, Youtube, Tik Tok, and Twitter. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--26a89e3c-dcec-4c81-954e-1438666bf3c7"
+ "marking-definition--556ba80a-cb3c-4d22-84b0-2ad291d12e2c"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b2c9d68e-04f9-4219-89e8-f4b625d53842.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b2c9d68e-04f9-4219-89e8-f4b625d53842.json
deleted file mode 100644
index 810c629..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b2c9d68e-04f9-4219-89e8-f4b625d53842.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--3f4bf580-7737-4a54-8a13-6baa1a571d8e",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--b2c9d68e-04f9-4219-89e8-f4b625d53842",
- "created_by_ref": "identity--e6752961-6931-4f98-b1a1-76229ec2b286",
- "created": "2022-07-02T17:28:36.974737Z",
- "modified": "2022-07-02T17:28:36.974737Z",
- "name": "Enlist Troll Accounts",
- "description": "TA15",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "establish-social-assets"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0091.003.md",
- "external_id": "T0091.003"
- }
- ],
- "object_marking_refs": [
- "marking-definition--32874c97-0bfc-4d2b-9569-83c359463ea8"
- ],
- "x_mitre_is_subtechnique": true,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d673e8b6-858b-4b8e-b396-4bf840217fc1.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b75f97dd-e18e-4555-8c9e-97680b398ae3.json
similarity index 60%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--d673e8b6-858b-4b8e-b396-4bf840217fc1.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--b75f97dd-e18e-4555-8c9e-97680b398ae3.json
index 8c57665..eaf52c7 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d673e8b6-858b-4b8e-b396-4bf840217fc1.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b75f97dd-e18e-4555-8c9e-97680b398ae3.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--12b3ea26-bcee-4f10-a356-34b61379987b",
+ "id": "bundle--cc70a53b-95ed-402c-ad75-acf4665d1cad",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--d673e8b6-858b-4b8e-b396-4bf840217fc1",
- "created_by_ref": "identity--1c86228f-e0eb-4031-8ebe-ddf0981a290f",
- "created": "2022-07-02T17:28:36.961141Z",
- "modified": "2022-07-02T17:28:36.961141Z",
+ "id": "attack-pattern--b75f97dd-e18e-4555-8c9e-97680b398ae3",
+ "created_by_ref": "identity--baa7136c-27ee-4a90-a4ae-bd6ef2c0215b",
+ "created": "2022-07-02T19:59:12.647865Z",
+ "modified": "2022-07-02T19:59:12.647865Z",
"name": "Identify Existing Fissures",
- "description": "TA13",
+ "description": "An influence operation may identify existing fissures to pit target populations against one another or facilitate a \u201cdivide-and-conquer\" approach to tailor operation narratives along the divides.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--243bba78-e67a-4fac-9970-1f46219bfa36"
+ "marking-definition--f7a6150e-767c-4205-8940-c9bec2ed57cd"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4db9874c-0b6b-4159-8ef9-1ecae17677cc.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b7c84415-9ce4-431c-8419-1c9dc3b4927f.json
similarity index 62%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--4db9874c-0b6b-4159-8ef9-1ecae17677cc.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--b7c84415-9ce4-431c-8419-1c9dc3b4927f.json
index 4ad04af..946c13a 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4db9874c-0b6b-4159-8ef9-1ecae17677cc.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b7c84415-9ce4-431c-8419-1c9dc3b4927f.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--af7edf4a-f7c0-4f40-a4c7-3fe15a68c38c",
+ "id": "bundle--9971ff28-c215-476c-9489-a78ec061fac9",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4db9874c-0b6b-4159-8ef9-1ecae17677cc",
- "created_by_ref": "identity--bc7a2f8d-f3c0-4654-90d0-8df5cf5f333e",
- "created": "2022-07-02T17:28:36.961487Z",
- "modified": "2022-07-02T17:28:36.961487Z",
+ "id": "attack-pattern--b7c84415-9ce4-431c-8419-1c9dc3b4927f",
+ "created_by_ref": "identity--a94808a7-6358-448f-b81a-12c9c3551720",
+ "created": "2022-07-02T19:59:12.648186Z",
+ "modified": "2022-07-02T19:59:12.648186Z",
"name": "Identify Existing Conspiracy Narratives/Suspicions",
- "description": "TA13",
+ "description": "An influence operation may assess preexisting conspiracy theories or suspicions in a population to identify existing narratives that support operational objectives. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--ac3415ff-d329-4dc5-8edb-6e77f4d2856d"
+ "marking-definition--eeb615f5-b651-4b91-a940-f6a181131fbc"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--734be066-e37f-4e86-b819-a868c2c4d798.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b8e80736-22ad-481d-9ea0-eebd0944187e.json
similarity index 59%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--734be066-e37f-4e86-b819-a868c2c4d798.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--b8e80736-22ad-481d-9ea0-eebd0944187e.json
index 86b4a0e..e716cfc 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--734be066-e37f-4e86-b819-a868c2c4d798.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b8e80736-22ad-481d-9ea0-eebd0944187e.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--3f4d5ee9-e4e2-4273-b614-33f7d470cf82",
+ "id": "bundle--59453663-16c2-4ba7-b512-aca60c5feffa",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--734be066-e37f-4e86-b819-a868c2c4d798",
- "created_by_ref": "identity--47ad61f0-7daf-41d6-9539-9f3444c56d8c",
- "created": "2022-07-02T17:28:36.953346Z",
- "modified": "2022-07-02T17:28:36.953346Z",
+ "id": "attack-pattern--b8e80736-22ad-481d-9ea0-eebd0944187e",
+ "created_by_ref": "identity--d6e9d144-526c-493c-9cfe-e5a2e6e726e8",
+ "created": "2022-07-02T19:59:12.639896Z",
+ "modified": "2022-07-02T19:59:12.639896Z",
"name": "Geographic Segmentation",
- "description": "TA13",
+ "description": "An influence operation may target populations in a specific geographic location, such as a region, state, or city. An influence operation may use geographic segmentation to Create Localized Content (see: Establish Legitimacy). ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--ba5c00ee-4be3-4754-8b84-d25835264957"
+ "marking-definition--59d93956-7432-43c5-96e8-511b95b9cb1b"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b8eb2c66-3523-4b3c-9996-060178842282.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b8eb2c66-3523-4b3c-9996-060178842282.json
new file mode 100644
index 0000000..f0498ff
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b8eb2c66-3523-4b3c-9996-060178842282.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--b0522251-95a0-49f8-beaf-90ef27fc2d48",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--b8eb2c66-3523-4b3c-9996-060178842282",
+ "created_by_ref": "identity--6e89a9ef-8ef3-4283-8153-30ab942eaa94",
+ "created": "2022-07-02T19:59:12.647212Z",
+ "modified": "2022-07-02T19:59:12.647212Z",
+ "name": "Identify Data Voids",
+ "description": "A data void refers to a word or phrase that results in little, manipulative, or low-quality search engine data. Data voids are hard to detect and relatively harmless until exploited by an entity aiming to quickly proliferate false or misleading information during a phenomenon that causes a high number of individuals to query the term or phrase. In the Plan phase, an influence operation may identify data voids for later exploitation in the operation. \nA 2019 report by Michael Golebiewski identifies five types of data voids. (1) \u201cBreaking news\u201d data voids occur when a keyword gains popularity during a short period of time, allowing an influence operation to publish false content before legitimate news outlets have an opportunity to publish relevant information. (2) An influence operation may create a \u201cstrategic new terms\u201d data void by creating their own terms and publishing information online before promoting their keyword to the target audience. (3) An influence operation may publish content on \u201coutdated terms\u201d that have decreased in popularity, capitalizing on most search engines\u2019 preferences for recency. (4) \u201cFragmented concepts\u201d data voids separate connections between similar ideas, isolating segment queries to distinct search engine results. (5) An influence operation may use \u201cproblematic queries\u201d that previously resulted in disturbing or inappropriate content to promote messaging until mainstream media recontextualizes the term. ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "target-audience-analysis"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0081.002.md",
+ "external_id": "T0081.002"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--c2866214-c079-4ef9-9033-ea07409cc312"
+ ],
+ "x_mitre_is_subtechnique": true,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ba8f2965-53cc-410b-81c5-ecb749a85a25.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ba8f2965-53cc-410b-81c5-ecb749a85a25.json
deleted file mode 100644
index 7fb6eed..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ba8f2965-53cc-410b-81c5-ecb749a85a25.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--6fd8e095-e4b4-4aa0-9295-a91a1e66d959",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--ba8f2965-53cc-410b-81c5-ecb749a85a25",
- "created_by_ref": "identity--403a28b8-c490-41b7-ae76-9a229b0a7d9e",
- "created": "2022-07-02T17:28:36.977994Z",
- "modified": "2022-07-02T17:28:36.977994Z",
- "name": "Utilize Butterfly Attack",
- "description": "TA15",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "establish-social-assets"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0094.002.md",
- "external_id": "T0094.002"
- }
- ],
- "object_marking_refs": [
- "marking-definition--6bd1e654-9811-4431-a88f-b1e5bc6f0a27"
- ],
- "x_mitre_is_subtechnique": true,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5c17929e-b059-4547-8151-769797eba5d5.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bb0a5dd6-ce06-4ed2-adb7-bd1e95890005.json
similarity index 67%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--5c17929e-b059-4547-8151-769797eba5d5.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--bb0a5dd6-ce06-4ed2-adb7-bd1e95890005.json
index 9e9bfbd..5021803 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5c17929e-b059-4547-8151-769797eba5d5.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bb0a5dd6-ce06-4ed2-adb7-bd1e95890005.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--ee9cbcae-981f-410f-b0bd-929cf53eff08",
+ "id": "bundle--bfa1456b-5ee2-49b3-a53f-afcb7f9a1537",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--5c17929e-b059-4547-8151-769797eba5d5",
- "created_by_ref": "identity--88e698b7-fd34-4553-bbaa-26bb5a7513b4",
- "created": "2022-07-02T17:28:36.934624Z",
- "modified": "2022-07-02T17:28:36.934624Z",
+ "id": "attack-pattern--bb0a5dd6-ce06-4ed2-adb7-bd1e95890005",
+ "created_by_ref": "identity--6100c7fd-82f3-490b-aebd-751ef37dbd0d",
+ "created": "2022-07-02T19:59:12.620036Z",
+ "modified": "2022-07-02T19:59:12.620036Z",
"name": "Utilize Academic/Pseudoscientific Justifications",
- "description": "TA16",
+ "description": "Utilize Academic/Pseudoscientific Justifications",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7f2f253c-a2ac-4aa9-a789-73882cea7792"
+ "marking-definition--611f9931-54ad-488b-9df0-e58c3a304bfb"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5d3ed9dc-6f1f-43c0-b3d3-3da63a7192d6.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bb7f412a-6e4e-4799-a32c-5ee05016e8b5.json
similarity index 55%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--5d3ed9dc-6f1f-43c0-b3d3-3da63a7192d6.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--bb7f412a-6e4e-4799-a32c-5ee05016e8b5.json
index 1ecf547..3ecc300 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5d3ed9dc-6f1f-43c0-b3d3-3da63a7192d6.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bb7f412a-6e4e-4799-a32c-5ee05016e8b5.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--64acf876-63de-4d73-8494-58d866dd1294",
+ "id": "bundle--b603b736-a06b-4607-bc8e-8ed16e665ed8",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--5d3ed9dc-6f1f-43c0-b3d3-3da63a7192d6",
- "created_by_ref": "identity--b10c17d1-4cfc-44b8-9ef2-652a999231e1",
- "created": "2022-07-02T17:28:36.958201Z",
- "modified": "2022-07-02T17:28:36.958201Z",
+ "id": "attack-pattern--bb7f412a-6e4e-4799-a32c-5ee05016e8b5",
+ "created_by_ref": "identity--0880ddf4-8131-4a9d-97f5-c375eb1cb6ff",
+ "created": "2022-07-02T19:59:12.645246Z",
+ "modified": "2022-07-02T19:59:12.645246Z",
"name": "Evaluate Media Surveys",
- "description": "TA13",
+ "description": "An influence operation may evaluate its own or third-party media surveys to determine what type of content appeals to its target audience. Media surveys may provide insight into an audience\u2019s political views, social class, general interests, or other indicators used to tailor operation messaging to its target audience.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--a19e2a10-e12f-4587-a4e9-ffe0ff290931"
+ "marking-definition--0b4b19d6-0881-4258-8ff3-85facacafc96"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9fd0219a-66d7-49a1-ab9e-856ea5e25c98.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bbb40d99-27b8-4bea-b294-92a07a8121b1.json
similarity index 64%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--9fd0219a-66d7-49a1-ab9e-856ea5e25c98.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--bbb40d99-27b8-4bea-b294-92a07a8121b1.json
index 938ad47..b91c5ba 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--9fd0219a-66d7-49a1-ab9e-856ea5e25c98.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bbb40d99-27b8-4bea-b294-92a07a8121b1.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--d811d20b-d24e-48d0-8750-0dd5097532f1",
+ "id": "bundle--7fdfd6aa-9df8-46dc-9746-2bd3e1fa1d1c",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--9fd0219a-66d7-49a1-ab9e-856ea5e25c98",
- "created_by_ref": "identity--244348dd-193d-4fc6-8ff7-cc0b7f089e7e",
- "created": "2022-07-02T17:28:36.995626Z",
- "modified": "2022-07-02T17:28:36.995626Z",
+ "id": "attack-pattern--bbb40d99-27b8-4bea-b294-92a07a8121b1",
+ "created_by_ref": "identity--63771958-129f-4cc6-b5d8-445a8a59156a",
+ "created": "2022-07-02T19:59:12.719551Z",
+ "modified": "2022-07-02T19:59:12.719551Z",
"name": "Comment or Reply on Content",
- "description": "TA09",
+ "description": "Delivering content by replying or commenting via owned media (assets that the operator controls). ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--6a83c258-953c-4eb6-be8e-59bcb9f47b48"
+ "marking-definition--07e3ffa0-3099-4ce8-9bb5-b09300fac99f"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bceb35c5-c32f-48fd-b02d-69c1170a0565.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bc05d8a7-e306-4112-9826-75687e7cba5c.json
similarity index 66%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--bceb35c5-c32f-48fd-b02d-69c1170a0565.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--bc05d8a7-e306-4112-9826-75687e7cba5c.json
index ca3f002..26de0de 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bceb35c5-c32f-48fd-b02d-69c1170a0565.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bc05d8a7-e306-4112-9826-75687e7cba5c.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--ea9fdcb9-5275-4bd8-8048-28bc9ac12986",
+ "id": "bundle--58beec82-8503-48dc-868a-561ecf890548",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--bceb35c5-c32f-48fd-b02d-69c1170a0565",
- "created_by_ref": "identity--12cfdc56-49c9-4a89-8d32-532f829c6bc2",
- "created": "2022-07-02T17:28:36.991492Z",
- "modified": "2022-07-02T17:28:36.991492Z",
+ "id": "attack-pattern--bc05d8a7-e306-4112-9826-75687e7cba5c",
+ "created_by_ref": "identity--60baea53-1b66-46ba-bf04-e1f355800f1f",
+ "created": "2022-07-02T19:59:12.678316Z",
+ "modified": "2022-07-02T19:59:12.678316Z",
"name": "Traditional Media",
- "description": "TA07",
+ "description": "Examples include TV, Newspaper, Radio, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--fe2d3308-c4e0-42a0-82cc-d5c3a47e801d"
+ "marking-definition--a31cb831-58ec-4f53-8621-934edb05f50d"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4c383d4a-da5d-4730-82a5-93901362e4e4.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bdc9c3fd-6f34-4a70-b9a4-d028bce2ea8a.json
similarity index 66%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--4c383d4a-da5d-4730-82a5-93901362e4e4.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--bdc9c3fd-6f34-4a70-b9a4-d028bce2ea8a.json
index ab6fdc8..82697c1 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4c383d4a-da5d-4730-82a5-93901362e4e4.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bdc9c3fd-6f34-4a70-b9a4-d028bce2ea8a.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--66c4eb73-acac-44a8-b8e0-467987a1c3f0",
+ "id": "bundle--db1b8d46-5c75-4d8e-b5b6-5d3c82119be1",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4c383d4a-da5d-4730-82a5-93901362e4e4",
- "created_by_ref": "identity--de60e095-b798-4043-8655-3ed84e82aaa0",
- "created": "2022-07-02T17:28:36.943332Z",
- "modified": "2022-07-02T17:28:36.943332Z",
+ "id": "attack-pattern--bdc9c3fd-6f34-4a70-b9a4-d028bce2ea8a",
+ "created_by_ref": "identity--1dfc724e-d69f-461f-8b6d-5580e6f4ab66",
+ "created": "2022-07-02T19:59:12.629714Z",
+ "modified": "2022-07-02T19:59:12.629714Z",
"name": "Use Encrypted Chat Apps",
- "description": "TA07",
+ "description": "Examples include Signal, WhatsApp, Discord, Wire, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--3c2259a5-4194-4c17-8b20-965b61c219f2"
+ "marking-definition--f1a8d4c2-1840-433f-886c-8556374dda80"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ab2961c1-e1bc-4b0d-aae1-7ba73ced39ba.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bde29c42-3bce-4ba4-b09a-c2d6d685a5a0.json
similarity index 63%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--ab2961c1-e1bc-4b0d-aae1-7ba73ced39ba.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--bde29c42-3bce-4ba4-b09a-c2d6d685a5a0.json
index 39e83c5..6e933d4 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ab2961c1-e1bc-4b0d-aae1-7ba73ced39ba.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bde29c42-3bce-4ba4-b09a-c2d6d685a5a0.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--c84adf1f-e96e-4daf-bd7c-4bb23f5f2a19",
+ "id": "bundle--eb32de33-20f7-4dbf-bf4f-51ce53d7a3ac",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--ab2961c1-e1bc-4b0d-aae1-7ba73ced39ba",
- "created_by_ref": "identity--db9e1991-3620-4daa-a54e-2c6ae9c87690",
- "created": "2022-07-02T17:28:37.013877Z",
- "modified": "2022-07-02T17:28:37.013877Z",
+ "id": "attack-pattern--bde29c42-3bce-4ba4-b09a-c2d6d685a5a0",
+ "created_by_ref": "identity--6cd0f621-8c6d-470a-8b32-a514b0b6ec92",
+ "created": "2022-07-02T19:59:12.738925Z",
+ "modified": "2022-07-02T19:59:12.738925Z",
"name": "Measure Performance",
- "description": "TA12",
+ "description": "A metric used to determine the accomplishment of actions. \u201cAre the actions being executed as planned?\u201d",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--bcdb1ca0-f93f-465f-9eda-d5a1569e1676"
+ "marking-definition--2d7419a6-bc36-482e-8d4c-6aa769539380"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b0eb15ea-d4c2-49b9-a9e3-1fbf5c8dc11e.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bde3b6dd-3bfd-42cc-9f6f-b3750dd4b94c.json
similarity index 58%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--b0eb15ea-d4c2-49b9-a9e3-1fbf5c8dc11e.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--bde3b6dd-3bfd-42cc-9f6f-b3750dd4b94c.json
index a7dfd22..98b0cf1 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b0eb15ea-d4c2-49b9-a9e3-1fbf5c8dc11e.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bde3b6dd-3bfd-42cc-9f6f-b3750dd4b94c.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--6ad4e123-3440-4035-8111-0fb729ad6048",
+ "id": "bundle--a8295fbe-1aaa-41f8-977a-0b08fdd49a78",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b0eb15ea-d4c2-49b9-a9e3-1fbf5c8dc11e",
- "created_by_ref": "identity--f0125f36-4796-45d0-babc-ab33c69cb5b9",
- "created": "2022-07-02T17:28:36.967489Z",
- "modified": "2022-07-02T17:28:36.967489Z",
+ "id": "attack-pattern--bde3b6dd-3bfd-42cc-9f6f-b3750dd4b94c",
+ "created_by_ref": "identity--334d2da0-935f-444a-b547-3418068e6dc7",
+ "created": "2022-07-02T19:59:12.653746Z",
+ "modified": "2022-07-02T19:59:12.653746Z",
"name": "Develop AI-Generated Images (Deepfakes)",
- "description": "TA06",
+ "description": "Deepfakes refer to AI-generated falsified photos, videos, or soundbites. An influence operation may use deepfakes to depict an inauthentic situation by synthetically recreating an individual\u2019s face, body, voice, and physical gestures.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--3842b83b-472c-4adf-9573-49f7ca27066a"
+ "marking-definition--a248c570-57a8-482b-98c1-1b38bf2e0090"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--940e71ba-4cc0-48d5-b5d4-5b1af17c05b2.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bece5e77-a816-43ee-be8b-642241f1703a.json
similarity index 65%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--940e71ba-4cc0-48d5-b5d4-5b1af17c05b2.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--bece5e77-a816-43ee-be8b-642241f1703a.json
index da3adc6..9fa4578 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--940e71ba-4cc0-48d5-b5d4-5b1af17c05b2.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--bece5e77-a816-43ee-be8b-642241f1703a.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--f4a0fcd8-a9c4-4289-b362-c76920e0fc9e",
+ "id": "bundle--f87092e1-7cf7-4f54-b723-dd49f70dcd0a",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--940e71ba-4cc0-48d5-b5d4-5b1af17c05b2",
- "created_by_ref": "identity--2bcfbfb0-24f3-4cac-bf32-55613365506b",
- "created": "2022-07-02T17:28:36.938206Z",
- "modified": "2022-07-02T17:28:36.938206Z",
+ "id": "attack-pattern--bece5e77-a816-43ee-be8b-642241f1703a",
+ "created_by_ref": "identity--721d94af-b7f6-465b-ba29-432d3b27e70a",
+ "created": "2022-07-02T19:59:12.623652Z",
+ "modified": "2022-07-02T19:59:12.623652Z",
"name": "Purchase Targeted Advertisements",
- "description": "TA05",
+ "description": "Create or fund advertisements targeted at specific populations",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--88ce8b12-6410-487d-9b24-1ffef2c5a8a5"
+ "marking-definition--3dd17da1-dc54-49b3-9f4a-cfe9bfcf7cc5"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--beefe7f3-62e4-4422-9c8a-a8b6da01f0a3.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--beefe7f3-62e4-4422-9c8a-a8b6da01f0a3.json
deleted file mode 100644
index cfec438..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--beefe7f3-62e4-4422-9c8a-a8b6da01f0a3.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--41d7147c-a776-45b4-b0ab-a5018bd10e76",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--beefe7f3-62e4-4422-9c8a-a8b6da01f0a3",
- "created_by_ref": "identity--4cbbca38-9619-4d4d-9746-8487ac4ca21c",
- "created": "2022-07-02T17:28:37.01134Z",
- "modified": "2022-07-02T17:28:37.01134Z",
- "name": "Conceal Sponsorship",
- "description": "TA11",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "persist-in-the-information-environment"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0130.001.md",
- "external_id": "T0130.001"
- }
- ],
- "object_marking_refs": [
- "marking-definition--dcf879db-bfbb-4f2b-9399-4b4dcf5d92ec"
- ],
- "x_mitre_is_subtechnique": true,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c10bb513-88f1-4e74-a5ed-45135bc21395.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c10bb513-88f1-4e74-a5ed-45135bc21395.json
deleted file mode 100644
index 7713814..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c10bb513-88f1-4e74-a5ed-45135bc21395.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--0a1c113f-c72c-409f-97fa-4a59820a6a96",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--c10bb513-88f1-4e74-a5ed-45135bc21395",
- "created_by_ref": "identity--b1b8439e-fd8a-4444-900b-8504357c9280",
- "created": "2022-07-02T17:28:36.93692Z",
- "modified": "2022-07-02T17:28:36.93692Z",
- "name": "Create hashtags and search artifacts",
- "description": "TA06",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "develop-content"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0015.md",
- "external_id": "T0015"
- }
- ],
- "object_marking_refs": [
- "marking-definition--24324732-5ea8-44d1-9011-820551f62b04"
- ],
- "x_mitre_is_subtechnique": false,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--aad83719-2b04-4a3e-9664-bf9aa2350e2f.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c1adbb6d-74e6-4698-b856-ffbf21ede197.json
similarity index 61%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--aad83719-2b04-4a3e-9664-bf9aa2350e2f.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--c1adbb6d-74e6-4698-b856-ffbf21ede197.json
index 8434171..a8651b9 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--aad83719-2b04-4a3e-9664-bf9aa2350e2f.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c1adbb6d-74e6-4698-b856-ffbf21ede197.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--2509f9dd-4055-44fd-944e-579bcd8d8939",
+ "id": "bundle--aaa8df62-c4a3-4dc6-bf0c-8a094f8c928d",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--aad83719-2b04-4a3e-9664-bf9aa2350e2f",
- "created_by_ref": "identity--7212f424-f256-4f04-b08d-6472deab129c",
- "created": "2022-07-02T17:28:36.934305Z",
- "modified": "2022-07-02T17:28:36.934305Z",
+ "id": "attack-pattern--c1adbb6d-74e6-4698-b856-ffbf21ede197",
+ "created_by_ref": "identity--d89f3ba3-9b44-4412-86de-e20d17983c9a",
+ "created": "2022-07-02T19:59:12.6197Z",
+ "modified": "2022-07-02T19:59:12.6197Z",
"name": "Create fake experts",
- "description": "TA16",
+ "description": "Stories planted or promoted in computational propaganda operations often make use of experts fabricated from whole cloth, sometimes specifically for the story itself. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--275c2a33-03dd-48e6-8888-15896fed061a"
+ "marking-definition--7b2b57ce-f686-418b-9850-e4543badeaca"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--97c6b863-d500-4d89-a21a-0dc6df2e52ca.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c20423d1-e1ea-45c5-b18d-1bd17cc72611.json
similarity index 61%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--97c6b863-d500-4d89-a21a-0dc6df2e52ca.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--c20423d1-e1ea-45c5-b18d-1bd17cc72611.json
index 8ede7fe..98dfadb 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--97c6b863-d500-4d89-a21a-0dc6df2e52ca.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c20423d1-e1ea-45c5-b18d-1bd17cc72611.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--d6398248-4c1a-43cc-a643-2c71abd9adc7",
+ "id": "bundle--f3e08cef-0885-4be8-be4e-8c7bbb27fd01",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--97c6b863-d500-4d89-a21a-0dc6df2e52ca",
- "created_by_ref": "identity--076635ce-d3e3-43eb-a005-5ca15a2c5509",
- "created": "2022-07-02T17:28:36.944956Z",
- "modified": "2022-07-02T17:28:36.944956Z",
+ "id": "attack-pattern--c20423d1-e1ea-45c5-b18d-1bd17cc72611",
+ "created_by_ref": "identity--25ebf7ae-88d3-43a2-ad35-2dc910b97c64",
+ "created": "2022-07-02T19:59:12.631373Z",
+ "modified": "2022-07-02T19:59:12.631373Z",
"name": "Censor social media as a political force",
- "description": "TA18",
+ "description": "Use political influence or the power of state to stop critical social media comments. Government requested/driven content take downs (see Google Transperancy reports).",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7e790b68-702b-4977-b046-53e6dd9a972d"
+ "marking-definition--d383593e-473d-4f33-8f6f-c56c7f930e0d"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3a537720-049d-431e-84ee-33627eb44661.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c3933a7e-49a9-48fd-a1f9-a871e3a387ea.json
similarity index 58%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--3a537720-049d-431e-84ee-33627eb44661.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--c3933a7e-49a9-48fd-a1f9-a871e3a387ea.json
index 655c2ca..7b38c27 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--3a537720-049d-431e-84ee-33627eb44661.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c3933a7e-49a9-48fd-a1f9-a871e3a387ea.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--40d50772-60a9-49c3-8069-d01119a25f45",
+ "id": "bundle--088fbb4a-af15-4ce2-ae5b-53910807d3e5",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--3a537720-049d-431e-84ee-33627eb44661",
- "created_by_ref": "identity--02ab167a-a990-4a18-bc06-c7cf6a1a272e",
- "created": "2022-07-02T17:28:36.955313Z",
- "modified": "2022-07-02T17:28:36.955313Z",
+ "id": "attack-pattern--c3933a7e-49a9-48fd-a1f9-a871e3a387ea",
+ "created_by_ref": "identity--ac882cd8-35c6-4fbc-9e47-75d149a7fe48",
+ "created": "2022-07-02T19:59:12.641928Z",
+ "modified": "2022-07-02T19:59:12.641928Z",
"name": "Determine Strategic Ends",
- "description": "TA01",
+ "description": "Determining the campaigns goals or objectives. Examples include achieving achieving geopolitical advantage like undermining trust in an adversary, gaining domestic political advantage, achieving financial gain, or attaining a policy change, ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--71798dc3-96c8-4bfd-9201-e3caa51814d0"
+ "marking-definition--af5c716e-fbe6-4c6d-96af-b9bf757b528a"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d4a81525-7093-4cf1-8a25-5f65270f9663.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c3f5bd0d-a29b-43ba-b455-ec9ef00f05b1.json
similarity index 55%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--d4a81525-7093-4cf1-8a25-5f65270f9663.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--c3f5bd0d-a29b-43ba-b455-ec9ef00f05b1.json
index 62912d2..6fb4dd3 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d4a81525-7093-4cf1-8a25-5f65270f9663.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c3f5bd0d-a29b-43ba-b455-ec9ef00f05b1.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--c2f9114d-7255-416e-a2b7-2784c6dfafaa",
+ "id": "bundle--30c85d6b-57e9-462a-b23f-48d0dd11b58a",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--d4a81525-7093-4cf1-8a25-5f65270f9663",
- "created_by_ref": "identity--747da886-528f-4535-baf2-70ebc56a21e1",
- "created": "2022-07-02T17:28:36.954319Z",
- "modified": "2022-07-02T17:28:36.954319Z",
+ "id": "attack-pattern--c3f5bd0d-a29b-43ba-b455-ec9ef00f05b1",
+ "created_by_ref": "identity--a4baa2d5-cdef-4210-ab9e-3866033b2406",
+ "created": "2022-07-02T19:59:12.640897Z",
+ "modified": "2022-07-02T19:59:12.640897Z",
"name": "Psychographic Segmentation",
- "description": "TA13",
+ "description": "An influence operation may target populations based on psychographic segmentation, which uses audience values and decision-making processes. An operation may individually gather psychographic data with its own surveys or collection tools or externally purchase data from social media companies or online surveys, such as personality quizzes. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--867f2693-67db-4758-a04e-b397bc84e138"
+ "marking-definition--c1a166ba-5bfa-4a83-b8a7-db5bc55b6ca3"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c423ab99-cdc3-4abf-bf4e-880a1011dd2c.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c423ab99-cdc3-4abf-bf4e-880a1011dd2c.json
deleted file mode 100644
index d8fce6e..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c423ab99-cdc3-4abf-bf4e-880a1011dd2c.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--f9b7aea4-c368-4833-9615-5da59f185909",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--c423ab99-cdc3-4abf-bf4e-880a1011dd2c",
- "created_by_ref": "identity--258abf5a-e7af-4cc3-a37e-2114fefc92f0",
- "created": "2022-07-02T17:28:36.940459Z",
- "modified": "2022-07-02T17:28:36.940459Z",
- "name": "Develop Original Conspiracy Theory Narratives",
- "description": "TA14",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "develop-narratives"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0022.002.md",
- "external_id": "T0022.002"
- }
- ],
- "object_marking_refs": [
- "marking-definition--7f58f248-e688-4c86-a23e-412b3b42ad30"
- ],
- "x_mitre_is_subtechnique": true,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0aac6482-f7b2-4cd4-8661-ae692c84a188.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c6cfb4ba-463c-4bcc-a981-9b8db1114fd7.json
similarity index 61%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--0aac6482-f7b2-4cd4-8661-ae692c84a188.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--c6cfb4ba-463c-4bcc-a981-9b8db1114fd7.json
index 561d0c3..d5fcb98 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0aac6482-f7b2-4cd4-8661-ae692c84a188.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c6cfb4ba-463c-4bcc-a981-9b8db1114fd7.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--c12c92cd-015e-44f9-bf2c-ba1e28ec89a1",
+ "id": "bundle--0f5f692e-31a2-4c4d-a935-fedfbd45e8c0",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--0aac6482-f7b2-4cd4-8661-ae692c84a188",
- "created_by_ref": "identity--3d70a8e3-6a21-4bbb-9ae8-14395b4aaf0b",
- "created": "2022-07-02T17:28:36.997213Z",
- "modified": "2022-07-02T17:28:36.997213Z",
+ "id": "attack-pattern--c6cfb4ba-463c-4bcc-a981-9b8db1114fd7",
+ "created_by_ref": "identity--39310d97-7721-430c-a3ff-946545bcb395",
+ "created": "2022-07-02T19:59:12.721501Z",
+ "modified": "2022-07-02T19:59:12.721501Z",
"name": "Post Across Groups",
- "description": "TA17",
+ "description": "An influence operation may post content across groups to spread narratives and content to new communities within the target audiences or to new target audiences. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--99d5d2fe-2b34-4753-bdf5-4975f14703ee"
+ "marking-definition--a7b18c77-4e6b-4eb0-a193-c5ee9f2b5a1f"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2b86f30b-02d0-4759-9ccd-7abff53714a2.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c7076dd5-bc90-466a-9bd5-6cdd3d0d6be7.json
similarity index 57%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--2b86f30b-02d0-4759-9ccd-7abff53714a2.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--c7076dd5-bc90-466a-9bd5-6cdd3d0d6be7.json
index f666a5c..465dbec 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2b86f30b-02d0-4759-9ccd-7abff53714a2.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c7076dd5-bc90-466a-9bd5-6cdd3d0d6be7.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--e26b4ee1-2289-4b05-a477-b1a97c911ca7",
+ "id": "bundle--96b522c4-4713-4084-8b8e-ba76b650c677",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--2b86f30b-02d0-4759-9ccd-7abff53714a2",
- "created_by_ref": "identity--1df51467-370a-4394-baad-ca76908234f0",
- "created": "2022-07-02T17:28:36.964571Z",
- "modified": "2022-07-02T17:28:36.964571Z",
+ "id": "attack-pattern--c7076dd5-bc90-466a-9bd5-6cdd3d0d6be7",
+ "created_by_ref": "identity--710b455c-85f0-4402-827d-51de3b5cb98d",
+ "created": "2022-07-02T19:59:12.650795Z",
+ "modified": "2022-07-02T19:59:12.650795Z",
"name": "Plagiarize Content",
- "description": "TA06",
+ "description": "An influence operation may take content from other sources without proper attribution. This content may be either misinformation content shared by others without malicious intent but now leveraged by the campaign as disinformation or disinformation content from other sources. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--1bf2ad11-158a-4616-acde-706b3caf4858"
+ "marking-definition--9105fba4-55e6-48d0-8c9f-3c529a2bd1a9"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0361e3a0-398d-4cc5-a610-394919a8496a.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c753d5bf-9336-4115-8c8a-18d5a417b6a5.json
similarity index 65%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--0361e3a0-398d-4cc5-a610-394919a8496a.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--c753d5bf-9336-4115-8c8a-18d5a417b6a5.json
index a441010..deeefb5 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--0361e3a0-398d-4cc5-a610-394919a8496a.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c753d5bf-9336-4115-8c8a-18d5a417b6a5.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--9fa2c273-62b6-48e0-9b42-de26f2813c71",
+ "id": "bundle--e64c7a1b-f3e7-4012-a476-6e5c2404facb",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--0361e3a0-398d-4cc5-a610-394919a8496a",
- "created_by_ref": "identity--fb3f1bee-835c-4dc3-b994-8a7236f796e5",
- "created": "2022-07-02T17:28:36.987313Z",
- "modified": "2022-07-02T17:28:36.987313Z",
+ "id": "attack-pattern--c753d5bf-9336-4115-8c8a-18d5a417b6a5",
+ "created_by_ref": "identity--b1faf8aa-1214-4c96-957a-04849897afce",
+ "created": "2022-07-02T19:59:12.67391Z",
+ "modified": "2022-07-02T19:59:12.67391Z",
"name": "Interest-Based Networks",
- "description": "TA07",
+ "description": "Examples include smaller and niche networks including Gettr, Truth Social, Parler, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--cfb0e917-a8c1-4820-8b5b-fd9060b7db68"
+ "marking-definition--62468923-757c-4095-a882-2e54d5fec9d9"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c79c0902-20ea-4efb-b6b5-0659f19c035b.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c77cddbe-3859-4fbb-ba3f-ce9a9c19497f.json
similarity index 62%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--c79c0902-20ea-4efb-b6b5-0659f19c035b.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--c77cddbe-3859-4fbb-ba3f-ce9a9c19497f.json
index 96d95a0..28195bf 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c79c0902-20ea-4efb-b6b5-0659f19c035b.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c77cddbe-3859-4fbb-ba3f-ce9a9c19497f.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--4b90823b-adb7-4880-972c-0a76d9c11167",
+ "id": "bundle--ba9870c7-3927-4a37-a4bc-2d8703ab08ed",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c79c0902-20ea-4efb-b6b5-0659f19c035b",
- "created_by_ref": "identity--514be4d9-4fa3-4e97-853b-264fb284e4c6",
- "created": "2022-07-02T17:28:36.964893Z",
- "modified": "2022-07-02T17:28:36.964893Z",
+ "id": "attack-pattern--c77cddbe-3859-4fbb-ba3f-ce9a9c19497f",
+ "created_by_ref": "identity--19f7c2da-59d0-41f7-9529-825b6d7cedc8",
+ "created": "2022-07-02T19:59:12.651118Z",
+ "modified": "2022-07-02T19:59:12.651118Z",
"name": "Deceptively Labeled or Translated",
- "description": "TA06",
+ "description": "An influence operation may take authentic content from other sources and add deceptive labels or deceptively translate the content into other langauges. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--d21d3608-8994-49f9-b795-3e8e3df1164b"
+ "marking-definition--d43dd2dc-950e-4cb6-a32e-55da90ae6daf"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--12cd627c-2617-486e-bcbf-a5bf5f467286.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c9ce8866-87ec-4489-8a95-8e89ad2ae135.json
similarity index 63%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--12cd627c-2617-486e-bcbf-a5bf5f467286.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--c9ce8866-87ec-4489-8a95-8e89ad2ae135.json
index bba0fd7..797210b 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--12cd627c-2617-486e-bcbf-a5bf5f467286.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c9ce8866-87ec-4489-8a95-8e89ad2ae135.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--a1904356-afeb-46ea-9dde-3079513b79ac",
+ "id": "bundle--0a0c87f2-9764-48c8-9038-6ff5812991ee",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--12cd627c-2617-486e-bcbf-a5bf5f467286",
- "created_by_ref": "identity--cb4cf0ff-523c-4220-afb2-14f2608f63ba",
- "created": "2022-07-02T17:28:36.966525Z",
- "modified": "2022-07-02T17:28:36.966525Z",
+ "id": "attack-pattern--c9ce8866-87ec-4489-8a95-8e89ad2ae135",
+ "created_by_ref": "identity--06d529f3-4ae3-4f93-96d7-0abd7f88104a",
+ "created": "2022-07-02T19:59:12.652747Z",
+ "modified": "2022-07-02T19:59:12.652747Z",
"name": "Develop Inauthentic News Articles",
- "description": "TA06",
+ "description": "An influence operation may develop false or misleading news articles aligned to their campaign goals or narratives. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--b10767de-5e60-43b8-95d0-e1d534ff8747"
+ "marking-definition--86b3341f-0b19-48ee-9b73-2aca0fda10a7"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d230f9c5-757d-4a27-a808-fa5a60b42824.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ca7f1d3a-ee55-49d4-824f-1f060d97db12.json
similarity index 60%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--d230f9c5-757d-4a27-a808-fa5a60b42824.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--ca7f1d3a-ee55-49d4-824f-1f060d97db12.json
index 675d1f1..4b0c39b 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d230f9c5-757d-4a27-a808-fa5a60b42824.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ca7f1d3a-ee55-49d4-824f-1f060d97db12.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--c5662bd4-24c4-48de-9e08-5d80c3aa633a",
+ "id": "bundle--7f6b201d-827f-4bb6-8849-156e087339c2",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--d230f9c5-757d-4a27-a808-fa5a60b42824",
- "created_by_ref": "identity--38a77815-7d37-41b4-aa0e-c1c30262d365",
- "created": "2022-07-02T17:28:36.97035Z",
- "modified": "2022-07-02T17:28:36.97035Z",
+ "id": "attack-pattern--ca7f1d3a-ee55-49d4-824f-1f060d97db12",
+ "created_by_ref": "identity--3deacfaa-2261-489c-b048-8fcddb2e337b",
+ "created": "2022-07-02T19:59:12.656395Z",
+ "modified": "2022-07-02T19:59:12.656395Z",
"name": "Deceptively Edit Audio (Cheap fakes)",
- "description": "TA06",
+ "description": "Cheap fakes utilize less sophisticated measures of altering an image, video, or audio for example, slowing, speeding, or cutting footage to create a false context surrounding an image or event.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--52bcb8cb-9c93-47e9-8518-16cd5aa590c6"
+ "marking-definition--bd2d8f07-c4b6-4258-b533-2fd8f3d10614"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c5333233-57a6-460d-858d-9503d840d8cc.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--caaa3a7a-e35b-4f5f-94e3-0e25061dd4de.json
similarity index 63%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--c5333233-57a6-460d-858d-9503d840d8cc.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--caaa3a7a-e35b-4f5f-94e3-0e25061dd4de.json
index 5bf6003..16cc833 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c5333233-57a6-460d-858d-9503d840d8cc.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--caaa3a7a-e35b-4f5f-94e3-0e25061dd4de.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--bca55e1f-4fec-4700-84d3-0f5fab6e3f2e",
+ "id": "bundle--199b0012-0515-4452-830d-a1946a78ae1c",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c5333233-57a6-460d-858d-9503d840d8cc",
- "created_by_ref": "identity--ebfe1a17-313b-429a-8e81-5811c97039d6",
- "created": "2022-07-02T17:28:36.937887Z",
- "modified": "2022-07-02T17:28:36.937887Z",
+ "id": "attack-pattern--caaa3a7a-e35b-4f5f-94e3-0e25061dd4de",
+ "created_by_ref": "identity--f46b9e03-4d60-454a-a89e-dc10e0959010",
+ "created": "2022-07-02T19:59:12.623323Z",
+ "modified": "2022-07-02T19:59:12.623323Z",
"name": "Conduct Crowdfunding Campaigns",
- "description": "TA10",
+ "description": "An influence operation may Conduct Crowdfunding Campaigns on platforms such as GoFundMe, GiveSendGo, Tipeee, Patreon, etc.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c880832b-42f6-4dd8-8b23-8ab00e401577"
+ "marking-definition--12b5bc48-7728-47f6-ac68-5a02331e95c7"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8e21ea76-776b-4113-ab50-0ced1178fd21.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cadb4dca-7f14-4616-a515-c211d418c4c9.json
similarity index 57%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--8e21ea76-776b-4113-ab50-0ced1178fd21.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--cadb4dca-7f14-4616-a515-c211d418c4c9.json
index 7717dd4..a857e91 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--8e21ea76-776b-4113-ab50-0ced1178fd21.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cadb4dca-7f14-4616-a515-c211d418c4c9.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--760a3a1d-726e-42cd-8bc0-fd5b9ff11058",
+ "id": "bundle--54f7f318-9a58-4fc6-8c78-de50bc4d9979",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--8e21ea76-776b-4113-ab50-0ced1178fd21",
- "created_by_ref": "identity--67c908f4-e055-4f71-af47-77b74f7ea9b2",
- "created": "2022-07-02T17:28:36.964251Z",
- "modified": "2022-07-02T17:28:36.964251Z",
+ "id": "attack-pattern--cadb4dca-7f14-4616-a515-c211d418c4c9",
+ "created_by_ref": "identity--657a6b7c-333d-43c5-8831-873d26e2c5c0",
+ "created": "2022-07-02T19:59:12.650473Z",
+ "modified": "2022-07-02T19:59:12.650473Z",
"name": "Use Copypasta",
- "description": "TA06",
+ "description": "Copypasta refers to a piece of text that has been copied and pasted multiple times across various online platforms. A copypasta\u2019s final form may differ from its original source text as users add, delete, or otherwise edit the content as they repost the text. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--b3f38281-19ec-4cef-94f5-5f12b3f70455"
+ "marking-definition--5d47ba64-ffc9-451a-8062-bc368b0ab610"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--52e46e86-b4be-44e2-919d-98c5e4869bec.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cc18f14a-5c59-418e-99ef-63578e24c020.json
similarity index 61%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--52e46e86-b4be-44e2-919d-98c5e4869bec.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--cc18f14a-5c59-418e-99ef-63578e24c020.json
index 43d106e..55416a4 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--52e46e86-b4be-44e2-919d-98c5e4869bec.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cc18f14a-5c59-418e-99ef-63578e24c020.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--e5ddf048-bf49-4eec-ad76-95c1c277d126",
+ "id": "bundle--bf3a4ebb-2a90-42df-b8a7-3e4099af1eaa",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--52e46e86-b4be-44e2-919d-98c5e4869bec",
- "created_by_ref": "identity--446ec9a0-af34-499e-a3ce-765014ffad9f",
- "created": "2022-07-02T17:28:36.935638Z",
- "modified": "2022-07-02T17:28:36.935638Z",
+ "id": "attack-pattern--cc18f14a-5c59-418e-99ef-63578e24c020",
+ "created_by_ref": "identity--4933a852-ba49-4e7a-b91b-71c2b2875ab6",
+ "created": "2022-07-02T19:59:12.621024Z",
+ "modified": "2022-07-02T19:59:12.621024Z",
"name": "Create inauthentic websites",
- "description": "TA15",
+ "description": "Create media assets to support inauthentic organizations (e.g. think tank), people (e.g. experts) and/or serve as sites to distribute malware/launch phishing operations.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--156a15e6-e151-4328-b0f2-632d90f7a7bd"
+ "marking-definition--b0e007a6-3cb6-44e3-87b7-f45200baf0dd"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b474bed9-be50-493e-a336-73adff0ec24d.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cd25a2d2-5102-4666-932c-5bd7de061504.json
similarity index 55%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--b474bed9-be50-493e-a336-73adff0ec24d.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--cd25a2d2-5102-4666-932c-5bd7de061504.json
index aa62fef..8a77c01 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b474bed9-be50-493e-a336-73adff0ec24d.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cd25a2d2-5102-4666-932c-5bd7de061504.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--0c9d3b46-293a-45fe-bb10-2bc224c4bb85",
+ "id": "bundle--365e17c1-058b-4a9a-bca5-76e97d008813",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b474bed9-be50-493e-a336-73adff0ec24d",
- "created_by_ref": "identity--ea02dde7-a5d3-4ec9-8487-37cb27234833",
- "created": "2022-07-02T17:28:37.000705Z",
- "modified": "2022-07-02T17:28:37.000705Z",
+ "id": "attack-pattern--cd25a2d2-5102-4666-932c-5bd7de061504",
+ "created_by_ref": "identity--05d39a28-bb20-427a-85eb-3e15951053e8",
+ "created": "2022-07-02T19:59:12.724924Z",
+ "modified": "2022-07-02T19:59:12.724924Z",
"name": "Delete Opposing Content",
- "description": "TA18",
+ "description": "Deleting opposing content refers to the removal of content that conflicts with operational narratives from selected platforms. An influence operation may delete opposing content to censor contradictory information from the target audience, allowing operation narratives to take priority in the information space.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e9878a32-2cbf-45c8-ac5f-2d85c410bc52"
+ "marking-definition--3891e202-6205-4e65-8bcf-a7d288e04ae2"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--11300333-274b-4c70-84a7-c0d5ba379d34.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cf6ea412-b1f5-46ef-839b-9a550418d5c0.json
similarity index 61%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--11300333-274b-4c70-84a7-c0d5ba379d34.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--cf6ea412-b1f5-46ef-839b-9a550418d5c0.json
index 97bb3df..f7304e0 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--11300333-274b-4c70-84a7-c0d5ba379d34.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cf6ea412-b1f5-46ef-839b-9a550418d5c0.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--273e79da-925e-47a9-8fd6-479df16f3f36",
+ "id": "bundle--b3bfffa4-3800-4a4d-92fd-2c48554976c4",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--11300333-274b-4c70-84a7-c0d5ba379d34",
- "created_by_ref": "identity--663f9601-2b42-4590-b655-c4bc542f02c1",
- "created": "2022-07-02T17:28:36.955953Z",
- "modified": "2022-07-02T17:28:36.955953Z",
+ "id": "attack-pattern--cf6ea412-b1f5-46ef-839b-9a550418d5c0",
+ "created_by_ref": "identity--04fe0474-f10e-4552-8f5e-7158aba4546f",
+ "created": "2022-07-02T19:59:12.642582Z",
+ "modified": "2022-07-02T19:59:12.642582Z",
"name": "Discredit Credible Sources",
- "description": "TA02",
+ "description": "Plan to delegitimize the media landscape and degrade public trust in reporting, by discrediting credible sources. This makes it easier to promote influence operation content.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--4770b304-99bf-4eb3-a7ef-c39191c13a88"
+ "marking-definition--5be7fa61-2b10-4583-8c9c-9f300864e5f1"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--02b28a12-df83-4b45-8d7a-39498b54719b.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cf798771-8d4d-4625-ae5a-113244b67c1f.json
similarity index 68%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--02b28a12-df83-4b45-8d7a-39498b54719b.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--cf798771-8d4d-4625-ae5a-113244b67c1f.json
index e4d6aec..9ff3596 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--02b28a12-df83-4b45-8d7a-39498b54719b.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cf798771-8d4d-4625-ae5a-113244b67c1f.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--843a176f-5cd6-4b2b-aa99-a6dd6506878b",
+ "id": "bundle--d3d51cec-740e-4ffb-b4fa-7bb79cd01933",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--02b28a12-df83-4b45-8d7a-39498b54719b",
- "created_by_ref": "identity--070f862c-ae7d-4770-9de1-a5845c0b34be",
- "created": "2022-07-02T17:28:36.985728Z",
- "modified": "2022-07-02T17:28:36.985728Z",
+ "id": "attack-pattern--cf798771-8d4d-4625-ae5a-113244b67c1f",
+ "created_by_ref": "identity--2e1efd04-e3c9-40b7-9e80-afad523b2f79",
+ "created": "2022-07-02T19:59:12.6723Z",
+ "modified": "2022-07-02T19:59:12.6723Z",
"name": "Audio Livestream",
- "description": "TA07",
+ "description": "nan",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--98966f82-106a-4753-8a5a-e8d9d4acfe68"
+ "marking-definition--3882f49d-1439-47a4-9bf2-f93c0acfdf60"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5621af39-db87-4673-9840-9125cc4a17c4.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d1bed9f5-c57a-463b-a7e0-1217d5e91eeb.json
similarity index 59%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--5621af39-db87-4673-9840-9125cc4a17c4.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--d1bed9f5-c57a-463b-a7e0-1217d5e91eeb.json
index 5ae9193..4736b07 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5621af39-db87-4673-9840-9125cc4a17c4.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d1bed9f5-c57a-463b-a7e0-1217d5e91eeb.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--421a5447-68ad-4b71-93ae-6993212ce27c",
+ "id": "bundle--3d1853dd-4885-4fc0-a5d9-de90abc2a0cb",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--5621af39-db87-4673-9840-9125cc4a17c4",
- "created_by_ref": "identity--3c9f77bd-f422-4c1f-9423-9549208c4e05",
- "created": "2022-07-02T17:28:37.000297Z",
- "modified": "2022-07-02T17:28:37.000297Z",
+ "id": "attack-pattern--d1bed9f5-c57a-463b-a7e0-1217d5e91eeb",
+ "created_by_ref": "identity--701206ed-d478-456d-8056-471c43876dca",
+ "created": "2022-07-02T19:59:12.724599Z",
+ "modified": "2022-07-02T19:59:12.724599Z",
"name": "Control Information Environment through Offensive Cyberspace Operations",
- "description": "TA18",
+ "description": "Controlling the information environment through offensive cyberspace operations uses cyber tools and techniques to alter the trajectory of content in the information space to either prioritize operation messaging or block opposition messaging.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--d4306810-bfb4-4b43-8410-7abdd7acfc68"
+ "marking-definition--b9978975-39c2-41de-b0f1-305296e69d07"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d1f4502a-e10b-4854-a5d2-92a8400bb55f.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d1f4502a-e10b-4854-a5d2-92a8400bb55f.json
deleted file mode 100644
index ae16e46..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d1f4502a-e10b-4854-a5d2-92a8400bb55f.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--1d3bd682-9bfc-412a-9a6a-ca1efa3c0bdf",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--d1f4502a-e10b-4854-a5d2-92a8400bb55f",
- "created_by_ref": "identity--933f099f-7d46-47d6-bee9-ac54d8136c3a",
- "created": "2022-07-02T17:28:36.983824Z",
- "modified": "2022-07-02T17:28:36.983824Z",
- "name": "Leverage Echo Chambers/Filter Bubbles",
- "description": "TA05",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "microtarget"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0102.md",
- "external_id": "T0102"
- }
- ],
- "object_marking_refs": [
- "marking-definition--50f82b47-eb14-47c1-b078-1259d51cbec6"
- ],
- "x_mitre_is_subtechnique": false,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--729898bf-b3f0-4e12-aadc-376e25d37725.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d315ce72-b48a-4fcc-bf51-6701c3b8eb6e.json
similarity index 66%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--729898bf-b3f0-4e12-aadc-376e25d37725.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--d315ce72-b48a-4fcc-bf51-6701c3b8eb6e.json
index dfea5d9..e9c9351 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--729898bf-b3f0-4e12-aadc-376e25d37725.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d315ce72-b48a-4fcc-bf51-6701c3b8eb6e.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--395a167f-e8ee-4d72-97d6-5f5895bd4a7b",
+ "id": "bundle--c7f654df-e17f-470d-b57c-1aa2a51cad48",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--729898bf-b3f0-4e12-aadc-376e25d37725",
- "created_by_ref": "identity--9e2bb319-644b-4429-96be-2e359716786a",
- "created": "2022-07-02T17:28:36.990534Z",
- "modified": "2022-07-02T17:28:36.990534Z",
+ "id": "attack-pattern--d315ce72-b48a-4fcc-bf51-6701c3b8eb6e",
+ "created_by_ref": "identity--90e5be82-f88e-449c-a0e7-2b44bfca42ca",
+ "created": "2022-07-02T19:59:12.677287Z",
+ "modified": "2022-07-02T19:59:12.677287Z",
"name": "Blogging and Publishing Networks",
- "description": "TA07",
+ "description": "Examples include WordPress, Blogger, Weebly, Tumblr, Medium, etc. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--7fdc4d58-df17-405e-9d6e-168022d289c1"
+ "marking-definition--171818e7-b35f-4252-a83e-bc715e1af1e4"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b129dcda-0956-4c1b-a856-02f5f03cf86e.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d4254a49-6d3a-46cc-9b41-e56a1c0ea8f6.json
similarity index 66%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--b129dcda-0956-4c1b-a856-02f5f03cf86e.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--d4254a49-6d3a-46cc-9b41-e56a1c0ea8f6.json
index b66e600..893ce9d 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b129dcda-0956-4c1b-a856-02f5f03cf86e.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d4254a49-6d3a-46cc-9b41-e56a1c0ea8f6.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--d51a8495-8fb8-45f8-9d67-a4e172999a26",
+ "id": "bundle--45b2d620-093f-4fc4-9eb3-0cbc7412c81c",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b129dcda-0956-4c1b-a856-02f5f03cf86e",
- "created_by_ref": "identity--fbd6434b-bd92-44a3-acf0-f027f9ca693b",
- "created": "2022-07-02T17:28:37.011971Z",
- "modified": "2022-07-02T17:28:37.011971Z",
+ "id": "attack-pattern--d4254a49-6d3a-46cc-9b41-e56a1c0ea8f6",
+ "created_by_ref": "identity--56ecd0d7-2c77-4daa-afe7-6e811d9e456b",
+ "created": "2022-07-02T19:59:12.736942Z",
+ "modified": "2022-07-02T19:59:12.736942Z",
"name": "Use Shell Organizations",
- "description": "TA11",
+ "description": "Use Shell Organizations to conceal sponsorship.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e299223e-ee40-4180-886c-6c7ecda43a57"
+ "marking-definition--8c38a88c-17da-4495-b5f3-7e1ebf6e9b8d"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--78c65ad8-b96c-48b2-857d-f9952f3bcb7e.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d6f1b55e-ccb2-4cd6-9ed0-84d326e51a89.json
similarity index 60%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--78c65ad8-b96c-48b2-857d-f9952f3bcb7e.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--d6f1b55e-ccb2-4cd6-9ed0-84d326e51a89.json
index bc7f58f..4276c02 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--78c65ad8-b96c-48b2-857d-f9952f3bcb7e.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d6f1b55e-ccb2-4cd6-9ed0-84d326e51a89.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--2d9b54c5-e550-4f09-9b3a-f81984ed47fe",
+ "id": "bundle--cc9e6e59-2ebb-4f42-a74c-a3293daca1c6",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--78c65ad8-b96c-48b2-857d-f9952f3bcb7e",
- "created_by_ref": "identity--364b03c0-64e4-4dd1-90fc-8062c8cef0a8",
- "created": "2022-07-02T17:28:36.977361Z",
- "modified": "2022-07-02T17:28:36.977361Z",
+ "id": "attack-pattern--d6f1b55e-ccb2-4cd6-9ed0-84d326e51a89",
+ "created_by_ref": "identity--891c047b-2236-4b7d-bcf9-ccdb63c25176",
+ "created": "2022-07-02T19:59:12.663632Z",
+ "modified": "2022-07-02T19:59:12.663632Z",
"name": "Infiltrate Existing Networks",
- "description": "TA15",
+ "description": "Operators deceptively insert social assets into existing networks as group members in order to influence the members of the network and the wider information environment that the network impacts.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--fae9f26c-494d-4d95-a130-a66a29547b23"
+ "marking-definition--134ec6be-bdbb-4ee1-a01a-d584cac02134"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7b6755fc-a945-4ee8-9547-34be9f979b92.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d75214cd-118d-4ce4-ba64-f1a0ef15b953.json
similarity index 56%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--7b6755fc-a945-4ee8-9547-34be9f979b92.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--d75214cd-118d-4ce4-ba64-f1a0ef15b953.json
index 10d4c5c..dedb27c 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7b6755fc-a945-4ee8-9547-34be9f979b92.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d75214cd-118d-4ce4-ba64-f1a0ef15b953.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--33a8bad0-5e27-4c11-a01a-eeaeb9d9b338",
+ "id": "bundle--2f7f5b1b-88b5-4c53-817b-faf0860e8d27",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--7b6755fc-a945-4ee8-9547-34be9f979b92",
- "created_by_ref": "identity--e055cad0-aa0a-494e-9307-588c00b5c638",
- "created": "2022-07-02T17:28:36.971749Z",
- "modified": "2022-07-02T17:28:36.971749Z",
- "name": "Leak Altered Documents",
- "description": "TA06",
+ "id": "attack-pattern--d75214cd-118d-4ce4-ba64-f1a0ef15b953",
+ "created_by_ref": "identity--98b6c229-8789-4a75-a9f5-76000c9c7566",
+ "created": "2022-07-02T19:59:12.657683Z",
+ "modified": "2022-07-02T19:59:12.657683Z",
+ "name": "Alter Authentic Documents",
+ "description": "Alter authentic documents (public or non-public) to achieve campaign goals. The altered documents are intended to appear as if they are authentic can be \"leaked\" during later stages in the operation.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--44be47a1-7a10-4443-bd1a-1d585c544450"
+ "marking-definition--744df4b6-2091-44e3-907c-441330536d7d"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ac73ee9c-a805-4ec9-8b32-236cbd47989f.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d92b1208-271a-4e70-ad86-2ecc61c2033f.json
similarity index 63%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--ac73ee9c-a805-4ec9-8b32-236cbd47989f.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--d92b1208-271a-4e70-ad86-2ecc61c2033f.json
index c37dc55..b8f4b48 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ac73ee9c-a805-4ec9-8b32-236cbd47989f.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d92b1208-271a-4e70-ad86-2ecc61c2033f.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--f23aca5c-b8a4-4c08-b3a2-c4f27ffbf84d",
+ "id": "bundle--65083ab8-6d1f-43c8-989a-5c2cb378da69",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--ac73ee9c-a805-4ec9-8b32-236cbd47989f",
- "created_by_ref": "identity--04a81869-584e-45a5-872e-277140a86bfe",
- "created": "2022-07-02T17:28:36.956272Z",
- "modified": "2022-07-02T17:28:36.956272Z",
+ "id": "attack-pattern--d92b1208-271a-4e70-ad86-2ecc61c2033f",
+ "created_by_ref": "identity--dc371a33-51e4-48f9-a98f-cc39ae8cb87f",
+ "created": "2022-07-02T19:59:12.642907Z",
+ "modified": "2022-07-02T19:59:12.642907Z",
"name": "Distort",
- "description": "TA02",
+ "description": "Twist the narrative. Take information, or artifacts like images, and change the framing around them.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--f69b3118-be9a-4816-865c-2db18ec50ce3"
+ "marking-definition--35294f15-a41f-4332-8fc9-b6a07e5e8784"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--da1fb7bf-4207-4fe6-895c-c6b5967aac20.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--da1fb7bf-4207-4fe6-895c-c6b5967aac20.json
new file mode 100644
index 0000000..06a3e05
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--da1fb7bf-4207-4fe6-895c-c6b5967aac20.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--8669d0f6-099f-4644-8fd4-22826f1200bb",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--da1fb7bf-4207-4fe6-895c-c6b5967aac20",
+ "created_by_ref": "identity--43bbc304-12e9-4066-9f9d-a4450a90b176",
+ "created": "2022-07-02T19:59:12.61904Z",
+ "modified": "2022-07-02T19:59:12.61904Z",
+ "name": "Develop Competing Narratives",
+ "description": "Advance competing narratives connected to same issue ie: on one hand deny incident while at same time expresses dismiss. Suppressing or discouraging narratives already spreading requires an alternative. The most simple set of narrative techniques in response would be the construction and promotion of contradictory alternatives centered on denial, deflection, dismissal, counter-charges, excessive standards of proof, bias in prohibition or enforcement, and so on. These competing narratives allow loyalists cover, but are less compelling to opponents and fence-sitters than campaigns built around existing narratives or highly explanatory master narratives. Competing narratives, as such, are especially useful in the \"firehose of misinformation\" approach.",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "develop-narratives"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0004.md",
+ "external_id": "T0004"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--dfd31148-43c4-4e95-8127-634a6171b20f"
+ ],
+ "x_mitre_is_subtechnique": false,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a632a961-4906-4e38-9e9d-fe2f0d523776.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--da37527d-398a-4ada-b5e8-d4712b696fb6.json
similarity index 57%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--a632a961-4906-4e38-9e9d-fe2f0d523776.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--da37527d-398a-4ada-b5e8-d4712b696fb6.json
index 4b2c88a..f7bbb50 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a632a961-4906-4e38-9e9d-fe2f0d523776.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--da37527d-398a-4ada-b5e8-d4712b696fb6.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--7d81921c-aa9f-47a5-919b-1a4f887487ab",
+ "id": "bundle--e1d4261a-6537-412b-89b7-2f45f417ca67",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a632a961-4906-4e38-9e9d-fe2f0d523776",
- "created_by_ref": "identity--8fa0040a-ad7a-4ac0-a1e7-a80981bcd626",
- "created": "2022-07-02T17:28:36.939179Z",
- "modified": "2022-07-02T17:28:36.939179Z",
+ "id": "attack-pattern--da37527d-398a-4ada-b5e8-d4712b696fb6",
+ "created_by_ref": "identity--4bdad53a-af7a-422c-8a1d-b345b661ab14",
+ "created": "2022-07-02T19:59:12.624805Z",
+ "modified": "2022-07-02T19:59:12.624805Z",
"name": "Hijack Hashtags",
- "description": "TA06",
+ "description": "Hashtag hijacking occurs when users \u201c[use] a trending hashtag to promote topics that are substantially different from its recent context\u201d (VanDam and Tan, 2016) or \u201cto promote one\u2019s own social media agenda\u201d (Darius and Stephany, 2019).",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--f5bbcd48-69f1-4e99-99a7-cf6a4fa364d6"
+ "marking-definition--93fe6620-589a-4e2e-a481-d5ac4c22ce7e"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a6c98a38-b972-4c1b-aaba-27bf7be9afe8.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dc5fe86d-bf2c-4e17-8d7b-9e3cfa6a0683.json
similarity index 60%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--a6c98a38-b972-4c1b-aaba-27bf7be9afe8.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--dc5fe86d-bf2c-4e17-8d7b-9e3cfa6a0683.json
index fb7f591..a28ac2f 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--a6c98a38-b972-4c1b-aaba-27bf7be9afe8.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dc5fe86d-bf2c-4e17-8d7b-9e3cfa6a0683.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--2c8ac437-8a5a-43a1-82e9-76e50691974c",
+ "id": "bundle--bd7d13e0-5d72-4737-b829-08d9639a1007",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--a6c98a38-b972-4c1b-aaba-27bf7be9afe8",
- "created_by_ref": "identity--57649d22-9c99-490f-a825-a527adbea9d0",
- "created": "2022-07-02T17:28:36.978634Z",
- "modified": "2022-07-02T17:28:36.978634Z",
- "name": "Leverage Content Farm",
- "description": "TA15",
+ "id": "attack-pattern--dc5fe86d-bf2c-4e17-8d7b-9e3cfa6a0683",
+ "created_by_ref": "identity--b549dd3e-fd8d-4e55-96ba-8a217d269be7",
+ "created": "2022-07-02T19:59:12.664946Z",
+ "modified": "2022-07-02T19:59:12.664946Z",
+ "name": "Leverage Content Farms",
+ "description": "Using the services of large-scale content providers for creating and amplifying campaign artifacts at scale.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--bacda8da-e8b4-40ae-b5ba-a78fba7998bb"
+ "marking-definition--872bda36-35fd-4bd5-ba8c-2127084481f5"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--33b83d49-01b3-452e-a68a-abd77118353c.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dc7b3aae-7df9-405d-a530-3a753a776a9a.json
similarity index 67%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--33b83d49-01b3-452e-a68a-abd77118353c.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--dc7b3aae-7df9-405d-a530-3a753a776a9a.json
index 545bec1..b584b3a 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--33b83d49-01b3-452e-a68a-abd77118353c.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dc7b3aae-7df9-405d-a530-3a753a776a9a.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--4843672c-fdd3-4661-8589-805cce0c0e89",
+ "id": "bundle--933bf5f1-7ed7-4e3c-9c8b-3e3b92830c72",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--33b83d49-01b3-452e-a68a-abd77118353c",
- "created_by_ref": "identity--d35baed2-802e-40cf-9085-4d69a570edbb",
- "created": "2022-07-02T17:28:36.993711Z",
- "modified": "2022-07-02T17:28:36.993711Z",
+ "id": "attack-pattern--dc7b3aae-7df9-405d-a530-3a753a776a9a",
+ "created_by_ref": "identity--5e295894-d010-463b-9018-4b8c9a038465",
+ "created": "2022-07-02T19:59:12.680645Z",
+ "modified": "2022-07-02T19:59:12.680645Z",
"name": "Social media",
- "description": "TA09",
+ "description": "Social Media",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--038ce6ff-3de1-44a4-8d08-4ad223468071"
+ "marking-definition--40c1c436-5b9d-4547-9132-cc56ec1f9f3a"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d0cadcb4-3f75-43cf-9124-86e7caf7ee45.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dce18434-811e-4284-9e14-a7a1bac3fc23.json
similarity index 68%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--d0cadcb4-3f75-43cf-9124-86e7caf7ee45.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--dce18434-811e-4284-9e14-a7a1bac3fc23.json
index b380faa..0314da6 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d0cadcb4-3f75-43cf-9124-86e7caf7ee45.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dce18434-811e-4284-9e14-a7a1bac3fc23.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--0be1b964-99b6-4d5d-9944-981f957e3b8b",
+ "id": "bundle--ea6db346-8277-43da-b230-4c88f11ac957",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--d0cadcb4-3f75-43cf-9124-86e7caf7ee45",
- "created_by_ref": "identity--a2fb8caa-de6e-4d3d-9267-23a941d8455d",
- "created": "2022-07-02T17:28:37.013559Z",
- "modified": "2022-07-02T17:28:37.013559Z",
+ "id": "attack-pattern--dce18434-811e-4284-9e14-a7a1bac3fc23",
+ "created_by_ref": "identity--80b042e9-4a3f-48d6-8a1e-c73aaf5325dc",
+ "created": "2022-07-02T19:59:12.738602Z",
+ "modified": "2022-07-02T19:59:12.738602Z",
"name": "Post Borderline Content",
- "description": "TA11",
+ "description": "Post Borderline Content",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--9a4a24a5-fe80-4058-823f-7796be2262d1"
+ "marking-definition--4be88932-d5ca-4757-9074-c28cb5107b12"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cee96770-2751-43aa-9ce9-23012235ae8b.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dd4a7b60-a845-46d7-a189-dc05fc8a247c.json
similarity index 56%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--cee96770-2751-43aa-9ce9-23012235ae8b.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--dd4a7b60-a845-46d7-a189-dc05fc8a247c.json
index ec0f5da..a63a683 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cee96770-2751-43aa-9ce9-23012235ae8b.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dd4a7b60-a845-46d7-a189-dc05fc8a247c.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--6797223a-cc10-4aaf-8753-0ebc26155f17",
+ "id": "bundle--d86748a0-c3e3-44d3-a715-fbedce9c116d",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--cee96770-2751-43aa-9ce9-23012235ae8b",
- "created_by_ref": "identity--63dfecf0-659e-41e8-8142-f293e67bb9ec",
- "created": "2022-07-02T17:28:36.941093Z",
- "modified": "2022-07-02T17:28:36.941093Z",
+ "id": "attack-pattern--dd4a7b60-a845-46d7-a189-dc05fc8a247c",
+ "created_by_ref": "identity--03bf53ef-348c-4fcc-be85-ef80671903b5",
+ "created": "2022-07-02T19:59:12.62703Z",
+ "modified": "2022-07-02T19:59:12.62703Z",
"name": "Reframe Context",
- "description": "TA06",
+ "description": "Reframing context refers to removing an event from its surrounding context to distort its intended meaning. Rather than deny that an event occurred, reframing context frames an event in a manner that may lead the target audience to draw a different conclusion about its intentions. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--66ae7e8a-9742-4cdc-baf9-e2f86d0e4dc1"
+ "marking-definition--221ca551-3092-4c38-bc9e-3e69d9e182a0"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1b11a06d-2772-4b32-a70d-e64f6434bd3c.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dd6177db-6803-454a-9ab5-0ab7dcfacde6.json
similarity index 61%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--1b11a06d-2772-4b32-a70d-e64f6434bd3c.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--dd6177db-6803-454a-9ab5-0ab7dcfacde6.json
index 15a353e..eb7ff4b 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1b11a06d-2772-4b32-a70d-e64f6434bd3c.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dd6177db-6803-454a-9ab5-0ab7dcfacde6.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--e1b3a7bb-fb87-4f47-aa80-1390ec9fede5",
+ "id": "bundle--9d65ce6f-60f6-4c7a-b8de-45e2dca3fba0",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--1b11a06d-2772-4b32-a70d-e64f6434bd3c",
- "created_by_ref": "identity--970c32d4-a501-498e-b15b-8c70176217a6",
- "created": "2022-07-02T17:28:36.945916Z",
- "modified": "2022-07-02T17:28:36.945916Z",
+ "id": "attack-pattern--dd6177db-6803-454a-9ab5-0ab7dcfacde6",
+ "created_by_ref": "identity--493f812f-fcea-4bf7-9a3a-c79748e2a8e3",
+ "created": "2022-07-02T19:59:12.632362Z",
+ "modified": "2022-07-02T19:59:12.632362Z",
"name": "Harass People Based on Identities",
- "description": "TA18",
+ "description": "Examples include social identities like gender, sexuality, race, ethnicity, religion, ability, nationality, etc. as well as roles and occupations like journalist or activist.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--57ad46db-bf70-435f-9d17-10c6651743c0"
+ "marking-definition--edf44f9f-a463-4594-9e5c-02d3816d381a"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2da637f8-4277-4a95-8dc4-c17a92be1281.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dd6a5e38-a8cd-48a7-9f76-c320cb8305b7.json
similarity index 64%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--2da637f8-4277-4a95-8dc4-c17a92be1281.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--dd6a5e38-a8cd-48a7-9f76-c320cb8305b7.json
index 533a147..0e5f641 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--2da637f8-4277-4a95-8dc4-c17a92be1281.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dd6a5e38-a8cd-48a7-9f76-c320cb8305b7.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--e53ebad9-c97b-401f-9b2f-6615996016d6",
+ "id": "bundle--8df4cf1f-ddcb-4be1-8f60-0b310b4d682d",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--2da637f8-4277-4a95-8dc4-c17a92be1281",
- "created_by_ref": "identity--f782b122-e140-49b5-9788-e6b26fdc6d24",
- "created": "2022-07-02T17:28:37.01677Z",
- "modified": "2022-07-02T17:28:37.01677Z",
+ "id": "attack-pattern--dd6a5e38-a8cd-48a7-9f76-c320cb8305b7",
+ "created_by_ref": "identity--a8c616e1-c75d-45a5-814e-6faf15c3f49e",
+ "created": "2022-07-02T19:59:12.741833Z",
+ "modified": "2022-07-02T19:59:12.741833Z",
"name": "Action/attitude",
- "description": "TA12",
+ "description": "Measure current system state with respect to the effectiveness of influencing action/attitude. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--94db7dbd-42e7-4cd0-9274-c1d979b4c123"
+ "marking-definition--0f227a86-f2bb-42fa-9b2c-ab90e1115259"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--59223888-b348-45cf-a4f7-577ba5778641.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--de168abd-3a95-4dbc-a673-6756ba2bc3fc.json
similarity index 61%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--59223888-b348-45cf-a4f7-577ba5778641.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--de168abd-3a95-4dbc-a673-6756ba2bc3fc.json
index 8671b36..03fdc56 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--59223888-b348-45cf-a4f7-577ba5778641.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--de168abd-3a95-4dbc-a673-6756ba2bc3fc.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--feb1ff2a-b1b5-43ee-854e-7e6f3b90ea94",
+ "id": "bundle--a153bebf-43b1-48c4-bbb2-bb2b65d97bef",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--59223888-b348-45cf-a4f7-577ba5778641",
- "created_by_ref": "identity--3b468fa6-32f3-4f12-9071-6c3db353d07d",
- "created": "2022-07-02T17:28:36.960796Z",
- "modified": "2022-07-02T17:28:36.960796Z",
+ "id": "attack-pattern--de168abd-3a95-4dbc-a673-6756ba2bc3fc",
+ "created_by_ref": "identity--ba348c32-bb6c-457e-9326-ca57df0cecd1",
+ "created": "2022-07-02T19:59:12.647534Z",
+ "modified": "2022-07-02T19:59:12.647534Z",
"name": "Identify Existing Prejudices",
- "description": "TA13",
+ "description": "An influence operation may exploit existing racial, religious, demographic, or social prejudices to further polarize its target audience from the rest of the public.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--94232774-8de1-450a-8a03-2af5246e9c2a"
+ "marking-definition--649e28ca-2822-4efe-8a7e-b31b5123efa3"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dee665e8-0d94-4244-b5c2-ac6fd6f29ed8.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dee665e8-0d94-4244-b5c2-ac6fd6f29ed8.json
new file mode 100644
index 0000000..9e94aee
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dee665e8-0d94-4244-b5c2-ac6fd6f29ed8.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--c43c3b14-2bbe-40ab-b055-be9f997e7490",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--dee665e8-0d94-4244-b5c2-ac6fd6f29ed8",
+ "created_by_ref": "identity--e11b5a72-8caf-4838-a8f5-436f204fad35",
+ "created": "2022-07-02T19:59:12.618705Z",
+ "modified": "2022-07-02T19:59:12.618705Z",
+ "name": "Leverage Existing Narratives",
+ "description": "Use or adapt existing narrative themes, where narratives are the baseline stories of a target audience. Narratives form the bedrock of our worldviews. New information is understood through a process firmly grounded in this bedrock. If new information is not consitent with the prevailing narratives of an audience, it will be ignored. Effective campaigns will frame their misinformation in the context of these narratives. Highly effective campaigns will make extensive use of audience-appropriate archetypes and meta-narratives throughout their content creation and amplifiction practices. ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "develop-narratives"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0003.md",
+ "external_id": "T0003"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--686540d6-1058-4b8f-985b-408ccc83f6d7"
+ ],
+ "x_mitre_is_subtechnique": false,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cb89181b-cb31-4902-ba50-930ca46b86fc.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dee6a0f9-6e1c-40fb-b347-b0d181d37c32.json
similarity index 60%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--cb89181b-cb31-4902-ba50-930ca46b86fc.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--dee6a0f9-6e1c-40fb-b347-b0d181d37c32.json
index c0dc3fc..d292953 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--cb89181b-cb31-4902-ba50-930ca46b86fc.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--dee6a0f9-6e1c-40fb-b347-b0d181d37c32.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--676ed095-4462-451c-90f6-a2fd2811b612",
+ "id": "bundle--f5c86b9c-35c1-4009-acbe-04b555ff6cb5",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--cb89181b-cb31-4902-ba50-930ca46b86fc",
- "created_by_ref": "identity--9aa4eaff-5c2a-4932-a048-34d1d12dc115",
- "created": "2022-07-02T17:28:36.988271Z",
- "modified": "2022-07-02T17:28:36.988271Z",
+ "id": "attack-pattern--dee6a0f9-6e1c-40fb-b347-b0d181d37c32",
+ "created_by_ref": "identity--fc0d8814-5f9f-46b4-97ea-4dc54109b2fa",
+ "created": "2022-07-02T19:59:12.674886Z",
+ "modified": "2022-07-02T19:59:12.674886Z",
"name": "Media Sharing Networks",
- "description": "TA07",
+ "description": "Media sharing networks refer to services whose primary function is the hosting and sharing of specific forms of media. Examples include Instagram, Snapchat, TikTok, Youtube, SoundCloud.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--36d2574b-3e95-425c-9d87-9463c4e3c1b7"
+ "marking-definition--025cb54b-fe99-4ab5-8e60-6bd4d58391e5"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e15ab7c3-84da-4b2b-89e6-600d89b41bb2.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e15ab7c3-84da-4b2b-89e6-600d89b41bb2.json
deleted file mode 100644
index 788e3d6..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e15ab7c3-84da-4b2b-89e6-600d89b41bb2.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--2b7fd1f9-e9e4-4ec9-9a21-769ac37518a8",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--e15ab7c3-84da-4b2b-89e6-600d89b41bb2",
- "created_by_ref": "identity--6a0944e4-cf74-4ef1-8982-9fd9c1bf1601",
- "created": "2022-07-02T17:28:37.002338Z",
- "modified": "2022-07-02T17:28:37.002338Z",
- "name": "Report Non-Violative Opposing Content",
- "description": "TA18",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "drive-online-harms"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0124.001.md",
- "external_id": "T0124.001"
- }
- ],
- "object_marking_refs": [
- "marking-definition--551a4305-58e0-4347-b732-51dcbb9d28e1"
- ],
- "x_mitre_is_subtechnique": true,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--275352ca-291e-4501-aef3-4bae8c972ea5.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e4225ef6-3941-429c-913c-fac485573178.json
similarity index 64%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--275352ca-291e-4501-aef3-4bae8c972ea5.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--e4225ef6-3941-429c-913c-fac485573178.json
index 6004dbe..362da55 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--275352ca-291e-4501-aef3-4bae8c972ea5.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e4225ef6-3941-429c-913c-fac485573178.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--1e1075bd-febd-4bd6-8779-6a2ec365f0be",
+ "id": "bundle--70b668b0-b2f1-4fd9-9613-d0489b1684a9",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--275352ca-291e-4501-aef3-4bae8c972ea5",
- "created_by_ref": "identity--3cd80d75-1c98-4caa-8b59-8dd259d104a1",
- "created": "2022-07-02T17:28:36.957224Z",
- "modified": "2022-07-02T17:28:36.957224Z",
+ "id": "attack-pattern--e4225ef6-3941-429c-913c-fac485573178",
+ "created_by_ref": "identity--95f21ef0-a31f-4fa7-9b56-a03c91b2410d",
+ "created": "2022-07-02T19:59:12.644073Z",
+ "modified": "2022-07-02T19:59:12.644073Z",
"name": "Divide",
- "description": "TA02",
+ "description": "Create conflict between subgroups, to widen divisions in a community",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--04222561-2e4e-48c3-9cc9-c1cd50278481"
+ "marking-definition--b7a1471c-5448-4c59-8ed0-7ba5587a0ffb"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4cf400f0-0874-4b3f-86ac-5e55dda4506e.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e455a715-d6ae-4bb7-938c-0087e929ede0.json
similarity index 58%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--4cf400f0-0874-4b3f-86ac-5e55dda4506e.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--e455a715-d6ae-4bb7-938c-0087e929ede0.json
index fea66ec..c41f404 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--4cf400f0-0874-4b3f-86ac-5e55dda4506e.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e455a715-d6ae-4bb7-938c-0087e929ede0.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--fdfcdb8e-0eb9-488a-9d29-24993f5dc785",
+ "id": "bundle--21431172-4171-4d23-87c3-58b9ed9edefa",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--4cf400f0-0874-4b3f-86ac-5e55dda4506e",
- "created_by_ref": "identity--03467c90-3216-44c0-bbf5-cb371dcaa3bf",
- "created": "2022-07-02T17:28:36.975409Z",
- "modified": "2022-07-02T17:28:36.975409Z",
+ "id": "attack-pattern--e455a715-d6ae-4bb7-938c-0087e929ede0",
+ "created_by_ref": "identity--7e81d607-c8aa-418a-b1cd-55169f944c2a",
+ "created": "2022-07-02T19:59:12.661537Z",
+ "modified": "2022-07-02T19:59:12.661537Z",
"name": "Create Organizations",
- "description": "TA15",
+ "description": "Influence operations may establish organizations with legitimate or falsified hierarchies, staff, and content to structure operation assets, provide a sense of legitimacy to the operation, or provide institutional backing to operation activities.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--da742be8-239b-48ee-958b-200f0dfc1dbc"
+ "marking-definition--c8c81a89-73f8-4b9e-bac1-314380be9227"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e63da0fd-83f8-443b-9767-eb50759f36c0.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e63da0fd-83f8-443b-9767-eb50759f36c0.json
deleted file mode 100644
index bf81094..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e63da0fd-83f8-443b-9767-eb50759f36c0.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--bf4fd0ff-2158-45a0-8742-87385339442f",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--e63da0fd-83f8-443b-9767-eb50759f36c0",
- "created_by_ref": "identity--2b649a1c-ab37-4021-85ad-274f380b694b",
- "created": "2022-07-02T17:28:36.973073Z",
- "modified": "2022-07-02T17:28:36.973073Z",
- "name": "Create Bot Accounts",
- "description": "TA15",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "establish-social-assets"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0090.003.md",
- "external_id": "T0090.003"
- }
- ],
- "object_marking_refs": [
- "marking-definition--77f3b386-c658-4f4f-ac44-17ccf2766c15"
- ],
- "x_mitre_is_subtechnique": true,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1761fa87-94c7-4913-a5a6-4f12626d74ed.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e64fc026-2d04-4cd0-b056-29f89bb53628.json
similarity index 59%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--1761fa87-94c7-4913-a5a6-4f12626d74ed.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--e64fc026-2d04-4cd0-b056-29f89bb53628.json
index b82113c..fb39b37 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--1761fa87-94c7-4913-a5a6-4f12626d74ed.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e64fc026-2d04-4cd0-b056-29f89bb53628.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--86def1a9-1ba7-4279-9da9-13bcd597ed68",
+ "id": "bundle--c0f6f9b0-4902-4343-aede-378d97e3b908",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--1761fa87-94c7-4913-a5a6-4f12626d74ed",
- "created_by_ref": "identity--62cb671f-52bd-4e92-926f-455e2eb2c87a",
- "created": "2022-07-02T17:28:36.952704Z",
- "modified": "2022-07-02T17:28:36.952704Z",
+ "id": "attack-pattern--e64fc026-2d04-4cd0-b056-29f89bb53628",
+ "created_by_ref": "identity--fae5b631-9c77-492a-8db9-c4f9a8aab31f",
+ "created": "2022-07-02T19:59:12.639248Z",
+ "modified": "2022-07-02T19:59:12.639248Z",
"name": "Respond to Breaking News Event or Active Crisis",
- "description": "TA14",
+ "description": "Media attention on a story or event is heightened during a breaking news event, where unclear facts and incomplete information increase speculation, rumors, and conspiracy theories, which are all vulnerable to manipulation. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--4b80ef0a-adc2-42e9-9908-5770de4b1f1f"
+ "marking-definition--30045507-898e-46b1-86e7-8bcde331f297"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c9b162f1-ae90-4ccb-acb0-c2a4d7c9979d.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e67aac85-903e-4a76-8c8f-ea20eea7fb57.json
similarity index 50%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--c9b162f1-ae90-4ccb-acb0-c2a4d7c9979d.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--e67aac85-903e-4a76-8c8f-ea20eea7fb57.json
index 8cec79b..5e83276 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--c9b162f1-ae90-4ccb-acb0-c2a4d7c9979d.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e67aac85-903e-4a76-8c8f-ea20eea7fb57.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--31347d26-499e-46a7-9a77-9b56442c569f",
+ "id": "bundle--443b5ffd-3c5f-4fba-8a5c-4a81854118cd",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--c9b162f1-ae90-4ccb-acb0-c2a4d7c9979d",
- "created_by_ref": "identity--321d523b-7bd3-494b-a087-bd3b2f8805c9",
- "created": "2022-07-02T17:28:36.967168Z",
- "modified": "2022-07-02T17:28:36.967168Z",
+ "id": "attack-pattern--e67aac85-903e-4a76-8c8f-ea20eea7fb57",
+ "created_by_ref": "identity--5457e7fd-40b6-4a24-afaa-80d07d3ac9f9",
+ "created": "2022-07-02T19:59:12.65342Z",
+ "modified": "2022-07-02T19:59:12.65342Z",
"name": "Develop Memes",
- "description": "TA06",
+ "description": "Memes are one of the most important single artefact types in all of computational propaganda. Memes in this framework denotes the narrow image-based definition. But that naming is no accident, as these items have most of the important properties of Dawkins' original conception as a self-replicating unit of culture. Memes pull together reference and commentary; image and narrative; emotion and message. Memes are a powerful tool and the heart of modern influence campaigns.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c06b773e-9b89-4b0a-b1cd-fe87f640e36e"
+ "marking-definition--24b8de97-2b3b-4187-a947-1742fca39219"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e5d4cc77-8a4c-4121-aafd-f8683a9d322c.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e7adceed-2079-48db-b7d8-9d93ad960f37.json
similarity index 55%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--e5d4cc77-8a4c-4121-aafd-f8683a9d322c.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--e7adceed-2079-48db-b7d8-9d93ad960f37.json
index a88391e..ab28458 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e5d4cc77-8a4c-4121-aafd-f8683a9d322c.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e7adceed-2079-48db-b7d8-9d93ad960f37.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--ffe3c30d-ed34-4b3c-abce-600dc234dd77",
+ "id": "bundle--18c4eb1d-4d49-4ed7-a628-38fff768f6d9",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--e5d4cc77-8a4c-4121-aafd-f8683a9d322c",
- "created_by_ref": "identity--7af33b9b-9421-451e-8892-51eda2ea4f1a",
- "created": "2022-07-02T17:28:36.957871Z",
- "modified": "2022-07-02T17:28:36.957871Z",
+ "id": "attack-pattern--e7adceed-2079-48db-b7d8-9d93ad960f37",
+ "created_by_ref": "identity--a7d1279f-4a10-4236-80b4-6d00ed9dab89",
+ "created": "2022-07-02T19:59:12.644857Z",
+ "modified": "2022-07-02T19:59:12.644857Z",
"name": "Monitor Social Media Analytics",
- "description": "TA13",
+ "description": "An influence operation may use social media analytics to determine which factors will increase the operation content\u2019s exposure to its target audience on social media platforms, including views, interactions, and sentiment relating to topics and content types. The social media platform itself or a third-party tool may collect the metrics. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--28c83306-a1ae-4588-b7d0-96040153d1c1"
+ "marking-definition--ac981015-659c-4aa5-bb45-d8be36bc6121"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7565c59e-0831-42ce-a211-25058d5159bf.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e8310cb2-e346-47a7-8410-7f0dc34f2ac2.json
similarity index 62%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--7565c59e-0831-42ce-a211-25058d5159bf.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--e8310cb2-e346-47a7-8410-7f0dc34f2ac2.json
index 034c926..d8166a9 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--7565c59e-0831-42ce-a211-25058d5159bf.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e8310cb2-e346-47a7-8410-7f0dc34f2ac2.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--55cc64cf-0145-4f76-9fa5-1c0a294e3a16",
+ "id": "bundle--deddeb67-6cbb-40ad-81b3-29f5ed8ac092",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--7565c59e-0831-42ce-a211-25058d5159bf",
- "created_by_ref": "identity--9df81219-bc44-487e-803e-520e94763fd3",
- "created": "2022-07-02T17:28:36.94971Z",
- "modified": "2022-07-02T17:28:36.94971Z",
+ "id": "attack-pattern--e8310cb2-e346-47a7-8410-7f0dc34f2ac2",
+ "created_by_ref": "identity--9f6bee91-8c4f-4947-a08f-c0666b3895e1",
+ "created": "2022-07-02T19:59:12.636268Z",
+ "modified": "2022-07-02T19:59:12.636268Z",
"name": "Organize Events",
- "description": "TA10",
+ "description": "Coordinate and promote real-world events across media platforms, e.g. rallies, protests, gatherings in support of incident narratives.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--c14e2993-17ce-4b69-ac75-a45370951072"
+ "marking-definition--93fb6d9e-0b65-4cfb-9ac3-f213aec8c61f"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e8bb5015-934a-41d1-8bf9-812973ea34ac.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e8bb5015-934a-41d1-8bf9-812973ea34ac.json
new file mode 100644
index 0000000..2d21e7b
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--e8bb5015-934a-41d1-8bf9-812973ea34ac.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--cb7e90ae-b795-4b28-b842-a0ddef8676f8",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--e8bb5015-934a-41d1-8bf9-812973ea34ac",
+ "created_by_ref": "identity--107f3916-4a92-440e-962f-cc9b980f53ff",
+ "created": "2022-07-02T19:59:12.634843Z",
+ "modified": "2022-07-02T19:59:12.634843Z",
+ "name": "Utilize Spamoflauge",
+ "description": "Spamoflauge refers to the practice of disguising spam messages as legitimate. Spam refers to the use of electronic messaging systems to send out unrequested or unwanted messages in bulk. Simple methods of spamoflauge include replacing letters with numbers to fool keyword-based email spam filters, for example, \"you've w0n our jackp0t!\". Spamoflauge may extend to more complex techniques such as modifying the grammar or word choice of the language, casting messages as images which spam detectors cannot automatically read, or encapsulating messages in password protected attachments, such as .pdf or .zip files. Influence operations may use spamoflauge to avoid spam filtering systems and increase the likelihood of the target audience receiving operation messaging. ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "maximize-exposure"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0049.004.md",
+ "external_id": "T0049.004"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--6fb5e584-3f93-4e19-bc4d-ca3edf878743"
+ ],
+ "x_mitre_is_subtechnique": true,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f16b324b-cb5f-496e-8575-f3ff97963e54.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f16b324b-cb5f-496e-8575-f3ff97963e54.json
deleted file mode 100644
index a8fd8a2..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f16b324b-cb5f-496e-8575-f3ff97963e54.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--0cd385b9-28ab-4d8c-83b4-cb9155efe806",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--f16b324b-cb5f-496e-8575-f3ff97963e54",
- "created_by_ref": "identity--66f4fccb-98c6-4a94-87c1-9a3d5d40487d",
- "created": "2022-07-02T17:28:36.948384Z",
- "modified": "2022-07-02T17:28:36.948384Z",
- "name": "Utilize Spamoflauge",
- "description": "TA17",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "maximize-exposure"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0049.004.md",
- "external_id": "T0049.004"
- }
- ],
- "object_marking_refs": [
- "marking-definition--887ec817-05d2-4027-94cb-362a1b1d2abc"
- ],
- "x_mitre_is_subtechnique": true,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f487530f-45bb-4f8a-8c03-ca81ebc5cdb3.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f487530f-45bb-4f8a-8c03-ca81ebc5cdb3.json
new file mode 100644
index 0000000..10ba07a
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f487530f-45bb-4f8a-8c03-ca81ebc5cdb3.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--f2f51498-d810-4ca4-9844-ea35e8b6415e",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--f487530f-45bb-4f8a-8c03-ca81ebc5cdb3",
+ "created_by_ref": "identity--98b12556-4bbc-4ff4-8512-bfc9fac3f1f7",
+ "created": "2022-07-02T19:59:12.622339Z",
+ "modified": "2022-07-02T19:59:12.622339Z",
+ "name": "Create hashtags and search artifacts",
+ "description": "Create one or more hashtags and/or hashtag groups. Many incident-based campaigns will create hashtags to promote their fabricated event. Creating a hashtag for an incident can have two important effects: 1. Create a perception of reality around an event. Certainly only \"real\" events would be discussed in a hashtag. After all, the event has a name!, and 2. Publicize the story more widely through trending lists and search behavior. Asset needed to direct/control/manage \"conversation\" connected to launching new incident/campaign with new hashtag for applicable social media sites). ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "develop-content"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0015.md",
+ "external_id": "T0015"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--959a217b-ef3a-4528-acd9-43028e862862"
+ ],
+ "x_mitre_is_subtechnique": false,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5460ed5f-dec4-4a99-8430-809244e2c236.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f59e1ae5-2275-4568-a5fe-d06d7ba9a2c9.json
similarity index 67%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--5460ed5f-dec4-4a99-8430-809244e2c236.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--f59e1ae5-2275-4568-a5fe-d06d7ba9a2c9.json
index 52ada90..fe800f7 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5460ed5f-dec4-4a99-8430-809244e2c236.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f59e1ae5-2275-4568-a5fe-d06d7ba9a2c9.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--319925dd-a0c7-4634-a76e-d5a416a70aea",
+ "id": "bundle--4cd17c26-22c9-4d15-a577-40a284fe2aa3",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--5460ed5f-dec4-4a99-8430-809244e2c236",
- "created_by_ref": "identity--b566aa09-c002-470b-849c-31d7d1dd586e",
- "created": "2022-07-02T17:28:36.984455Z",
- "modified": "2022-07-02T17:28:36.984455Z",
+ "id": "attack-pattern--f59e1ae5-2275-4568-a5fe-d06d7ba9a2c9",
+ "created_by_ref": "identity--12bd98b9-5066-484f-93f4-1943fc7011a8",
+ "created": "2022-07-02T19:59:12.670758Z",
+ "modified": "2022-07-02T19:59:12.670758Z",
"name": "Create Echo Chambers/Filter Bubbles",
- "description": "TA05",
+ "description": "Create Echo Chambers/Filter Bubbles",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--812fdd9b-e6a7-4b8b-abe7-d14ba40837b0"
+ "marking-definition--54634895-e4d3-48df-b1ff-2eed32d00fa2"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fb5f79c5-0642-4e08-bd45-35b68c5e3a0b.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f63ac640-cfd8-481d-b873-a79ab0f360d8.json
similarity index 53%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--fb5f79c5-0642-4e08-bd45-35b68c5e3a0b.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--f63ac640-cfd8-481d-b873-a79ab0f360d8.json
index 0fc273d..be6722b 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fb5f79c5-0642-4e08-bd45-35b68c5e3a0b.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f63ac640-cfd8-481d-b873-a79ab0f360d8.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--c153a983-b0d8-49fa-86d2-1032ec545856",
+ "id": "bundle--e7b686fc-ad04-4fad-8754-b616bca9e916",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--fb5f79c5-0642-4e08-bd45-35b68c5e3a0b",
- "created_by_ref": "identity--9406f732-24b4-4fc1-93bd-104462cf9ed9",
- "created": "2022-07-02T17:28:36.940141Z",
- "modified": "2022-07-02T17:28:36.940141Z",
- "name": "Amplify Existing Conspiracy Theory Narrative",
- "description": "TA14",
+ "id": "attack-pattern--f63ac640-cfd8-481d-b873-a79ab0f360d8",
+ "created_by_ref": "identity--ab72df52-14e9-4ea8-8116-bbf6822ce4af",
+ "created": "2022-07-02T19:59:12.625897Z",
+ "modified": "2022-07-02T19:59:12.625897Z",
+ "name": "Amplify Existing Conspiracy Theory Narratives",
+ "description": "An influence operation may amplify an existing conspiracy theory narrative that aligns with its incident or campaign goals. By amplifying existing conspiracy theory narratives, operators can leverage the power of the existing communities that support and propagate those theories without needing to expend resources creating new narratives or building momentum and buy in around new narratives. ",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--502808e6-d1bd-4be7-a14e-1c5ee93bdf87"
+ "marking-definition--a3496ec9-3ed2-4102-bf82-3b590abaf718"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5003d9a7-f517-45ca-8e39-0902a9fb3fb4.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f66368b5-d9c7-4742-a16b-2b0fd75e4929.json
similarity index 52%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--5003d9a7-f517-45ca-8e39-0902a9fb3fb4.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--f66368b5-d9c7-4742-a16b-2b0fd75e4929.json
index b197a5c..d765105 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--5003d9a7-f517-45ca-8e39-0902a9fb3fb4.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f66368b5-d9c7-4742-a16b-2b0fd75e4929.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--4458834f-c187-4863-b715-e323e94a68eb",
+ "id": "bundle--cefed23a-8b68-4029-8ea4-0d60b05bbd79",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--5003d9a7-f517-45ca-8e39-0902a9fb3fb4",
- "created_by_ref": "identity--8726021d-b2cd-416f-b042-54b03a268a59",
- "created": "2022-07-02T17:28:36.933986Z",
- "modified": "2022-07-02T17:28:36.933986Z",
+ "id": "attack-pattern--f66368b5-d9c7-4742-a16b-2b0fd75e4929",
+ "created_by_ref": "identity--ab2d0791-5d18-4e63-9eaa-de983188279a",
+ "created": "2022-07-02T19:59:12.619366Z",
+ "modified": "2022-07-02T19:59:12.619366Z",
"name": "Create Inauthentic Social Media Pages and Groups",
- "description": "TA15",
+ "description": "Create key social engineering assets needed to amplify content, manipulate algorithms, fool public and/or specific incident/campaign targets. Computational propaganda depends substantially on false perceptions of credibility and acceptance. By creating fake users and groups with a variety of interests and commitments, attackers can ensure that their messages both come from trusted sources and appear more widely adopted than they actually are.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--d347432d-a268-45ff-9efc-241e2c21ddee"
+ "marking-definition--54c5ef3c-5550-4b5c-8ec4-f231196fbc1c"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f8d9b96f-0edc-419e-b5f0-557f4588bf90.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f8d9b96f-0edc-419e-b5f0-557f4588bf90.json
deleted file mode 100644
index a246515..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f8d9b96f-0edc-419e-b5f0-557f4588bf90.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--5050ae85-cfbb-4b39-bbf1-fe627b2e9c39",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--f8d9b96f-0edc-419e-b5f0-557f4588bf90",
- "created_by_ref": "identity--fba434be-eb6a-44e0-91d1-ccf83689f3a3",
- "created": "2022-07-02T17:28:36.935956Z",
- "modified": "2022-07-02T17:28:36.935956Z",
- "name": "Prepare fundraising campaigns",
- "description": "TA15",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "establish-social-assets"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0014.md",
- "external_id": "T0014"
- }
- ],
- "object_marking_refs": [
- "marking-definition--bad23555-2aa5-40ac-b814-3a5971896b5e"
- ],
- "x_mitre_is_subtechnique": false,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--88a55935-0548-48cc-9062-53a501a2afa6.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f98165a2-f2a6-4ddb-9766-4defcdf0f9cc.json
similarity index 67%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--88a55935-0548-48cc-9062-53a501a2afa6.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--f98165a2-f2a6-4ddb-9766-4defcdf0f9cc.json
index 29cae77..6c0d9b9 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--88a55935-0548-48cc-9062-53a501a2afa6.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--f98165a2-f2a6-4ddb-9766-4defcdf0f9cc.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--8ee9c124-dd3b-488e-90dc-3832331a4eac",
+ "id": "bundle--a8c850da-3420-43a1-889d-a8af1776bb8e",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--88a55935-0548-48cc-9062-53a501a2afa6",
- "created_by_ref": "identity--8636255f-54fd-4bd8-9d7d-883f98d50430",
- "created": "2022-07-02T17:28:36.984141Z",
- "modified": "2022-07-02T17:28:36.984141Z",
+ "id": "attack-pattern--f98165a2-f2a6-4ddb-9766-4defcdf0f9cc",
+ "created_by_ref": "identity--8e27eebf-0b3b-41a9-a331-8a70cb7118ad",
+ "created": "2022-07-02T19:59:12.670443Z",
+ "modified": "2022-07-02T19:59:12.670443Z",
"name": "Use existing Echo Chambers/Filter Bubbles",
- "description": "TA05",
+ "description": "Use existing Echo Chambers/Filter Bubbles",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e2c8333e-3404-4d0b-818a-d82b8bb50110"
+ "marking-definition--4055896b-cab5-4049-852c-81a921f59523"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--28de0362-57a1-4c91-afe7-991a2cdce07e.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fa57c091-0ea0-4961-a1f4-99c34eaab23a.json
similarity index 67%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--28de0362-57a1-4c91-afe7-991a2cdce07e.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--fa57c091-0ea0-4961-a1f4-99c34eaab23a.json
index ecd1e46..113bf2c 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--28de0362-57a1-4c91-afe7-991a2cdce07e.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fa57c091-0ea0-4961-a1f4-99c34eaab23a.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--b0e1aec5-f6ab-4783-9571-abad1b4ab570",
+ "id": "bundle--f01b204d-5639-428b-8fc5-e467b7d906ba",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--28de0362-57a1-4c91-afe7-991a2cdce07e",
- "created_by_ref": "identity--5c2e719b-0c84-42f9-be1c-7a980d3e106f",
- "created": "2022-07-02T17:28:36.983181Z",
- "modified": "2022-07-02T17:28:36.983181Z",
+ "id": "attack-pattern--fa57c091-0ea0-4961-a1f4-99c34eaab23a",
+ "created_by_ref": "identity--24235f90-4929-4a56-bb5b-a7ba99f4db4a",
+ "created": "2022-07-02T19:59:12.669461Z",
+ "modified": "2022-07-02T19:59:12.669461Z",
"name": "Co-opt Influencers",
- "description": "TA16",
+ "description": "Co-opt Influencers",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--8604e7db-c483-4855-a489-4059f3f2f922"
+ "marking-definition--a3dee066-f689-4009-a355-1b11b6f7e543"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ec885090-0bb5-4d21-9f0a-0b62f22d1de0.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fb297eec-3fc8-4599-bc41-60f5b0d71cb5.json
similarity index 58%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--ec885090-0bb5-4d21-9f0a-0b62f22d1de0.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--fb297eec-3fc8-4599-bc41-60f5b0d71cb5.json
index 63b73b4..d6a83e6 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ec885090-0bb5-4d21-9f0a-0b62f22d1de0.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fb297eec-3fc8-4599-bc41-60f5b0d71cb5.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--92182a9f-a48f-426f-9319-42c2ff1b1cbe",
+ "id": "bundle--54398e13-bd80-467a-a0fd-b9e2f6b1fd19",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--ec885090-0bb5-4d21-9f0a-0b62f22d1de0",
- "created_by_ref": "identity--0cf5694f-5cbb-4c36-904c-21fb5072883d",
- "created": "2022-07-02T17:28:36.971411Z",
- "modified": "2022-07-02T17:28:36.971411Z",
- "name": "Leak False Documents",
- "description": "TA06",
+ "id": "attack-pattern--fb297eec-3fc8-4599-bc41-60f5b0d71cb5",
+ "created_by_ref": "identity--5f1ef648-9b7f-4d0a-b544-694a6e49b76c",
+ "created": "2022-07-02T19:59:12.657359Z",
+ "modified": "2022-07-02T19:59:12.657359Z",
+ "name": "Create Inauthentic Documents",
+ "description": "Create inauthentic documents intended to appear as if they are authentic non-public documents. These documents can be \"leaked\" during later stages in the operation.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--873a70a8-1ef8-4e41-8878-948bb2621c7b"
+ "marking-definition--7410f56a-61a6-4eae-9407-f627d5a03388"
],
"x_mitre_is_subtechnique": true,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fbd5b3c6-7f47-4bdc-afeb-206d430abd9b.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fbd5b3c6-7f47-4bdc-afeb-206d430abd9b.json
new file mode 100644
index 0000000..12208ea
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fbd5b3c6-7f47-4bdc-afeb-206d430abd9b.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--58957abf-ef30-47ec-94ea-df05b02fdc23",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--fbd5b3c6-7f47-4bdc-afeb-206d430abd9b",
+ "created_by_ref": "identity--af1eddd2-1434-4121-9c24-16e119341c7d",
+ "created": "2022-07-02T19:59:12.626285Z",
+ "modified": "2022-07-02T19:59:12.626285Z",
+ "name": "Develop Original Conspiracy Theory Narratives",
+ "description": "While this requires more resources than amplifying existing conspiracy theory narratives, an influence operation may develop original conspiracy theory narratives in order to achieve greater control and alignment over the narrative and their campaign goals. Prominent examples include the USSR's Operation INFEKTION disinformation campaign run by the KGB in the 1980s to plant the idea that the United States had invented HIV/AIDS as part of a biological weapons research project at Fort Detrick, Maryland. More recently, Fort Detrick featured prominently in a new conspiracy theory narratives around the origins of the COVID-19 outbreak and pandemic. ",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "develop-narratives"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0022.002.md",
+ "external_id": "T0022.002"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--3d59980b-d56e-41ad-91c9-5abd5ea73dbf"
+ ],
+ "x_mitre_is_subtechnique": true,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b3c2db10-3666-4b0b-a8f2-c97506382de0.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fc6efd97-7618-4ea6-81bb-f83cc4d5f608.json
similarity index 56%
rename from generated_files/DISARM_STIX/attack-pattern/attack-pattern--b3c2db10-3666-4b0b-a8f2-c97506382de0.json
rename to generated_files/DISARM_STIX/attack-pattern/attack-pattern--fc6efd97-7618-4ea6-81bb-f83cc4d5f608.json
index 76d2a87..ec2ab90 100644
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--b3c2db10-3666-4b0b-a8f2-c97506382de0.json
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fc6efd97-7618-4ea6-81bb-f83cc4d5f608.json
@@ -1,16 +1,16 @@
{
"type": "bundle",
- "id": "bundle--13e0c2f9-bacf-449b-8ffd-5a41dbb8606e",
+ "id": "bundle--8a644298-1520-461c-b445-325554c216cc",
"objects": [
{
"type": "attack-pattern",
"spec_version": "2.1",
- "id": "attack-pattern--b3c2db10-3666-4b0b-a8f2-c97506382de0",
- "created_by_ref": "identity--d7e62313-40ee-4705-8357-1d80d0e4ef40",
- "created": "2022-07-02T17:28:36.966847Z",
- "modified": "2022-07-02T17:28:36.966847Z",
+ "id": "attack-pattern--fc6efd97-7618-4ea6-81bb-f83cc4d5f608",
+ "created_by_ref": "identity--7755b139-451b-42b8-b0c2-e5029b316c66",
+ "created": "2022-07-02T19:59:12.65308Z",
+ "modified": "2022-07-02T19:59:12.65308Z",
"name": "Develop Image-based Content",
- "description": "TA06",
+ "description": "Creating and editing false or misleading visual artifacts, often aligned with one or more specific narratives, for use in a disinformation campaign. This may include photographing staged real-life situations, repurposing existing digital images, or using image creation and editing technologies.",
"kill_chain_phases": [
{
"kill_chain_name": "mitre-attack",
@@ -25,7 +25,7 @@
}
],
"object_marking_refs": [
- "marking-definition--00b5c576-1989-4c4f-9435-a38386b945a7"
+ "marking-definition--af98aff6-f6ca-4958-ae32-1977bd1f92af"
],
"x_mitre_is_subtechnique": false,
"x_mitre_platforms": [
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fd1be5d5-bec1-40d8-a5c6-11ff97fe61b9.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fd1be5d5-bec1-40d8-a5c6-11ff97fe61b9.json
deleted file mode 100644
index 9e91902..0000000
--- a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--fd1be5d5-bec1-40d8-a5c6-11ff97fe61b9.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--cfffc185-61b8-433f-80d9-94b61714f1a6",
- "objects": [
- {
- "type": "attack-pattern",
- "spec_version": "2.1",
- "id": "attack-pattern--fd1be5d5-bec1-40d8-a5c6-11ff97fe61b9",
- "created_by_ref": "identity--7bb3f464-261d-4990-b597-36ff860c9b85",
- "created": "2022-07-02T17:28:36.942369Z",
- "modified": "2022-07-02T17:28:36.942369Z",
- "name": "Demand insurmountable proof",
- "description": "TA14",
- "kill_chain_phases": [
- {
- "kill_chain_name": "mitre-attack",
- "phase_name": "develop-narratives"
- }
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0040.md",
- "external_id": "T0040"
- }
- ],
- "object_marking_refs": [
- "marking-definition--db581e86-37fd-4734-beb7-3bb5227cc2c7"
- ],
- "x_mitre_is_subtechnique": false,
- "x_mitre_platforms": [
- "Windows",
- "Linux",
- "Mac"
- ],
- "x_mitre_version": "1.0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ff319f77-3085-4eb5-8925-89103daab804.json b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ff319f77-3085-4eb5-8925-89103daab804.json
new file mode 100644
index 0000000..eced82d
--- /dev/null
+++ b/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ff319f77-3085-4eb5-8925-89103daab804.json
@@ -0,0 +1,39 @@
+{
+ "type": "bundle",
+ "id": "bundle--99a8e2f5-888a-49f4-a897-eff43aacb31b",
+ "objects": [
+ {
+ "type": "attack-pattern",
+ "spec_version": "2.1",
+ "id": "attack-pattern--ff319f77-3085-4eb5-8925-89103daab804",
+ "created_by_ref": "identity--4f80a6b6-2893-46ec-a55c-0f62ea9db2ae",
+ "created": "2022-07-02T19:59:12.628154Z",
+ "modified": "2022-07-02T19:59:12.628154Z",
+ "name": "Bait legitimate influencers",
+ "description": "Credibility in a social media environment is often a function of the size of a user's network. \"Influencers\" are so-called because of their reach, typically understood as: 1) the size of their network (i.e. the number of followers, perhaps weighted by their own influence); and 2) The rate at which their comments are re-circulated (these two metrics are related). Add traditional media players at all levels of credibility and professionalism to this, and the number of potential influencial carriers available for unwitting amplification becomes substantial. By targeting high-influence people and organizations in all types of media with narratives and content engineered to appeal their emotional or ideological drivers, influence campaigns are able to add perceived credibility to their messaging via saturation and adoption by trusted agents such as celebrities, journalists and local leaders.",
+ "kill_chain_phases": [
+ {
+ "kill_chain_name": "mitre-attack",
+ "phase_name": "conduct-pump-priming"
+ }
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0039 .md",
+ "external_id": "T0039"
+ }
+ ],
+ "object_marking_refs": [
+ "marking-definition--8983ccd4-a112-4e43-b633-1e7f4c99303a"
+ ],
+ "x_mitre_is_subtechnique": false,
+ "x_mitre_platforms": [
+ "Windows",
+ "Linux",
+ "Mac"
+ ],
+ "x_mitre_version": "1.0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--00c4c6a7-3ff8-4763-82b5-a4f34bd27178.json b/generated_files/DISARM_STIX/relationship/relationship--00c4c6a7-3ff8-4763-82b5-a4f34bd27178.json
deleted file mode 100644
index 1c11fb5..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--00c4c6a7-3ff8-4763-82b5-a4f34bd27178.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--a0e31101-e052-4ca9-acb6-8dd090d3c415",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--00c4c6a7-3ff8-4763-82b5-a4f34bd27178",
- "created": "2022-07-02T17:28:37.028102Z",
- "modified": "2022-07-02T17:28:37.028102Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--0caea8dd-90d8-4652-97cb-261c62065cf5",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--00faa9af-d98e-4627-b621-9fa0fed776da.json b/generated_files/DISARM_STIX/relationship/relationship--00faa9af-d98e-4627-b621-9fa0fed776da.json
deleted file mode 100644
index 208c5bb..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--00faa9af-d98e-4627-b621-9fa0fed776da.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--b94ebec8-24c9-4269-a986-42584ebb6376",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--00faa9af-d98e-4627-b621-9fa0fed776da",
- "created": "2022-07-02T17:28:37.021636Z",
- "modified": "2022-07-02T17:28:37.021636Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--e977dd1f-45db-4762-a34d-2f06c2bd788b",
- "target_ref": "attack-pattern--89258f59-9d58-42c6-9fbb-ceffd2530a76"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--01347495-5a08-4fcd-9da6-c6de885760a6.json b/generated_files/DISARM_STIX/relationship/relationship--01347495-5a08-4fcd-9da6-c6de885760a6.json
new file mode 100644
index 0000000..d3fff2c
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--01347495-5a08-4fcd-9da6-c6de885760a6.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--b1c55edb-dfb5-4fd2-b947-314e2fef0c95",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--01347495-5a08-4fcd-9da6-c6de885760a6",
+ "created": "2022-07-02T19:59:12.751765Z",
+ "modified": "2022-07-02T19:59:12.751765Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--c6cfb4ba-463c-4bcc-a981-9b8db1114fd7",
+ "target_ref": "attack-pattern--2506b127-497f-4c10-80ee-6ccfebea2fda"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--02704463-c268-49d4-9e02-bc664ce30e1a.json b/generated_files/DISARM_STIX/relationship/relationship--02704463-c268-49d4-9e02-bc664ce30e1a.json
new file mode 100644
index 0000000..7621b97
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--02704463-c268-49d4-9e02-bc664ce30e1a.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--a12fb2c1-9da1-4fd6-b797-0b3bcc3c59f8",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--02704463-c268-49d4-9e02-bc664ce30e1a",
+ "created": "2022-07-02T19:59:12.751839Z",
+ "modified": "2022-07-02T19:59:12.751839Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--65eced1b-ac40-47db-a9ac-9b4fbfdf73ac",
+ "target_ref": "attack-pattern--2506b127-497f-4c10-80ee-6ccfebea2fda"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--05824ce3-632b-48dd-a485-d18ae23702b3.json b/generated_files/DISARM_STIX/relationship/relationship--05824ce3-632b-48dd-a485-d18ae23702b3.json
deleted file mode 100644
index b49d433..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--05824ce3-632b-48dd-a485-d18ae23702b3.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--be9e12ef-266d-40d5-ac74-6df98e31a313",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--05824ce3-632b-48dd-a485-d18ae23702b3",
- "created": "2022-07-02T17:28:37.029207Z",
- "modified": "2022-07-02T17:28:37.029207Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--f8b62817-d507-4c49-a766-00057ef21734",
- "target_ref": "attack-pattern--cbf66a9a-6f05-4508-9ab9-c0f6a2ecdcc6"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--05e0595e-7b3f-4350-a5d6-7fe13d4ebadd.json b/generated_files/DISARM_STIX/relationship/relationship--05e0595e-7b3f-4350-a5d6-7fe13d4ebadd.json
deleted file mode 100644
index 42fe48d..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--05e0595e-7b3f-4350-a5d6-7fe13d4ebadd.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--da5cc2c0-a0c4-4d32-bb69-59a3225f254d",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--05e0595e-7b3f-4350-a5d6-7fe13d4ebadd",
- "created": "2022-07-02T17:28:37.019285Z",
- "modified": "2022-07-02T17:28:37.019285Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--2c7e9fd6-8fe3-448e-99e5-81d4cc6fa9e4",
- "target_ref": "attack-pattern--2f9be5f3-9474-46c1-9bf8-038577c4b6a8"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--06a22e2e-19b2-4d4c-af0a-8498b82a2b48.json b/generated_files/DISARM_STIX/relationship/relationship--06a22e2e-19b2-4d4c-af0a-8498b82a2b48.json
new file mode 100644
index 0000000..91b7cb0
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--06a22e2e-19b2-4d4c-af0a-8498b82a2b48.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--85402262-a487-4afc-95c2-c0916bf04f87",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--06a22e2e-19b2-4d4c-af0a-8498b82a2b48",
+ "created": "2022-07-02T19:59:12.750245Z",
+ "modified": "2022-07-02T19:59:12.750245Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--cf798771-8d4d-4625-ae5a-113244b67c1f",
+ "target_ref": "attack-pattern--1a85979f-226f-4f03-bd53-4bd81807bd7b"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--09ea4a4f-e4e6-4dbc-92f8-45f0e2d4926f.json b/generated_files/DISARM_STIX/relationship/relationship--09ea4a4f-e4e6-4dbc-92f8-45f0e2d4926f.json
new file mode 100644
index 0000000..f2147d4
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--09ea4a4f-e4e6-4dbc-92f8-45f0e2d4926f.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--c19a379b-72b2-4e1f-8379-380a443ed3a7",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--09ea4a4f-e4e6-4dbc-92f8-45f0e2d4926f",
+ "created": "2022-07-02T19:59:12.746544Z",
+ "modified": "2022-07-02T19:59:12.746544Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--b7c84415-9ce4-431c-8419-1c9dc3b4927f",
+ "target_ref": "attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--0cc8f83c-b818-4dd6-92b2-555de6a7680f.json b/generated_files/DISARM_STIX/relationship/relationship--0cc8f83c-b818-4dd6-92b2-555de6a7680f.json
new file mode 100644
index 0000000..fe03c89
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--0cc8f83c-b818-4dd6-92b2-555de6a7680f.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--9c07c5b2-610a-4065-b87f-cc6ab5a1601c",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--0cc8f83c-b818-4dd6-92b2-555de6a7680f",
+ "created": "2022-07-02T19:59:12.747317Z",
+ "modified": "2022-07-02T19:59:12.747317Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--e67aac85-903e-4a76-8c8f-ea20eea7fb57",
+ "target_ref": "attack-pattern--fc6efd97-7618-4ea6-81bb-f83cc4d5f608"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--0cf62ed5-6b1f-498d-a558-91154e4a8508.json b/generated_files/DISARM_STIX/relationship/relationship--0cf62ed5-6b1f-498d-a558-91154e4a8508.json
deleted file mode 100644
index f07bb1c..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--0cf62ed5-6b1f-498d-a558-91154e4a8508.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--3b7761da-f7b0-4ef8-b660-7872343ec48b",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--0cf62ed5-6b1f-498d-a558-91154e4a8508",
- "created": "2022-07-02T17:28:37.025926Z",
- "modified": "2022-07-02T17:28:37.025926Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--0aac6482-f7b2-4cd4-8661-ae692c84a188",
- "target_ref": "attack-pattern--2f2745b8-801a-41b5-b85a-ffba5caf53c4"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--0d5dbc2f-b39c-4447-89f4-75eb0088b0dd.json b/generated_files/DISARM_STIX/relationship/relationship--0d5dbc2f-b39c-4447-89f4-75eb0088b0dd.json
new file mode 100644
index 0000000..c979f57
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--0d5dbc2f-b39c-4447-89f4-75eb0088b0dd.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--0b03aab6-12c7-43cd-894b-ed32b06968a2",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--0d5dbc2f-b39c-4447-89f4-75eb0088b0dd",
+ "created": "2022-07-02T19:59:12.755405Z",
+ "modified": "2022-07-02T19:59:12.755405Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--99be4349-8c12-4f07-aef1-22feb299c85b",
+ "target_ref": "attack-pattern--47939552-d779-467a-b393-92d25b0f9561"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--0e908a0b-c9ae-4d57-9168-ac416c7b336e.json b/generated_files/DISARM_STIX/relationship/relationship--0e908a0b-c9ae-4d57-9168-ac416c7b336e.json
deleted file mode 100644
index d38fb32..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--0e908a0b-c9ae-4d57-9168-ac416c7b336e.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--4e18f3de-0e7b-46db-9cb1-aa0f0b697e0c",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--0e908a0b-c9ae-4d57-9168-ac416c7b336e",
- "created": "2022-07-02T17:28:37.024054Z",
- "modified": "2022-07-02T17:28:37.024054Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--337c05bc-515b-48e0-bf5c-d4cdd5bc7bba",
- "target_ref": "attack-pattern--78596a5d-9d80-4993-81dd-b89edd68cf21"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--0e9460d6-691d-4f98-a046-bf892f82a957.json b/generated_files/DISARM_STIX/relationship/relationship--0e9460d6-691d-4f98-a046-bf892f82a957.json
new file mode 100644
index 0000000..fe8bcc5
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--0e9460d6-691d-4f98-a046-bf892f82a957.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--44ffe1a7-4a78-4da5-b190-42d751578fd1",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--0e9460d6-691d-4f98-a046-bf892f82a957",
+ "created": "2022-07-02T19:59:12.750087Z",
+ "modified": "2022-07-02T19:59:12.750087Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--4dd718fa-805c-44c9-a65b-25ac3414d433",
+ "target_ref": "attack-pattern--6dccbf81-1fb1-47c3-b6c5-4d1d6286be19"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--0ef401cb-fe9b-4469-ba7a-8b09ee682ff1.json b/generated_files/DISARM_STIX/relationship/relationship--0ef401cb-fe9b-4469-ba7a-8b09ee682ff1.json
deleted file mode 100644
index 8e0b5a5..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--0ef401cb-fe9b-4469-ba7a-8b09ee682ff1.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--f386fb4f-f2ec-4bc1-a1bc-41aa80529ed1",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--0ef401cb-fe9b-4469-ba7a-8b09ee682ff1",
- "created": "2022-07-02T17:28:37.021152Z",
- "modified": "2022-07-02T17:28:37.021152Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--76f1c6e2-e4b9-4bc1-ae6a-02fe7345325a",
- "target_ref": "attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--0ef4cdcd-91f5-490c-ab5b-fd936661c803.json b/generated_files/DISARM_STIX/relationship/relationship--0ef4cdcd-91f5-490c-ab5b-fd936661c803.json
deleted file mode 100644
index fd5cfa5..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--0ef4cdcd-91f5-490c-ab5b-fd936661c803.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--aff7360f-ba30-4970-a1f7-000ec1cd11f6",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--0ef4cdcd-91f5-490c-ab5b-fd936661c803",
- "created": "2022-07-02T17:28:37.026136Z",
- "modified": "2022-07-02T17:28:37.026136Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--429a7e7f-98f4-48e9-a5a0-a2a8d7038f4d",
- "target_ref": "attack-pattern--75e85269-638d-4f45-8d25-af320dcb016f"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--0f18dacb-84c1-44a8-9d85-5d8a340de483.json b/generated_files/DISARM_STIX/relationship/relationship--0f18dacb-84c1-44a8-9d85-5d8a340de483.json
new file mode 100644
index 0000000..b8a66dc
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--0f18dacb-84c1-44a8-9d85-5d8a340de483.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--4d947a6d-9b45-4a59-9726-d650bd19580e",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--0f18dacb-84c1-44a8-9d85-5d8a340de483",
+ "created": "2022-07-02T19:59:12.753263Z",
+ "modified": "2022-07-02T19:59:12.753263Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--3ab5afb2-e07d-4086-a010-89f351caf489",
+ "target_ref": "attack-pattern--a18dda94-01e8-413a-98c4-125f28091614"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--0f774314-921a-416f-a82f-2ec655b41a1d.json b/generated_files/DISARM_STIX/relationship/relationship--0f774314-921a-416f-a82f-2ec655b41a1d.json
deleted file mode 100644
index dc0f7cf..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--0f774314-921a-416f-a82f-2ec655b41a1d.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--451d8019-2312-4baa-b62d-4cf564f4163e",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--0f774314-921a-416f-a82f-2ec655b41a1d",
- "created": "2022-07-02T17:28:37.018206Z",
- "modified": "2022-07-02T17:28:37.018206Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--400167bb-0e28-4499-93f5-984882266303",
- "target_ref": "attack-pattern--f8d9b96f-0edc-419e-b5f0-557f4588bf90"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--0fcfe97d-993c-445f-8310-1e6ba5496c71.json b/generated_files/DISARM_STIX/relationship/relationship--0fcfe97d-993c-445f-8310-1e6ba5496c71.json
deleted file mode 100644
index d70fe51..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--0fcfe97d-993c-445f-8310-1e6ba5496c71.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--8d678201-2060-4f34-8ca3-0ce888fe69e7",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--0fcfe97d-993c-445f-8310-1e6ba5496c71",
- "created": "2022-07-02T17:28:37.023848Z",
- "modified": "2022-07-02T17:28:37.023848Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--d444b0b1-16b3-4e73-a94c-dc47a3a1ed5b",
- "target_ref": "attack-pattern--fbff3e68-3833-46aa-8b05-223b16c12608"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--0fe11334-4de9-4904-9841-50038fc28883.json b/generated_files/DISARM_STIX/relationship/relationship--0fe11334-4de9-4904-9841-50038fc28883.json
deleted file mode 100644
index 79a5cb6..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--0fe11334-4de9-4904-9841-50038fc28883.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--4d7d2343-f63f-42e4-80ae-6dbea55caade",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--0fe11334-4de9-4904-9841-50038fc28883",
- "created": "2022-07-02T17:28:37.027591Z",
- "modified": "2022-07-02T17:28:37.027591Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--6e237bc1-7a16-49c4-ad7a-4d3849e26109",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--104158c6-aa79-49db-9155-f765ce5f9566.json b/generated_files/DISARM_STIX/relationship/relationship--104158c6-aa79-49db-9155-f765ce5f9566.json
new file mode 100644
index 0000000..3ed9dc0
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--104158c6-aa79-49db-9155-f765ce5f9566.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--ca550313-e4af-4dd8-8c5e-2d2921800a4b",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--104158c6-aa79-49db-9155-f765ce5f9566",
+ "created": "2022-07-02T19:59:12.755934Z",
+ "modified": "2022-07-02T19:59:12.755934Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--95eff1c5-0c9e-460e-9078-f45922ee4ee3",
+ "target_ref": "attack-pattern--074dec50-3fd1-4427-81cc-6d42c4774a53"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--106ed9cb-d2f6-4032-a0d0-25c26265c034.json b/generated_files/DISARM_STIX/relationship/relationship--106ed9cb-d2f6-4032-a0d0-25c26265c034.json
new file mode 100644
index 0000000..befc5d7
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--106ed9cb-d2f6-4032-a0d0-25c26265c034.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--a0aa6be2-e51b-45f5-828f-14f1b7628b97",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--106ed9cb-d2f6-4032-a0d0-25c26265c034",
+ "created": "2022-07-02T19:59:12.749562Z",
+ "modified": "2022-07-02T19:59:12.749562Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--9e00d7b6-72ac-4e51-85cc-ed39df4de126",
+ "target_ref": "attack-pattern--35550613-e5ec-4d78-8518-1990ade69aec"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--11b196fc-a414-4c23-b5cd-71548f67ad9b.json b/generated_files/DISARM_STIX/relationship/relationship--11b196fc-a414-4c23-b5cd-71548f67ad9b.json
new file mode 100644
index 0000000..2d5a486
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--11b196fc-a414-4c23-b5cd-71548f67ad9b.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--c2718c34-d0d2-4462-9362-d5bf69eb6d04",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--11b196fc-a414-4c23-b5cd-71548f67ad9b",
+ "created": "2022-07-02T19:59:12.745317Z",
+ "modified": "2022-07-02T19:59:12.745317Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--8799f5ac-c50d-4e5f-8117-fb242b7617be",
+ "target_ref": "attack-pattern--e8310cb2-e346-47a7-8410-7f0dc34f2ac2"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--12c405c3-8776-4f79-82da-2127e6d7d0e9.json b/generated_files/DISARM_STIX/relationship/relationship--12c405c3-8776-4f79-82da-2127e6d7d0e9.json
new file mode 100644
index 0000000..cafca6f
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--12c405c3-8776-4f79-82da-2127e6d7d0e9.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--bb735737-f6ea-4f88-bccd-8e242d4853df",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--12c405c3-8776-4f79-82da-2127e6d7d0e9",
+ "created": "2022-07-02T19:59:12.745389Z",
+ "modified": "2022-07-02T19:59:12.745389Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--7f3088ee-6c4b-48d3-894e-2b33db9d6260",
+ "target_ref": "attack-pattern--1df3f525-2142-439a-94c1-a600464e1e6e"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--13c57e50-5291-419f-a4f3-33f21a30ec86.json b/generated_files/DISARM_STIX/relationship/relationship--13c57e50-5291-419f-a4f3-33f21a30ec86.json
deleted file mode 100644
index 275f796..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--13c57e50-5291-419f-a4f3-33f21a30ec86.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--e4e0cbae-6e4c-4390-9139-ed519928e2c5",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--13c57e50-5291-419f-a4f3-33f21a30ec86",
- "created": "2022-07-02T17:28:37.02766Z",
- "modified": "2022-07-02T17:28:37.02766Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--be9355e4-570e-4252-8a1a-8f517f0487b8",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--1478755e-6ed4-429a-9425-96a9860a3e4b.json b/generated_files/DISARM_STIX/relationship/relationship--1478755e-6ed4-429a-9425-96a9860a3e4b.json
deleted file mode 100644
index a20f835..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--1478755e-6ed4-429a-9425-96a9860a3e4b.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--b357872d-86e7-4967-bdd7-29f0b5386245",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--1478755e-6ed4-429a-9425-96a9860a3e4b",
- "created": "2022-07-02T17:28:37.023141Z",
- "modified": "2022-07-02T17:28:37.023141Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--841a7027-21e2-47f0-a8be-cc43d0e85faf",
- "target_ref": "attack-pattern--939d0f04-b080-47cc-ad3a-c971084d37ca"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--155ce50c-07cd-472f-9ccb-a2ca513051fb.json b/generated_files/DISARM_STIX/relationship/relationship--155ce50c-07cd-472f-9ccb-a2ca513051fb.json
new file mode 100644
index 0000000..677a0c4
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--155ce50c-07cd-472f-9ccb-a2ca513051fb.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--b6d90229-c27d-4169-9fdf-70bdfeedec4c",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--155ce50c-07cd-472f-9ccb-a2ca513051fb",
+ "created": "2022-07-02T19:59:12.748105Z",
+ "modified": "2022-07-02T19:59:12.748105Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--72b26317-80d3-4149-9161-708c83549ac1",
+ "target_ref": "attack-pattern--9ae37313-f374-4007-bf44-91d0b85d8e1a"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--16222372-7996-4cfe-8976-f99bf2753333.json b/generated_files/DISARM_STIX/relationship/relationship--16222372-7996-4cfe-8976-f99bf2753333.json
new file mode 100644
index 0000000..705f114
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--16222372-7996-4cfe-8976-f99bf2753333.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--31e5c198-f402-4917-9ad5-70ffabf78aa2",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--16222372-7996-4cfe-8976-f99bf2753333",
+ "created": "2022-07-02T19:59:12.754494Z",
+ "modified": "2022-07-02T19:59:12.754494Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--4c1c82a2-472b-4b47-8c5e-21d2bfee7d2e",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--1691e0dd-97ab-4192-b71e-ce98c96d960b.json b/generated_files/DISARM_STIX/relationship/relationship--1691e0dd-97ab-4192-b71e-ce98c96d960b.json
deleted file mode 100644
index 04d2364..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--1691e0dd-97ab-4192-b71e-ce98c96d960b.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--404e86e2-7b6f-495b-9801-85701d2537fe",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--1691e0dd-97ab-4192-b71e-ce98c96d960b",
- "created": "2022-07-02T17:28:37.019699Z",
- "modified": "2022-07-02T17:28:37.019699Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--a921ea75-6d2f-4c29-a2ab-2710e554af59",
- "target_ref": "attack-pattern--2f9be5f3-9474-46c1-9bf8-038577c4b6a8"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--1787f8ec-dc55-4754-85eb-5a76ca2dbf3f.json b/generated_files/DISARM_STIX/relationship/relationship--1787f8ec-dc55-4754-85eb-5a76ca2dbf3f.json
deleted file mode 100644
index 1459057..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--1787f8ec-dc55-4754-85eb-5a76ca2dbf3f.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--ba292bbb-acfd-4f51-b906-3ff83d7ae5a1",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--1787f8ec-dc55-4754-85eb-5a76ca2dbf3f",
- "created": "2022-07-02T17:28:37.024193Z",
- "modified": "2022-07-02T17:28:37.024193Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--28de0362-57a1-4c91-afe7-991a2cdce07e",
- "target_ref": "attack-pattern--78596a5d-9d80-4993-81dd-b89edd68cf21"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--18e4e92b-8149-4551-8625-383f84122d73.json b/generated_files/DISARM_STIX/relationship/relationship--18e4e92b-8149-4551-8625-383f84122d73.json
deleted file mode 100644
index 6a6397e..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--18e4e92b-8149-4551-8625-383f84122d73.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--b3308bb5-03c4-48cc-a9ce-4a69aa97c179",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--18e4e92b-8149-4551-8625-383f84122d73",
- "created": "2022-07-02T17:28:37.028865Z",
- "modified": "2022-07-02T17:28:37.028865Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--0b7d2ef1-9719-410e-9ae3-10c646709317",
- "target_ref": "attack-pattern--0c3753ba-ec86-4186-97c8-242aa9d53b0f"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--1935ff83-cb47-44d3-85f1-0f66e50727e8.json b/generated_files/DISARM_STIX/relationship/relationship--1935ff83-cb47-44d3-85f1-0f66e50727e8.json
deleted file mode 100644
index ff17ba3..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--1935ff83-cb47-44d3-85f1-0f66e50727e8.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--4298e36c-b447-4b1b-b8bf-c5cebac99def",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--1935ff83-cb47-44d3-85f1-0f66e50727e8",
- "created": "2022-07-02T17:28:37.022413Z",
- "modified": "2022-07-02T17:28:37.022413Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--ec885090-0bb5-4d21-9f0a-0b62f22d1de0",
- "target_ref": "attack-pattern--8f74ba8b-807b-4b71-81fd-d1fa6edcc1a7"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--19f4ef65-4336-4b32-a185-faa0a635228b.json b/generated_files/DISARM_STIX/relationship/relationship--19f4ef65-4336-4b32-a185-faa0a635228b.json
new file mode 100644
index 0000000..277afd3
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--19f4ef65-4336-4b32-a185-faa0a635228b.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--002887e9-5cee-40a3-82a5-d414a8b6777b",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--19f4ef65-4336-4b32-a185-faa0a635228b",
+ "created": "2022-07-02T19:59:12.744625Z",
+ "modified": "2022-07-02T19:59:12.744625Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--9fbaa5a6-9bbd-4819-866b-22d1a11f8592",
+ "target_ref": "attack-pattern--46b33983-93aa-40b2-b70f-cbcf47e346e3"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--1a84fdd2-2ed9-4c75-bce3-8b64187a6f7c.json b/generated_files/DISARM_STIX/relationship/relationship--1a84fdd2-2ed9-4c75-bce3-8b64187a6f7c.json
new file mode 100644
index 0000000..763796c
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--1a84fdd2-2ed9-4c75-bce3-8b64187a6f7c.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--b65b4a5d-9ca6-4aa0-bbe8-cdbd2bdd28f9",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--1a84fdd2-2ed9-4c75-bce3-8b64187a6f7c",
+ "created": "2022-07-02T19:59:12.752061Z",
+ "modified": "2022-07-02T19:59:12.752061Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--0b98e731-1c93-49ef-9f07-0377be20ff34",
+ "target_ref": "attack-pattern--8b1caa97-3fa6-4615-8646-30234d0399ce"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--1aaeea25-2663-4e34-bf5c-4f310a635c41.json b/generated_files/DISARM_STIX/relationship/relationship--1aaeea25-2663-4e34-bf5c-4f310a635c41.json
new file mode 100644
index 0000000..ce937c9
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--1aaeea25-2663-4e34-bf5c-4f310a635c41.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--2867c7d6-dafe-44f1-b16e-168ab4c825c3",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--1aaeea25-2663-4e34-bf5c-4f310a635c41",
+ "created": "2022-07-02T19:59:12.744538Z",
+ "modified": "2022-07-02T19:59:12.744538Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--0388aa19-891a-4849-87c0-ec074291bb94",
+ "target_ref": "attack-pattern--46b33983-93aa-40b2-b70f-cbcf47e346e3"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--1ac8b38b-2bc0-4447-8fe0-9d4233fdb69c.json b/generated_files/DISARM_STIX/relationship/relationship--1ac8b38b-2bc0-4447-8fe0-9d4233fdb69c.json
new file mode 100644
index 0000000..dc588dd
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--1ac8b38b-2bc0-4447-8fe0-9d4233fdb69c.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--40af3bd0-7a22-473c-a791-fd40444ae4b3",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--1ac8b38b-2bc0-4447-8fe0-9d4233fdb69c",
+ "created": "2022-07-02T19:59:12.754874Z",
+ "modified": "2022-07-02T19:59:12.754874Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--aefa40c5-77b1-4716-b1c4-2f45bfa68813",
+ "target_ref": "attack-pattern--3c2e9e26-3af7-44f8-b046-694d9efbcd14"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--1c107402-40b1-4720-b6d6-841f64684a96.json b/generated_files/DISARM_STIX/relationship/relationship--1c107402-40b1-4720-b6d6-841f64684a96.json
new file mode 100644
index 0000000..1aa56cf
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--1c107402-40b1-4720-b6d6-841f64684a96.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--45af1a9c-a814-465e-b582-fcb72fa208a0",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--1c107402-40b1-4720-b6d6-841f64684a96",
+ "created": "2022-07-02T19:59:12.75139Z",
+ "modified": "2022-07-02T19:59:12.75139Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--55a851b9-86a9-4d24-b361-78d22e942057",
+ "target_ref": "attack-pattern--4c396c44-aafa-4651-9478-9db90638238d"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--1c921d26-d04f-474f-9f1f-e07cad2d2de4.json b/generated_files/DISARM_STIX/relationship/relationship--1c921d26-d04f-474f-9f1f-e07cad2d2de4.json
deleted file mode 100644
index 70fae04..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--1c921d26-d04f-474f-9f1f-e07cad2d2de4.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--61294749-fe0f-4327-b4f9-c4fa8f34c389",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--1c921d26-d04f-474f-9f1f-e07cad2d2de4",
- "created": "2022-07-02T17:28:37.018112Z",
- "modified": "2022-07-02T17:28:37.018112Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--5c17929e-b059-4547-8151-769797eba5d5",
- "target_ref": "attack-pattern--aad83719-2b04-4a3e-9664-bf9aa2350e2f"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--1d5e3f56-8626-45e5-ab5f-c99c88723dfa.json b/generated_files/DISARM_STIX/relationship/relationship--1d5e3f56-8626-45e5-ab5f-c99c88723dfa.json
new file mode 100644
index 0000000..cc0675d
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--1d5e3f56-8626-45e5-ab5f-c99c88723dfa.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--eb7be141-63d0-4b5b-a3fa-70ebc4c57ce4",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--1d5e3f56-8626-45e5-ab5f-c99c88723dfa",
+ "created": "2022-07-02T19:59:12.743606Z",
+ "modified": "2022-07-02T19:59:12.743606Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--caaa3a7a-e35b-4f5f-94e3-0e25061dd4de",
+ "target_ref": "attack-pattern--36203197-90da-4681-b394-0bad48a2dea5"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--1fe9b625-6f79-44c2-ac39-70acc63868f5.json b/generated_files/DISARM_STIX/relationship/relationship--1fe9b625-6f79-44c2-ac39-70acc63868f5.json
new file mode 100644
index 0000000..452bbf0
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--1fe9b625-6f79-44c2-ac39-70acc63868f5.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--5d2b666c-7858-4adc-aa28-5a2e565dfc29",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--1fe9b625-6f79-44c2-ac39-70acc63868f5",
+ "created": "2022-07-02T19:59:12.750013Z",
+ "modified": "2022-07-02T19:59:12.750013Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--f59e1ae5-2275-4568-a5fe-d06d7ba9a2c9",
+ "target_ref": "attack-pattern--6dccbf81-1fb1-47c3-b6c5-4d1d6286be19"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--20494c92-f04f-420e-ae0e-68b01103ccfe.json b/generated_files/DISARM_STIX/relationship/relationship--20494c92-f04f-420e-ae0e-68b01103ccfe.json
deleted file mode 100644
index 344a0d3..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--20494c92-f04f-420e-ae0e-68b01103ccfe.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--2f54d4a2-e7fe-4110-a466-93aebfd2427b",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--20494c92-f04f-420e-ae0e-68b01103ccfe",
- "created": "2022-07-02T17:28:37.018935Z",
- "modified": "2022-07-02T17:28:37.018935Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--42bc5436-0436-4120-81f3-ebc41c61a157",
- "target_ref": "attack-pattern--a94b4289-5956-4b89-a3a8-d1ed9b604840"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--20d89476-ccd8-4ec7-ba7f-9871c3226c2a.json b/generated_files/DISARM_STIX/relationship/relationship--20d89476-ccd8-4ec7-ba7f-9871c3226c2a.json
new file mode 100644
index 0000000..188301a
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--20d89476-ccd8-4ec7-ba7f-9871c3226c2a.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--60b5da49-a4e5-43a5-9c6c-6024da344f0d",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--20d89476-ccd8-4ec7-ba7f-9871c3226c2a",
+ "created": "2022-07-02T19:59:12.745603Z",
+ "modified": "2022-07-02T19:59:12.745603Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--15bd2bb3-531e-4a14-8650-613bf8dda25c",
+ "target_ref": "attack-pattern--8e486393-6d94-4855-989e-9a9fa9acdd13"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--2162b88b-8b4c-4967-8572-0b92ac9cf854.json b/generated_files/DISARM_STIX/relationship/relationship--2162b88b-8b4c-4967-8572-0b92ac9cf854.json
deleted file mode 100644
index 726090c..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--2162b88b-8b4c-4967-8572-0b92ac9cf854.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--19d27f69-4b68-47c4-9462-582d21f19c94",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--2162b88b-8b4c-4967-8572-0b92ac9cf854",
- "created": "2022-07-02T17:28:37.021993Z",
- "modified": "2022-07-02T17:28:37.021993Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--06a4372a-4911-4569-9d5a-513bfaf1abc9",
- "target_ref": "attack-pattern--b3c2db10-3666-4b0b-a8f2-c97506382de0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--226d2ea1-be32-4ae8-b477-d10e5fe438b7.json b/generated_files/DISARM_STIX/relationship/relationship--226d2ea1-be32-4ae8-b477-d10e5fe438b7.json
deleted file mode 100644
index 820872b..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--226d2ea1-be32-4ae8-b477-d10e5fe438b7.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--322f67e5-ab71-4118-96d3-7881a767db3c",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--226d2ea1-be32-4ae8-b477-d10e5fe438b7",
- "created": "2022-07-02T17:28:37.023351Z",
- "modified": "2022-07-02T17:28:37.023351Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--edc140d7-fd0f-40f1-b85c-78c1599da3e1",
- "target_ref": "attack-pattern--82e0d266-415c-495b-989e-9c029298646f"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--226e87ae-da03-4471-bc41-c1c353a5ff32.json b/generated_files/DISARM_STIX/relationship/relationship--226e87ae-da03-4471-bc41-c1c353a5ff32.json
new file mode 100644
index 0000000..76c0fce
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--226e87ae-da03-4471-bc41-c1c353a5ff32.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--0029155d-ba33-4ed2-9116-32fd475e0d5d",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--226e87ae-da03-4471-bc41-c1c353a5ff32",
+ "created": "2022-07-02T19:59:12.745532Z",
+ "modified": "2022-07-02T19:59:12.745532Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--a87a01a1-ae12-4859-8ad3-faeb0dd458af",
+ "target_ref": "attack-pattern--8e486393-6d94-4855-989e-9a9fa9acdd13"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--22b6955b-a25d-4a1d-97f8-49273eaa1854.json b/generated_files/DISARM_STIX/relationship/relationship--22b6955b-a25d-4a1d-97f8-49273eaa1854.json
deleted file mode 100644
index 78e455a..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--22b6955b-a25d-4a1d-97f8-49273eaa1854.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--6d4874d9-4352-47e5-9098-c5fd546be574",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--22b6955b-a25d-4a1d-97f8-49273eaa1854",
- "created": "2022-07-02T17:28:37.023282Z",
- "modified": "2022-07-02T17:28:37.023282Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--30d1076a-9f74-4aba-a61a-20339888ef0f",
- "target_ref": "attack-pattern--82e0d266-415c-495b-989e-9c029298646f"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--22c78274-59c8-4ae9-9d02-dc1b104b413e.json b/generated_files/DISARM_STIX/relationship/relationship--22c78274-59c8-4ae9-9d02-dc1b104b413e.json
new file mode 100644
index 0000000..f2ab866
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--22c78274-59c8-4ae9-9d02-dc1b104b413e.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--328598d3-c116-4dd4-b498-1fee28931b4f",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--22c78274-59c8-4ae9-9d02-dc1b104b413e",
+ "created": "2022-07-02T19:59:12.74619Z",
+ "modified": "2022-07-02T19:59:12.74619Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--10d6f181-cf76-42b1-a021-37949a0574bc",
+ "target_ref": "attack-pattern--2b2b06d9-26d3-4e69-93b3-5a3f37363b5f"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--23792467-2a96-44f7-8fb3-0bc5ba8572c7.json b/generated_files/DISARM_STIX/relationship/relationship--23792467-2a96-44f7-8fb3-0bc5ba8572c7.json
deleted file mode 100644
index 976c736..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--23792467-2a96-44f7-8fb3-0bc5ba8572c7.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--935babe8-749e-44d6-9f6d-c96e27a59d30",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--23792467-2a96-44f7-8fb3-0bc5ba8572c7",
- "created": "2022-07-02T17:28:37.023566Z",
- "modified": "2022-07-02T17:28:37.023566Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--f4a97cf7-af47-4138-8fd4-b45f63b73c9a",
- "target_ref": "attack-pattern--a6c98a38-b972-4c1b-aaba-27bf7be9afe8"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--254bde47-12c5-4d70-9c43-7b6ca76f7c1c.json b/generated_files/DISARM_STIX/relationship/relationship--254bde47-12c5-4d70-9c43-7b6ca76f7c1c.json
new file mode 100644
index 0000000..cac14a8
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--254bde47-12c5-4d70-9c43-7b6ca76f7c1c.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--40d9f638-5596-4522-aa71-b1cd6abb2623",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--254bde47-12c5-4d70-9c43-7b6ca76f7c1c",
+ "created": "2022-07-02T19:59:12.755656Z",
+ "modified": "2022-07-02T19:59:12.755656Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--a029c72f-ec8a-4c9e-a5b6-25cd78f37cec",
+ "target_ref": "attack-pattern--47939552-d779-467a-b393-92d25b0f9561"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--25b36eee-061c-47b9-9007-fe9d47bf7d7f.json b/generated_files/DISARM_STIX/relationship/relationship--25b36eee-061c-47b9-9007-fe9d47bf7d7f.json
deleted file mode 100644
index 460ed5a..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--25b36eee-061c-47b9-9007-fe9d47bf7d7f.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--a2f85657-b413-477f-ab5a-8f9fd9c4e7fd",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--25b36eee-061c-47b9-9007-fe9d47bf7d7f",
- "created": "2022-07-02T17:28:37.028451Z",
- "modified": "2022-07-02T17:28:37.028451Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--6edfcca7-7816-4f40-b22b-88567ca6a84e",
- "target_ref": "attack-pattern--c236acce-da3a-44b6-ab3a-24268c897c0e"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--25e2aabb-7078-4c06-9c2b-ee197041ca11.json b/generated_files/DISARM_STIX/relationship/relationship--25e2aabb-7078-4c06-9c2b-ee197041ca11.json
new file mode 100644
index 0000000..7a186b3
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--25e2aabb-7078-4c06-9c2b-ee197041ca11.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--e9efec51-ef7a-4516-8540-783d3fe16672",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--25e2aabb-7078-4c06-9c2b-ee197041ca11",
+ "created": "2022-07-02T19:59:12.747599Z",
+ "modified": "2022-07-02T19:59:12.747599Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--231b3ff6-8ecb-4cd8-b9eb-ca7740298c61",
+ "target_ref": "attack-pattern--acdb4254-8f84-4ae5-b26a-b4e19f29b6f0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--275aaa0b-b2bd-4ebf-bc68-9d46090ccfe8.json b/generated_files/DISARM_STIX/relationship/relationship--275aaa0b-b2bd-4ebf-bc68-9d46090ccfe8.json
deleted file mode 100644
index a08bc91..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--275aaa0b-b2bd-4ebf-bc68-9d46090ccfe8.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--e1fc3d43-3675-44b3-b8df-879f2e94da92",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--275aaa0b-b2bd-4ebf-bc68-9d46090ccfe8",
- "created": "2022-07-02T17:28:37.027961Z",
- "modified": "2022-07-02T17:28:37.027961Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--758bf258-2fad-4905-b920-aa3a1ae3fe0e",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--2771be52-3e6d-4098-9980-9c3678ca29d0.json b/generated_files/DISARM_STIX/relationship/relationship--2771be52-3e6d-4098-9980-9c3678ca29d0.json
deleted file mode 100644
index d2b0493..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--2771be52-3e6d-4098-9980-9c3678ca29d0.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--eb1fe1e3-2c9e-43db-80e2-daf4f677d2f1",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--2771be52-3e6d-4098-9980-9c3678ca29d0",
- "created": "2022-07-02T17:28:37.023917Z",
- "modified": "2022-07-02T17:28:37.023917Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--84a417d1-ee53-43cc-ae7b-440a3e1ba555",
- "target_ref": "attack-pattern--41bdae21-3938-47e4-81e9-a4ffa5cffb61"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--293dce24-1455-46a3-ab98-935beb321e2e.json b/generated_files/DISARM_STIX/relationship/relationship--293dce24-1455-46a3-ab98-935beb321e2e.json
new file mode 100644
index 0000000..3293fe5
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--293dce24-1455-46a3-ab98-935beb321e2e.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--6ea52343-6f00-45d7-94b5-10b034843f11",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--293dce24-1455-46a3-ab98-935beb321e2e",
+ "created": "2022-07-02T19:59:12.748811Z",
+ "modified": "2022-07-02T19:59:12.748811Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--ad3872bc-e727-44fb-9f7b-6afc4a54958c",
+ "target_ref": "attack-pattern--a5d16185-7fbd-41e8-b549-f8534a570ca9"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--29657691-3e45-4708-8f26-4c9f33795bd3.json b/generated_files/DISARM_STIX/relationship/relationship--29657691-3e45-4708-8f26-4c9f33795bd3.json
deleted file mode 100644
index 8c32b32..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--29657691-3e45-4708-8f26-4c9f33795bd3.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--5287c65a-dc7d-4c74-b798-bf5b6e6a7d4d",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--29657691-3e45-4708-8f26-4c9f33795bd3",
- "created": "2022-07-02T17:28:37.025305Z",
- "modified": "2022-07-02T17:28:37.025305Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--a3f80665-0ad7-4321-bcea-dfd1f45e8e4c",
- "target_ref": "attack-pattern--bceb35c5-c32f-48fd-b02d-69c1170a0565"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--298e9ba1-9e37-47a8-800c-d36b4d2e706b.json b/generated_files/DISARM_STIX/relationship/relationship--298e9ba1-9e37-47a8-800c-d36b4d2e706b.json
new file mode 100644
index 0000000..8fad209
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--298e9ba1-9e37-47a8-800c-d36b4d2e706b.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--da32a416-b5c8-49fd-a86e-84414cf42399",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--298e9ba1-9e37-47a8-800c-d36b4d2e706b",
+ "created": "2022-07-02T19:59:12.744079Z",
+ "modified": "2022-07-02T19:59:12.744079Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--2400f6a0-b97e-4640-877d-946f68712265",
+ "target_ref": "attack-pattern--6fc3a1a6-7989-4d46-8dc5-25ec1be29106"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--2a3c34c2-09f8-4867-ad8f-900b3dc56ba3.json b/generated_files/DISARM_STIX/relationship/relationship--2a3c34c2-09f8-4867-ad8f-900b3dc56ba3.json
deleted file mode 100644
index cea8245..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--2a3c34c2-09f8-4867-ad8f-900b3dc56ba3.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--d3dd0068-53b2-4aee-9b4c-49d4119d5876",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--2a3c34c2-09f8-4867-ad8f-900b3dc56ba3",
- "created": "2022-07-02T17:28:37.020325Z",
- "modified": "2022-07-02T17:28:37.020325Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--11300333-274b-4c70-84a7-c0d5ba379d34",
- "target_ref": "attack-pattern--1b7f7c35-42b5-4fd3-828d-aff89f941850"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--2ac69e4e-a745-42c1-95f8-314e415bfa74.json b/generated_files/DISARM_STIX/relationship/relationship--2ac69e4e-a745-42c1-95f8-314e415bfa74.json
new file mode 100644
index 0000000..bf9c333
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--2ac69e4e-a745-42c1-95f8-314e415bfa74.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--b58a731d-c29a-4bd1-b127-78f63756132e",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--2ac69e4e-a745-42c1-95f8-314e415bfa74",
+ "created": "2022-07-02T19:59:12.744258Z",
+ "modified": "2022-07-02T19:59:12.744258Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--a0a40ba8-5a7f-46a5-8bcc-8ea5f9bdd832",
+ "target_ref": "attack-pattern--a1035e5a-489e-48e5-9a08-4c02118440dc"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--2b71df13-0f6a-4143-b392-a61970dea0cd.json b/generated_files/DISARM_STIX/relationship/relationship--2b71df13-0f6a-4143-b392-a61970dea0cd.json
deleted file mode 100644
index bcf4fae..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--2b71df13-0f6a-4143-b392-a61970dea0cd.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--ccda7d83-7720-47a0-9865-cdfbdbad0e44",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--2b71df13-0f6a-4143-b392-a61970dea0cd",
- "created": "2022-07-02T17:28:37.021498Z",
- "modified": "2022-07-02T17:28:37.021498Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--4b2a1b42-547b-459a-97b9-7fb7915359dc",
- "target_ref": "attack-pattern--de5a467e-4326-4909-9c2d-d123830edca6"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--2b984590-9666-4db0-9c72-993abb5ba2c8.json b/generated_files/DISARM_STIX/relationship/relationship--2b984590-9666-4db0-9c72-993abb5ba2c8.json
new file mode 100644
index 0000000..04a5d6f
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--2b984590-9666-4db0-9c72-993abb5ba2c8.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--3e9efdd5-8f5d-4752-a259-fae69a5f0484",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--2b984590-9666-4db0-9c72-993abb5ba2c8",
+ "created": "2022-07-02T19:59:12.747388Z",
+ "modified": "2022-07-02T19:59:12.747388Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--bde3b6dd-3bfd-42cc-9f6f-b3750dd4b94c",
+ "target_ref": "attack-pattern--fc6efd97-7618-4ea6-81bb-f83cc4d5f608"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--2d6f0a0e-a7ed-445f-a0e9-bc535bf5d059.json b/generated_files/DISARM_STIX/relationship/relationship--2d6f0a0e-a7ed-445f-a0e9-bc535bf5d059.json
new file mode 100644
index 0000000..4c73057
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--2d6f0a0e-a7ed-445f-a0e9-bc535bf5d059.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--378a7727-1fda-4c03-9950-e8cd37c2d934",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--2d6f0a0e-a7ed-445f-a0e9-bc535bf5d059",
+ "created": "2022-07-02T19:59:12.749188Z",
+ "modified": "2022-07-02T19:59:12.749188Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--8571126c-cb8e-4ef5-945a-83f7af3d599d",
+ "target_ref": "attack-pattern--dc5fe86d-bf2c-4e17-8d7b-9e3cfa6a0683"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--2e4eda94-7153-4c31-bee3-ccfeb2912cb9.json b/generated_files/DISARM_STIX/relationship/relationship--2e4eda94-7153-4c31-bee3-ccfeb2912cb9.json
new file mode 100644
index 0000000..bd094d0
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--2e4eda94-7153-4c31-bee3-ccfeb2912cb9.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--a2db48f3-4536-4ad1-bcfa-c3e393452c7f",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--2e4eda94-7153-4c31-bee3-ccfeb2912cb9",
+ "created": "2022-07-02T19:59:12.749636Z",
+ "modified": "2022-07-02T19:59:12.749636Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--35c84f14-34e0-479a-b6b4-043750313fc4",
+ "target_ref": "attack-pattern--35550613-e5ec-4d78-8518-1990ade69aec"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--2ed42747-06bc-4d7f-8a1a-7b3f274b32bb.json b/generated_files/DISARM_STIX/relationship/relationship--2ed42747-06bc-4d7f-8a1a-7b3f274b32bb.json
new file mode 100644
index 0000000..cfaabb9
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--2ed42747-06bc-4d7f-8a1a-7b3f274b32bb.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--8bbd1538-e1f2-409b-ac79-02654357d760",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--2ed42747-06bc-4d7f-8a1a-7b3f274b32bb",
+ "created": "2022-07-02T19:59:12.749789Z",
+ "modified": "2022-07-02T19:59:12.749789Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--4fe2d898-b1ec-4de1-bbd0-c42de0e2bda7",
+ "target_ref": "attack-pattern--91a26229-8c2f-46da-b4fb-5dc291ca84ad"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--3022930d-4c18-4ce8-93e5-f080193fca2d.json b/generated_files/DISARM_STIX/relationship/relationship--3022930d-4c18-4ce8-93e5-f080193fca2d.json
deleted file mode 100644
index 43170b1..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--3022930d-4c18-4ce8-93e5-f080193fca2d.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--1ea39807-8445-43ba-b1cc-77e018aaf2ba",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--3022930d-4c18-4ce8-93e5-f080193fca2d",
- "created": "2022-07-02T17:28:37.026896Z",
- "modified": "2022-07-02T17:28:37.026896Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--5d997782-dd27-4c59-a2e2-ba5220dc555e",
- "target_ref": "attack-pattern--27bd786c-eb5e-4e88-9786-b4cea8789542"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--32362f7f-3011-4f8a-beab-7683dd30e063.json b/generated_files/DISARM_STIX/relationship/relationship--32362f7f-3011-4f8a-beab-7683dd30e063.json
new file mode 100644
index 0000000..7ec9098
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--32362f7f-3011-4f8a-beab-7683dd30e063.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--ca4e7a45-36e4-47b6-854b-ca13f9df3e9a",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--32362f7f-3011-4f8a-beab-7683dd30e063",
+ "created": "2022-07-02T19:59:12.74753Z",
+ "modified": "2022-07-02T19:59:12.74753Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--84a6b4f6-67e3-41e8-b99c-96bd5a4741da",
+ "target_ref": "attack-pattern--fc6efd97-7618-4ea6-81bb-f83cc4d5f608"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--336e6292-1658-400d-ab79-4a94a7d98df4.json b/generated_files/DISARM_STIX/relationship/relationship--336e6292-1658-400d-ab79-4a94a7d98df4.json
new file mode 100644
index 0000000..579e3a3
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--336e6292-1658-400d-ab79-4a94a7d98df4.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--bfc76a8b-30b6-4bb2-aefe-9a93106a697c",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--336e6292-1658-400d-ab79-4a94a7d98df4",
+ "created": "2022-07-02T19:59:12.748406Z",
+ "modified": "2022-07-02T19:59:12.748406Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--437280b4-4445-456f-ab6c-2ef6d9913c4d",
+ "target_ref": "attack-pattern--aa3dd7f6-b16f-4ee4-850a-91394b33622a"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--33a1cbe6-4998-4ab1-81bc-2eb2af015d56.json b/generated_files/DISARM_STIX/relationship/relationship--33a1cbe6-4998-4ab1-81bc-2eb2af015d56.json
deleted file mode 100644
index 63794fa..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--33a1cbe6-4998-4ab1-81bc-2eb2af015d56.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--a6ebeabb-d9ac-46c4-9806-d614c8dce8b3",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--33a1cbe6-4998-4ab1-81bc-2eb2af015d56",
- "created": "2022-07-02T17:28:37.02143Z",
- "modified": "2022-07-02T17:28:37.02143Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--c79c0902-20ea-4efb-b6b5-0659f19c035b",
- "target_ref": "attack-pattern--de5a467e-4326-4909-9c2d-d123830edca6"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--33dc61a0-f25d-4674-8c1d-fefe91fc827a.json b/generated_files/DISARM_STIX/relationship/relationship--33dc61a0-f25d-4674-8c1d-fefe91fc827a.json
new file mode 100644
index 0000000..2cc07f1
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--33dc61a0-f25d-4674-8c1d-fefe91fc827a.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--f01086f6-ddd2-4341-955b-59cd248486ef",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--33dc61a0-f25d-4674-8c1d-fefe91fc827a",
+ "created": "2022-07-02T19:59:12.744342Z",
+ "modified": "2022-07-02T19:59:12.744342Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--0678242b-030c-4ff5-8f9f-73a97253c8dc",
+ "target_ref": "attack-pattern--46b33983-93aa-40b2-b70f-cbcf47e346e3"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--33fcfcb5-4b28-4cde-974b-e57832aac89b.json b/generated_files/DISARM_STIX/relationship/relationship--33fcfcb5-4b28-4cde-974b-e57832aac89b.json
new file mode 100644
index 0000000..a39974e
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--33fcfcb5-4b28-4cde-974b-e57832aac89b.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--1e6c0cea-3973-4065-9300-f04f8e2fc90b",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--33fcfcb5-4b28-4cde-974b-e57832aac89b",
+ "created": "2022-07-02T19:59:12.754261Z",
+ "modified": "2022-07-02T19:59:12.754261Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--41b86953-289e-4960-87a5-45549ce47a5e",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--35aea144-f738-4426-8d92-90bf082cea6a.json b/generated_files/DISARM_STIX/relationship/relationship--35aea144-f738-4426-8d92-90bf082cea6a.json
new file mode 100644
index 0000000..84a9011
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--35aea144-f738-4426-8d92-90bf082cea6a.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--e22505d0-d01c-4331-85be-4defc280a92c",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--35aea144-f738-4426-8d92-90bf082cea6a",
+ "created": "2022-07-02T19:59:12.755851Z",
+ "modified": "2022-07-02T19:59:12.755851Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--35486a04-35f6-4737-a554-7465e4d842ff",
+ "target_ref": "attack-pattern--074dec50-3fd1-4427-81cc-6d42c4774a53"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--35cfba86-d2b7-4f49-9e5e-0a9ca38cbbca.json b/generated_files/DISARM_STIX/relationship/relationship--35cfba86-d2b7-4f49-9e5e-0a9ca38cbbca.json
deleted file mode 100644
index 9dc0126..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--35cfba86-d2b7-4f49-9e5e-0a9ca38cbbca.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--669fd3b2-c75b-416a-8a64-8978717cfaf9",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--35cfba86-d2b7-4f49-9e5e-0a9ca38cbbca",
- "created": "2022-07-02T17:28:37.022626Z",
- "modified": "2022-07-02T17:28:37.022626Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--1d4bebe8-8bab-4066-91ad-45a3fef5161f",
- "target_ref": "attack-pattern--dc48b236-a1f8-4631-9645-bf76dd558c29"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--35d17037-15b8-489d-8b4f-28147301535a.json b/generated_files/DISARM_STIX/relationship/relationship--35d17037-15b8-489d-8b4f-28147301535a.json
new file mode 100644
index 0000000..6fd4e8d
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--35d17037-15b8-489d-8b4f-28147301535a.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--79878c81-2d36-4d2f-a2e9-aca7b0193f0f",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--35d17037-15b8-489d-8b4f-28147301535a",
+ "created": "2022-07-02T19:59:12.753838Z",
+ "modified": "2022-07-02T19:59:12.753838Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--3ce95024-49f8-4fa3-b333-8819ef562fa8",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--36496091-f20c-442a-a539-380b942b1d48.json b/generated_files/DISARM_STIX/relationship/relationship--36496091-f20c-442a-a539-380b942b1d48.json
new file mode 100644
index 0000000..ea7a099
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--36496091-f20c-442a-a539-380b942b1d48.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--121da4f0-d4ba-40a9-abeb-c21cd0062c80",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--36496091-f20c-442a-a539-380b942b1d48",
+ "created": "2022-07-02T19:59:12.749411Z",
+ "modified": "2022-07-02T19:59:12.749411Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--6eb226f3-9e7d-4404-ad97-44fdf562de9b",
+ "target_ref": "attack-pattern--2707372c-26a1-4c1f-8875-65a2433cda70"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--367da26e-d35a-4aa2-86d2-fe87b72b724d.json b/generated_files/DISARM_STIX/relationship/relationship--367da26e-d35a-4aa2-86d2-fe87b72b724d.json
new file mode 100644
index 0000000..6004e38
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--367da26e-d35a-4aa2-86d2-fe87b72b724d.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--f7917900-a17c-421c-9c91-0bffa986d336",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--367da26e-d35a-4aa2-86d2-fe87b72b724d",
+ "created": "2022-07-02T19:59:12.75017Z",
+ "modified": "2022-07-02T19:59:12.75017Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--14565357-ef35-4f2c-b54b-e1010ed772ab",
+ "target_ref": "attack-pattern--1a85979f-226f-4f03-bd53-4bd81807bd7b"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--379bcc56-db1d-4620-ada7-ce6d72e98935.json b/generated_files/DISARM_STIX/relationship/relationship--379bcc56-db1d-4620-ada7-ce6d72e98935.json
deleted file mode 100644
index 84b7327..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--379bcc56-db1d-4620-ada7-ce6d72e98935.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--b5a0acd9-1d79-4668-b382-a6d26149e799",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--379bcc56-db1d-4620-ada7-ce6d72e98935",
- "created": "2022-07-02T17:28:37.02067Z",
- "modified": "2022-07-02T17:28:37.02067Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--8f41068e-fa56-4853-b6ae-2806d49f7027",
- "target_ref": "attack-pattern--ccde7e48-1f25-46dd-a38f-39758274a024"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--380fd7f3-7dc9-44da-b442-a0e08fa0dd70.json b/generated_files/DISARM_STIX/relationship/relationship--380fd7f3-7dc9-44da-b442-a0e08fa0dd70.json
deleted file mode 100644
index ec1dbd6..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--380fd7f3-7dc9-44da-b442-a0e08fa0dd70.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--620e4900-faf1-444d-b8cf-990695ef168f",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--380fd7f3-7dc9-44da-b442-a0e08fa0dd70",
- "created": "2022-07-02T17:28:37.029069Z",
- "modified": "2022-07-02T17:28:37.029069Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--d7644818-db53-4599-aacb-8d8957496406",
- "target_ref": "attack-pattern--0c3753ba-ec86-4186-97c8-242aa9d53b0f"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--3ad4e92b-15f5-4d0b-90d3-f19775d8270c.json b/generated_files/DISARM_STIX/relationship/relationship--3ad4e92b-15f5-4d0b-90d3-f19775d8270c.json
new file mode 100644
index 0000000..88a5ac5
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--3ad4e92b-15f5-4d0b-90d3-f19775d8270c.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--c04349c8-0310-4f64-aa5a-3aad28ceb749",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--3ad4e92b-15f5-4d0b-90d3-f19775d8270c",
+ "created": "2022-07-02T19:59:12.749713Z",
+ "modified": "2022-07-02T19:59:12.749713Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--25990799-9c4f-4941-aa2c-5deab1946ef1",
+ "target_ref": "attack-pattern--91a26229-8c2f-46da-b4fb-5dc291ca84ad"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--3b351e90-b747-4e96-a538-8e2ebb24331c.json b/generated_files/DISARM_STIX/relationship/relationship--3b351e90-b747-4e96-a538-8e2ebb24331c.json
deleted file mode 100644
index bbe6b8b..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--3b351e90-b747-4e96-a538-8e2ebb24331c.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--60f1c3e8-1ad4-4b09-98b7-f75a803bdd1c",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--3b351e90-b747-4e96-a538-8e2ebb24331c",
- "created": "2022-07-02T17:28:37.020048Z",
- "modified": "2022-07-02T17:28:37.020048Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--da6adc03-a37d-45bf-973c-1297375f3f94",
- "target_ref": "attack-pattern--c2651250-61d5-4cfa-92f2-4745198e0c29"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--3ceb2e4e-c591-49b6-b51f-8e902a3cd0ec.json b/generated_files/DISARM_STIX/relationship/relationship--3ceb2e4e-c591-49b6-b51f-8e902a3cd0ec.json
deleted file mode 100644
index 5c059a2..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--3ceb2e4e-c591-49b6-b51f-8e902a3cd0ec.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--a7dfc83a-7865-418f-abe6-ae63881793a3",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--3ceb2e4e-c591-49b6-b51f-8e902a3cd0ec",
- "created": "2022-07-02T17:28:37.018587Z",
- "modified": "2022-07-02T17:28:37.018587Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--fb5f79c5-0642-4e08-bd45-35b68c5e3a0b",
- "target_ref": "attack-pattern--8f344f67-cc73-4826-9edf-9d9a202f1127"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--3e20f39b-85cf-44f0-9f36-25ecefd597b7.json b/generated_files/DISARM_STIX/relationship/relationship--3e20f39b-85cf-44f0-9f36-25ecefd597b7.json
new file mode 100644
index 0000000..dde6593
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--3e20f39b-85cf-44f0-9f36-25ecefd597b7.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--873679a9-460d-4bad-a0de-5cc5ea8c9783",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--3e20f39b-85cf-44f0-9f36-25ecefd597b7",
+ "created": "2022-07-02T19:59:12.743526Z",
+ "modified": "2022-07-02T19:59:12.743526Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--15ee8dc7-f009-425f-afa3-294ba94b64e2",
+ "target_ref": "attack-pattern--04f0b6bb-47f6-430e-ae9d-0a4188eb9388"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--3ea8b518-cf7a-4018-96ae-377d36b67728.json b/generated_files/DISARM_STIX/relationship/relationship--3ea8b518-cf7a-4018-96ae-377d36b67728.json
new file mode 100644
index 0000000..6b45da3
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--3ea8b518-cf7a-4018-96ae-377d36b67728.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--dbab6a94-2c74-4be6-aaca-68f04d08d783",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--3ea8b518-cf7a-4018-96ae-377d36b67728",
+ "created": "2022-07-02T19:59:12.752953Z",
+ "modified": "2022-07-02T19:59:12.752953Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--7c5fcef9-4dac-4231-8065-97b5af4a187c",
+ "target_ref": "attack-pattern--a9ec183d-c4dc-4c17-8571-f6e9dbdc643f"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--3ea8dc34-086c-4a93-90b9-e7ccfac18e54.json b/generated_files/DISARM_STIX/relationship/relationship--3ea8dc34-086c-4a93-90b9-e7ccfac18e54.json
deleted file mode 100644
index 2c0eae2..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--3ea8dc34-086c-4a93-90b9-e7ccfac18e54.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--c6a75041-e622-4882-8883-644584f067db",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--3ea8dc34-086c-4a93-90b9-e7ccfac18e54",
- "created": "2022-07-02T17:28:37.020877Z",
- "modified": "2022-07-02T17:28:37.020877Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--59223888-b348-45cf-a4f7-577ba5778641",
- "target_ref": "attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--3ec45e24-5fa0-4320-8bf4-4f520ad3a054.json b/generated_files/DISARM_STIX/relationship/relationship--3ec45e24-5fa0-4320-8bf4-4f520ad3a054.json
deleted file mode 100644
index 6119ec6..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--3ec45e24-5fa0-4320-8bf4-4f520ad3a054.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--1388c06d-3817-44f3-873d-bd4c66a4043c",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--3ec45e24-5fa0-4320-8bf4-4f520ad3a054",
- "created": "2022-07-02T17:28:37.018517Z",
- "modified": "2022-07-02T17:28:37.018517Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--a632a961-4906-4e38-9e9d-fe2f0d523776",
- "target_ref": "attack-pattern--63ecf892-add4-4423-a27f-e49e63406771"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--3edb86b2-8f62-41c9-b82a-c9142a98ff08.json b/generated_files/DISARM_STIX/relationship/relationship--3edb86b2-8f62-41c9-b82a-c9142a98ff08.json
new file mode 100644
index 0000000..ef6bf54
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--3edb86b2-8f62-41c9-b82a-c9142a98ff08.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--e30aee2f-cafa-4c8e-9a8a-822ada60846c",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--3edb86b2-8f62-41c9-b82a-c9142a98ff08",
+ "created": "2022-07-02T19:59:12.743848Z",
+ "modified": "2022-07-02T19:59:12.743848Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--f63ac640-cfd8-481d-b873-a79ab0f360d8",
+ "target_ref": "attack-pattern--74a90d3f-f426-4832-9cf7-5e9ec799bec0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--3f0fc955-329c-4b4a-80d3-8446bb65e418.json b/generated_files/DISARM_STIX/relationship/relationship--3f0fc955-329c-4b4a-80d3-8446bb65e418.json
deleted file mode 100644
index 5eede0a..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--3f0fc955-329c-4b4a-80d3-8446bb65e418.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--dce41cd3-b96b-4e31-aca3-69f4d02231fc",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--3f0fc955-329c-4b4a-80d3-8446bb65e418",
- "created": "2022-07-02T17:28:37.028728Z",
- "modified": "2022-07-02T17:28:37.028728Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--9d00ac60-7376-4db3-b5d4-43c8864a5b06",
- "target_ref": "attack-pattern--ab2961c1-e1bc-4b0d-aae1-7ba73ced39ba"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--40925abf-04b2-44c2-bc58-d4df74c79fde.json b/generated_files/DISARM_STIX/relationship/relationship--40925abf-04b2-44c2-bc58-d4df74c79fde.json
deleted file mode 100644
index 38bd5f3..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--40925abf-04b2-44c2-bc58-d4df74c79fde.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--ecb96e48-2386-4172-a156-cd6a089664a7",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--40925abf-04b2-44c2-bc58-d4df74c79fde",
- "created": "2022-07-02T17:28:37.02824Z",
- "modified": "2022-07-02T17:28:37.02824Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--0fc791e6-cc20-4280-9a53-251d88b940c5",
- "target_ref": "attack-pattern--c236acce-da3a-44b6-ab3a-24268c897c0e"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--40bc98e2-7130-4623-be16-514a05a4c374.json b/generated_files/DISARM_STIX/relationship/relationship--40bc98e2-7130-4623-be16-514a05a4c374.json
new file mode 100644
index 0000000..b277542
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--40bc98e2-7130-4623-be16-514a05a4c374.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--61ad2838-6775-48ee-9483-552da6d671eb",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--40bc98e2-7130-4623-be16-514a05a4c374",
+ "created": "2022-07-02T19:59:12.751088Z",
+ "modified": "2022-07-02T19:59:12.751088Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--649f96b3-7163-4b98-9aa6-0276e2336371",
+ "target_ref": "attack-pattern--bc05d8a7-e306-4112-9826-75687e7cba5c"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--40ce0237-1667-4805-bf9d-f91dcf0a8d3f.json b/generated_files/DISARM_STIX/relationship/relationship--40ce0237-1667-4805-bf9d-f91dcf0a8d3f.json
new file mode 100644
index 0000000..29a4a86
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--40ce0237-1667-4805-bf9d-f91dcf0a8d3f.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--81387ec1-2048-45f2-b4fa-f4768aa32621",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--40ce0237-1667-4805-bf9d-f91dcf0a8d3f",
+ "created": "2022-07-02T19:59:12.745902Z",
+ "modified": "2022-07-02T19:59:12.745902Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--e7adceed-2079-48db-b7d8-9d93ad960f37",
+ "target_ref": "attack-pattern--2b2b06d9-26d3-4e69-93b3-5a3f37363b5f"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--42373c21-a9e1-4b7b-96ce-d8890e092973.json b/generated_files/DISARM_STIX/relationship/relationship--42373c21-a9e1-4b7b-96ce-d8890e092973.json
deleted file mode 100644
index ab514f8..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--42373c21-a9e1-4b7b-96ce-d8890e092973.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--29f9072e-34d4-4436-8c21-3bcddf3d359e",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--42373c21-a9e1-4b7b-96ce-d8890e092973",
- "created": "2022-07-02T17:28:37.026415Z",
- "modified": "2022-07-02T17:28:37.026415Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--429b3cc3-e187-450a-948e-49ef80c5b824",
- "target_ref": "attack-pattern--5621af39-db87-4673-9840-9125cc4a17c4"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--436cd39b-eede-4a26-82cb-5038763bb129.json b/generated_files/DISARM_STIX/relationship/relationship--436cd39b-eede-4a26-82cb-5038763bb129.json
new file mode 100644
index 0000000..4c0cae2
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--436cd39b-eede-4a26-82cb-5038763bb129.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--5b341f3b-18e5-4cd3-9b50-39f57961ebbf",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--436cd39b-eede-4a26-82cb-5038763bb129",
+ "created": "2022-07-02T19:59:12.751239Z",
+ "modified": "2022-07-02T19:59:12.751239Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--1b073cb4-f884-4e16-9fdf-df9fbf44840b",
+ "target_ref": "attack-pattern--bc05d8a7-e306-4112-9826-75687e7cba5c"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--439ad1ba-8209-445e-956a-08572e2c2c6b.json b/generated_files/DISARM_STIX/relationship/relationship--439ad1ba-8209-445e-956a-08572e2c2c6b.json
deleted file mode 100644
index c616a38..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--439ad1ba-8209-445e-956a-08572e2c2c6b.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--5883bcee-fd69-428a-a6be-e400468b4312",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--439ad1ba-8209-445e-956a-08572e2c2c6b",
- "created": "2022-07-02T17:28:37.027729Z",
- "modified": "2022-07-02T17:28:37.027729Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--06e0d30d-fddb-4d25-842e-622d8911f444",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--467da11a-017f-4b85-95ae-be37ceedc7b6.json b/generated_files/DISARM_STIX/relationship/relationship--467da11a-017f-4b85-95ae-be37ceedc7b6.json
new file mode 100644
index 0000000..b857c06
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--467da11a-017f-4b85-95ae-be37ceedc7b6.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--cede2252-138c-491c-9096-ce3b6b1e9388",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--467da11a-017f-4b85-95ae-be37ceedc7b6",
+ "created": "2022-07-02T19:59:12.754646Z",
+ "modified": "2022-07-02T19:59:12.754646Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--38ceb33f-7654-48dd-ac72-d0d596c2123b",
+ "target_ref": "attack-pattern--3c2e9e26-3af7-44f8-b046-694d9efbcd14"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--48c1c482-aa1b-4ebd-9a06-f5b7b3341bae.json b/generated_files/DISARM_STIX/relationship/relationship--48c1c482-aa1b-4ebd-9a06-f5b7b3341bae.json
new file mode 100644
index 0000000..40409c7
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--48c1c482-aa1b-4ebd-9a06-f5b7b3341bae.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--2627363e-a1f7-4b2f-93c1-8c00127cd265",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--48c1c482-aa1b-4ebd-9a06-f5b7b3341bae",
+ "created": "2022-07-02T19:59:12.753996Z",
+ "modified": "2022-07-02T19:59:12.753996Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--7c5ee3f1-be04-4a22-a9ee-b0474b78df40",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--48d08bd2-04fa-4ed1-a206-23c6d59b73ff.json b/generated_files/DISARM_STIX/relationship/relationship--48d08bd2-04fa-4ed1-a206-23c6d59b73ff.json
deleted file mode 100644
index 57a79aa..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--48d08bd2-04fa-4ed1-a206-23c6d59b73ff.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--baa0d186-7052-4ee5-93a8-2063f8e6118b",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--48d08bd2-04fa-4ed1-a206-23c6d59b73ff",
- "created": "2022-07-02T17:28:37.026965Z",
- "modified": "2022-07-02T17:28:37.026965Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--4a3f721a-82a7-43b6-9889-acacda9e7617",
- "target_ref": "attack-pattern--418a55bf-5c5e-4a90-8f10-a18fc80a2964"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--49e6de4d-64bd-4a94-903a-f81b173b6ba2.json b/generated_files/DISARM_STIX/relationship/relationship--49e6de4d-64bd-4a94-903a-f81b173b6ba2.json
deleted file mode 100644
index a4bf44d..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--49e6de4d-64bd-4a94-903a-f81b173b6ba2.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--2224eb80-547e-4610-b13b-f604ea419a95",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--49e6de4d-64bd-4a94-903a-f81b173b6ba2",
- "created": "2022-07-02T17:28:37.026622Z",
- "modified": "2022-07-02T17:28:37.026622Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--e15ab7c3-84da-4b2b-89e6-600d89b41bb2",
- "target_ref": "attack-pattern--b6db16cc-bbe2-44fe-99b4-c074b3b9595f"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--4a163170-5474-40b3-aa7a-c29ec513bc2e.json b/generated_files/DISARM_STIX/relationship/relationship--4a163170-5474-40b3-aa7a-c29ec513bc2e.json
new file mode 100644
index 0000000..0aee5da
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--4a163170-5474-40b3-aa7a-c29ec513bc2e.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--1864e952-6598-4c85-bffe-917e10f5ba08",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--4a163170-5474-40b3-aa7a-c29ec513bc2e",
+ "created": "2022-07-02T19:59:12.748481Z",
+ "modified": "2022-07-02T19:59:12.748481Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--9e3cb11b-78e4-4ff3-9040-0a14d5b20951",
+ "target_ref": "attack-pattern--aa3dd7f6-b16f-4ee4-850a-91394b33622a"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--4a3e9a27-4f67-4b63-a4ea-07dafd9a0984.json b/generated_files/DISARM_STIX/relationship/relationship--4a3e9a27-4f67-4b63-a4ea-07dafd9a0984.json
new file mode 100644
index 0000000..096aa9a
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--4a3e9a27-4f67-4b63-a4ea-07dafd9a0984.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--59387778-19e7-42d7-9d5f-33f565141ce3",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--4a3e9a27-4f67-4b63-a4ea-07dafd9a0984",
+ "created": "2022-07-02T19:59:12.749939Z",
+ "modified": "2022-07-02T19:59:12.749939Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--f98165a2-f2a6-4ddb-9766-4defcdf0f9cc",
+ "target_ref": "attack-pattern--6dccbf81-1fb1-47c3-b6c5-4d1d6286be19"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--4ba9ec33-da92-481d-b834-740612400de7.json b/generated_files/DISARM_STIX/relationship/relationship--4ba9ec33-da92-481d-b834-740612400de7.json
new file mode 100644
index 0000000..975e315
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--4ba9ec33-da92-481d-b834-740612400de7.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--9cb4230d-fd54-458b-8615-3d3874ee461e",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--4ba9ec33-da92-481d-b834-740612400de7",
+ "created": "2022-07-02T19:59:12.745085Z",
+ "modified": "2022-07-02T19:59:12.745085Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--13ff62f6-6719-4ec4-b786-0a19eef53709",
+ "target_ref": "attack-pattern--1059cdf7-3b45-40e6-93d3-b25ef3b6afac"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--4bf5f0e8-c7ce-46ad-9732-8635dd5571d7.json b/generated_files/DISARM_STIX/relationship/relationship--4bf5f0e8-c7ce-46ad-9732-8635dd5571d7.json
new file mode 100644
index 0000000..56512d3
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--4bf5f0e8-c7ce-46ad-9732-8635dd5571d7.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--9684b841-dfcd-4c1d-bc15-d23ed7ca2f95",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--4bf5f0e8-c7ce-46ad-9732-8635dd5571d7",
+ "created": "2022-07-02T19:59:12.754951Z",
+ "modified": "2022-07-02T19:59:12.754951Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--0c87b14d-385e-44f7-a180-ecb389949bb4",
+ "target_ref": "attack-pattern--6632ab1a-e798-45f7-8703-e09c110f11ea"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--4c18c034-ebef-4b03-9926-f194ef25e0a8.json b/generated_files/DISARM_STIX/relationship/relationship--4c18c034-ebef-4b03-9926-f194ef25e0a8.json
deleted file mode 100644
index 206360d..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--4c18c034-ebef-4b03-9926-f194ef25e0a8.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--ab8d3ab5-d74a-4a37-a19e-084ae3c1803f",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--4c18c034-ebef-4b03-9926-f194ef25e0a8",
- "created": "2022-07-02T17:28:37.019216Z",
- "modified": "2022-07-02T17:28:37.019216Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--964713f6-d78e-4795-a89f-a4700996614a",
- "target_ref": "attack-pattern--c96daf1f-ac43-40d9-88a7-0f6244a38c3c"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--4cca1a3b-2121-4e0d-9cf7-22da94357f2a.json b/generated_files/DISARM_STIX/relationship/relationship--4cca1a3b-2121-4e0d-9cf7-22da94357f2a.json
new file mode 100644
index 0000000..83f8d8d
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--4cca1a3b-2121-4e0d-9cf7-22da94357f2a.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--c6e4a60a-e1c5-46bb-a14f-1a95933d344e",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--4cca1a3b-2121-4e0d-9cf7-22da94357f2a",
+ "created": "2022-07-02T19:59:12.751464Z",
+ "modified": "2022-07-02T19:59:12.751464Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--226290e1-b4f4-4efc-97d9-66bb4b23ca75",
+ "target_ref": "attack-pattern--82052da3-7f68-471c-9991-f1e09eaf8cb2"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--4d610dcb-926e-4adc-8605-aec54795a265.json b/generated_files/DISARM_STIX/relationship/relationship--4d610dcb-926e-4adc-8605-aec54795a265.json
new file mode 100644
index 0000000..1b8e2f4
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--4d610dcb-926e-4adc-8605-aec54795a265.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--f8c89fa3-0160-401b-bfc9-5cde9b6f8353",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--4d610dcb-926e-4adc-8605-aec54795a265",
+ "created": "2022-07-02T19:59:12.746331Z",
+ "modified": "2022-07-02T19:59:12.746331Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--b8eb2c66-3523-4b3c-9996-060178842282",
+ "target_ref": "attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--4ece5245-b7eb-4c9b-88a0-e9fd573fe1b9.json b/generated_files/DISARM_STIX/relationship/relationship--4ece5245-b7eb-4c9b-88a0-e9fd573fe1b9.json
new file mode 100644
index 0000000..39a5a61
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--4ece5245-b7eb-4c9b-88a0-e9fd573fe1b9.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--e046ff41-c16a-417b-b5b3-c3fc9fd7f672",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--4ece5245-b7eb-4c9b-88a0-e9fd573fe1b9",
+ "created": "2022-07-02T19:59:12.746404Z",
+ "modified": "2022-07-02T19:59:12.746404Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--de168abd-3a95-4dbc-a673-6756ba2bc3fc",
+ "target_ref": "attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--4f3638c1-9025-4d82-9031-5379afbffd7e.json b/generated_files/DISARM_STIX/relationship/relationship--4f3638c1-9025-4d82-9031-5379afbffd7e.json
deleted file mode 100644
index 6905478..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--4f3638c1-9025-4d82-9031-5379afbffd7e.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--242f4a40-8fdc-4fad-942f-7d5ffcbf7654",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--4f3638c1-9025-4d82-9031-5379afbffd7e",
- "created": "2022-07-02T17:28:37.019562Z",
- "modified": "2022-07-02T17:28:37.019562Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--a2053dcc-f24c-4aa9-8a84-4f5b3d3b2a95",
- "target_ref": "attack-pattern--2f9be5f3-9474-46c1-9bf8-038577c4b6a8"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--4f67d148-811a-4d4f-a932-418e203b988b.json b/generated_files/DISARM_STIX/relationship/relationship--4f67d148-811a-4d4f-a932-418e203b988b.json
deleted file mode 100644
index 655966b..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--4f67d148-811a-4d4f-a932-418e203b988b.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--59ec92a5-9cbe-4005-8551-54114476f097",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--4f67d148-811a-4d4f-a932-418e203b988b",
- "created": "2022-07-02T17:28:37.024474Z",
- "modified": "2022-07-02T17:28:37.024474Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--50034ce6-d21e-4320-8d8b-c5fdba371a8a",
- "target_ref": "attack-pattern--e4eec620-e076-447d-9d6c-2e63edf671da"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--536b8334-a158-4805-a1c1-56d5fd26ddf8.json b/generated_files/DISARM_STIX/relationship/relationship--536b8334-a158-4805-a1c1-56d5fd26ddf8.json
new file mode 100644
index 0000000..f076992
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--536b8334-a158-4805-a1c1-56d5fd26ddf8.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--ebf35554-7ca8-4e76-aea5-922d1816caed",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--536b8334-a158-4805-a1c1-56d5fd26ddf8",
+ "created": "2022-07-02T19:59:12.748033Z",
+ "modified": "2022-07-02T19:59:12.748033Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--d75214cd-118d-4ce4-ba64-f1a0ef15b953",
+ "target_ref": "attack-pattern--81984c05-802f-4dc7-9288-fb3abb263ef5"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--5479c3ed-555e-4291-b0a7-64b9f97e8130.json b/generated_files/DISARM_STIX/relationship/relationship--5479c3ed-555e-4291-b0a7-64b9f97e8130.json
new file mode 100644
index 0000000..25fb7d1
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--5479c3ed-555e-4291-b0a7-64b9f97e8130.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--c27c890e-88d9-4b0d-9442-d7f67a339969",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--5479c3ed-555e-4291-b0a7-64b9f97e8130",
+ "created": "2022-07-02T19:59:12.750619Z",
+ "modified": "2022-07-02T19:59:12.750619Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--33e2b7b3-b9d0-47d4-ab63-fcd15740a325",
+ "target_ref": "attack-pattern--6565d00e-6281-4157-b050-3974e3c55616"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--54b98139-e0b0-4ece-868a-f7b256a84efc.json b/generated_files/DISARM_STIX/relationship/relationship--54b98139-e0b0-4ece-868a-f7b256a84efc.json
new file mode 100644
index 0000000..a3f4614
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--54b98139-e0b0-4ece-868a-f7b256a84efc.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--db24d14b-9f79-448c-aa0a-308366def1c3",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--54b98139-e0b0-4ece-868a-f7b256a84efc",
+ "created": "2022-07-02T19:59:12.754723Z",
+ "modified": "2022-07-02T19:59:12.754723Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--d4254a49-6d3a-46cc-9b41-e56a1c0ea8f6",
+ "target_ref": "attack-pattern--3c2e9e26-3af7-44f8-b046-694d9efbcd14"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--5605fb56-4135-4ec2-9527-c8995eb9b3f3.json b/generated_files/DISARM_STIX/relationship/relationship--5605fb56-4135-4ec2-9527-c8995eb9b3f3.json
new file mode 100644
index 0000000..51b68de
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--5605fb56-4135-4ec2-9527-c8995eb9b3f3.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--6fc20bc9-28a6-426a-ab13-a63f7e5fadb7",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--5605fb56-4135-4ec2-9527-c8995eb9b3f3",
+ "created": "2022-07-02T19:59:12.747247Z",
+ "modified": "2022-07-02T19:59:12.747247Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--c9ce8866-87ec-4489-8a95-8e89ad2ae135",
+ "target_ref": "attack-pattern--24bd7bc9-64dc-4ec9-b0e0-551c00666462"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--564deab7-0986-403f-aa75-a71217d2acd7.json b/generated_files/DISARM_STIX/relationship/relationship--564deab7-0986-403f-aa75-a71217d2acd7.json
new file mode 100644
index 0000000..cf3b435
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--564deab7-0986-403f-aa75-a71217d2acd7.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--2cd90433-79ba-4588-b461-0a98c3245554",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--564deab7-0986-403f-aa75-a71217d2acd7",
+ "created": "2022-07-02T19:59:12.753757Z",
+ "modified": "2022-07-02T19:59:12.753757Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--9e6db77c-67e3-49ce-9cd2-15fdef67464f",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--56c31ed4-3a85-4340-a358-8ad888e7cd21.json b/generated_files/DISARM_STIX/relationship/relationship--56c31ed4-3a85-4340-a358-8ad888e7cd21.json
new file mode 100644
index 0000000..28489a6
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--56c31ed4-3a85-4340-a358-8ad888e7cd21.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--6d4dffc1-7e82-4022-8c19-9902579a0122",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--56c31ed4-3a85-4340-a358-8ad888e7cd21",
+ "created": "2022-07-02T19:59:12.75518Z",
+ "modified": "2022-07-02T19:59:12.75518Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--49b98725-5779-44e4-afd0-2602525a9f63",
+ "target_ref": "attack-pattern--bde29c42-3bce-4ba4-b09a-c2d6d685a5a0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--5801ed07-9292-4b4d-8386-1a96f393ae4d.json b/generated_files/DISARM_STIX/relationship/relationship--5801ed07-9292-4b4d-8386-1a96f393ae4d.json
new file mode 100644
index 0000000..b7bcd02
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--5801ed07-9292-4b4d-8386-1a96f393ae4d.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--4448f2ce-d59f-4d6b-9308-95516539cec5",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--5801ed07-9292-4b4d-8386-1a96f393ae4d",
+ "created": "2022-07-02T19:59:12.753668Z",
+ "modified": "2022-07-02T19:59:12.753668Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--5b0e4950-7343-480f-b585-e6673e65d8c6",
+ "target_ref": "attack-pattern--a18dda94-01e8-413a-98c4-125f28091614"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--585dfc3f-8c82-4429-8d64-b82856a75f49.json b/generated_files/DISARM_STIX/relationship/relationship--585dfc3f-8c82-4429-8d64-b82856a75f49.json
new file mode 100644
index 0000000..0c0fb3e
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--585dfc3f-8c82-4429-8d64-b82856a75f49.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--ec861c26-14b3-4758-b90f-100f034e2c59",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--585dfc3f-8c82-4429-8d64-b82856a75f49",
+ "created": "2022-07-02T19:59:12.74833Z",
+ "modified": "2022-07-02T19:59:12.74833Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--7e30b889-c9f9-4932-aa0d-82d5f1d79e45",
+ "target_ref": "attack-pattern--9ae37313-f374-4007-bf44-91d0b85d8e1a"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--587176bb-1301-4c41-b0b4-97eae628125b.json b/generated_files/DISARM_STIX/relationship/relationship--587176bb-1301-4c41-b0b4-97eae628125b.json
deleted file mode 100644
index befc7de..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--587176bb-1301-4c41-b0b4-97eae628125b.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--965203cc-8163-4c6d-a147-545cbdbfb68b",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--587176bb-1301-4c41-b0b4-97eae628125b",
- "created": "2022-07-02T17:28:37.025581Z",
- "modified": "2022-07-02T17:28:37.025581Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--b8caa5f9-fcf8-4ec4-a288-22c0e04db8ab",
- "target_ref": "attack-pattern--4faa614b-8a0a-4e5e-8492-59d12b08df18"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--587caeb0-8e1e-48ed-a555-418ae8b436d1.json b/generated_files/DISARM_STIX/relationship/relationship--587caeb0-8e1e-48ed-a555-418ae8b436d1.json
deleted file mode 100644
index f4a3ad3..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--587caeb0-8e1e-48ed-a555-418ae8b436d1.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--cb867911-e608-4dfd-ba4f-534d237410f1",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--587caeb0-8e1e-48ed-a555-418ae8b436d1",
- "created": "2022-07-02T17:28:37.024406Z",
- "modified": "2022-07-02T17:28:37.024406Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--4c41d3b8-b60c-428a-b728-24e58c506687",
- "target_ref": "attack-pattern--d1f4502a-e10b-4854-a5d2-92a8400bb55f"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--58bc53d2-1971-40ea-a52b-56c1b2b813ab.json b/generated_files/DISARM_STIX/relationship/relationship--58bc53d2-1971-40ea-a52b-56c1b2b813ab.json
deleted file mode 100644
index 89b98d7..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--58bc53d2-1971-40ea-a52b-56c1b2b813ab.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--9e0d2073-93fb-4e17-a317-c52676745132",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--58bc53d2-1971-40ea-a52b-56c1b2b813ab",
- "created": "2022-07-02T17:28:37.019147Z",
- "modified": "2022-07-02T17:28:37.019147Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--c800d67d-07dd-4e61-8b9f-0ebd477c9afb",
- "target_ref": "attack-pattern--c96daf1f-ac43-40d9-88a7-0f6244a38c3c"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--58f16d5b-1cf7-4dd0-b333-530b659fcada.json b/generated_files/DISARM_STIX/relationship/relationship--58f16d5b-1cf7-4dd0-b333-530b659fcada.json
deleted file mode 100644
index d645c6d..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--58f16d5b-1cf7-4dd0-b333-530b659fcada.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--7d107b99-ee3e-41d2-81af-6956b524e9a3",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--58f16d5b-1cf7-4dd0-b333-530b659fcada",
- "created": "2022-07-02T17:28:37.020601Z",
- "modified": "2022-07-02T17:28:37.020601Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--173741da-6c65-45a2-8b72-4692e694c345",
- "target_ref": "attack-pattern--ccde7e48-1f25-46dd-a38f-39758274a024"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--595c478b-7493-4b67-a63f-16ba80f9a156.json b/generated_files/DISARM_STIX/relationship/relationship--595c478b-7493-4b67-a63f-16ba80f9a156.json
new file mode 100644
index 0000000..ac6150a
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--595c478b-7493-4b67-a63f-16ba80f9a156.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--ee3942b5-a003-4ce4-9ffd-f3e95096b9f2",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--595c478b-7493-4b67-a63f-16ba80f9a156",
+ "created": "2022-07-02T19:59:12.74866Z",
+ "modified": "2022-07-02T19:59:12.74866Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--e455a715-d6ae-4bb7-938c-0087e929ede0",
+ "target_ref": "attack-pattern--a5d16185-7fbd-41e8-b549-f8534a570ca9"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--59d36efd-2a7e-471e-8ab8-173986940b3a.json b/generated_files/DISARM_STIX/relationship/relationship--59d36efd-2a7e-471e-8ab8-173986940b3a.json
deleted file mode 100644
index 47e693b..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--59d36efd-2a7e-471e-8ab8-173986940b3a.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--e0c477af-d341-43d6-ae33-a81a2f419913",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--59d36efd-2a7e-471e-8ab8-173986940b3a",
- "created": "2022-07-02T17:28:37.019355Z",
- "modified": "2022-07-02T17:28:37.019355Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--ad2ca7cc-3998-441a-b042-a004c07f4b54",
- "target_ref": "attack-pattern--2f9be5f3-9474-46c1-9bf8-038577c4b6a8"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--5abc706f-dd49-4300-849c-aeebb6fb6de7.json b/generated_files/DISARM_STIX/relationship/relationship--5abc706f-dd49-4300-849c-aeebb6fb6de7.json
deleted file mode 100644
index a875510..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--5abc706f-dd49-4300-849c-aeebb6fb6de7.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--0fa402ae-58c8-43cd-b796-89345eae20fc",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--5abc706f-dd49-4300-849c-aeebb6fb6de7",
- "created": "2022-07-02T17:28:37.021781Z",
- "modified": "2022-07-02T17:28:37.021781Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--c9b162f1-ae90-4ccb-acb0-c2a4d7c9979d",
- "target_ref": "attack-pattern--b3c2db10-3666-4b0b-a8f2-c97506382de0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--5c65bd19-7e1f-48ec-ba4e-15be100aa2ba.json b/generated_files/DISARM_STIX/relationship/relationship--5c65bd19-7e1f-48ec-ba4e-15be100aa2ba.json
new file mode 100644
index 0000000..04e97c1
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--5c65bd19-7e1f-48ec-ba4e-15be100aa2ba.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--5f5cde87-2463-4b60-941d-1a9d68e22452",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--5c65bd19-7e1f-48ec-ba4e-15be100aa2ba",
+ "created": "2022-07-02T19:59:12.752699Z",
+ "modified": "2022-07-02T19:59:12.752699Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--6a0c006b-9572-4983-8e5c-074cf837fc20",
+ "target_ref": "attack-pattern--72e298d1-2ba8-47cb-839a-3a4c06a75de4"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--5cdb0e73-919f-4109-a77c-cefcaa5e6ee6.json b/generated_files/DISARM_STIX/relationship/relationship--5cdb0e73-919f-4109-a77c-cefcaa5e6ee6.json
deleted file mode 100644
index 4cdaab9..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--5cdb0e73-919f-4109-a77c-cefcaa5e6ee6.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--07fc2884-35b7-42c8-8b7c-e07e011475dd",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--5cdb0e73-919f-4109-a77c-cefcaa5e6ee6",
- "created": "2022-07-02T17:28:37.021083Z",
- "modified": "2022-07-02T17:28:37.021083Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--9175c5c5-5e10-492c-823d-17178bdd1406",
- "target_ref": "attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--5df29faa-8129-4b3d-aef7-ea02c332c066.json b/generated_files/DISARM_STIX/relationship/relationship--5df29faa-8129-4b3d-aef7-ea02c332c066.json
deleted file mode 100644
index b6935af..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--5df29faa-8129-4b3d-aef7-ea02c332c066.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--8c8e885f-32a3-41e1-b489-f86027cdfa8b",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--5df29faa-8129-4b3d-aef7-ea02c332c066",
- "created": "2022-07-02T17:28:37.02297Z",
- "modified": "2022-07-02T17:28:37.02297Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--b2c9d68e-04f9-4219-89e8-f4b625d53842",
- "target_ref": "attack-pattern--c8096e1e-bd17-43e9-b7cf-138cf344d73d"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--5f224ec1-73b3-4a87-bf36-0989c7dc3bd6.json b/generated_files/DISARM_STIX/relationship/relationship--5f224ec1-73b3-4a87-bf36-0989c7dc3bd6.json
deleted file mode 100644
index 7997bce..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--5f224ec1-73b3-4a87-bf36-0989c7dc3bd6.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--d5d6d38d-0553-45cc-aa2f-66860e5e5f4d",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--5f224ec1-73b3-4a87-bf36-0989c7dc3bd6",
- "created": "2022-07-02T17:28:37.026484Z",
- "modified": "2022-07-02T17:28:37.026484Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--9c09e7a7-25f0-4d75-bab7-cf7d87dc6aff",
- "target_ref": "attack-pattern--5621af39-db87-4673-9840-9125cc4a17c4"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--5fcdc73a-db6f-4f2e-9532-919f7c2d8990.json b/generated_files/DISARM_STIX/relationship/relationship--5fcdc73a-db6f-4f2e-9532-919f7c2d8990.json
new file mode 100644
index 0000000..50294df
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--5fcdc73a-db6f-4f2e-9532-919f7c2d8990.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--19a996f2-a51b-4206-9b84-3ac9d372402a",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--5fcdc73a-db6f-4f2e-9532-919f7c2d8990",
+ "created": "2022-07-02T19:59:12.745754Z",
+ "modified": "2022-07-02T19:59:12.745754Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--57be87ef-21e0-478e-9afc-996a244602f2",
+ "target_ref": "attack-pattern--8e486393-6d94-4855-989e-9a9fa9acdd13"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--610daa2b-25e6-4990-9681-b37e5e2c6774.json b/generated_files/DISARM_STIX/relationship/relationship--610daa2b-25e6-4990-9681-b37e5e2c6774.json
deleted file mode 100644
index 107447d..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--610daa2b-25e6-4990-9681-b37e5e2c6774.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--bebc9d26-15c6-44f5-8310-3275d48ef45b",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--610daa2b-25e6-4990-9681-b37e5e2c6774",
- "created": "2022-07-02T17:28:37.027446Z",
- "modified": "2022-07-02T17:28:37.027446Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--f963fd61-4dc3-4267-8aad-ac14a6a3937d",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--61456ae3-46ef-4dec-91e3-61940a76fbda.json b/generated_files/DISARM_STIX/relationship/relationship--61456ae3-46ef-4dec-91e3-61940a76fbda.json
deleted file mode 100644
index 6b02478..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--61456ae3-46ef-4dec-91e3-61940a76fbda.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--8d971f24-d615-4bd3-b50c-a60c966a920f",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--61456ae3-46ef-4dec-91e3-61940a76fbda",
- "created": "2022-07-02T17:28:37.028797Z",
- "modified": "2022-07-02T17:28:37.028797Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--d6094ec0-284e-458d-9b26-ff22b5f1f09c",
- "target_ref": "attack-pattern--ab2961c1-e1bc-4b0d-aae1-7ba73ced39ba"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--6184905c-fa4c-4e2e-ba4a-5a345f01f37e.json b/generated_files/DISARM_STIX/relationship/relationship--6184905c-fa4c-4e2e-ba4a-5a345f01f37e.json
deleted file mode 100644
index a64f85c..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--6184905c-fa4c-4e2e-ba4a-5a345f01f37e.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--505281c2-50e7-4f2a-a17a-1925cba4f6d6",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--6184905c-fa4c-4e2e-ba4a-5a345f01f37e",
- "created": "2022-07-02T17:28:37.022062Z",
- "modified": "2022-07-02T17:28:37.022062Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--70885523-55fd-46ff-aa6f-59ff4810dfe5",
- "target_ref": "attack-pattern--b5a8668d-e35e-406f-b2a9-62bc4aa25cfe"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--619f8bd8-c5ed-4cf1-9515-8448dbdc1363.json b/generated_files/DISARM_STIX/relationship/relationship--619f8bd8-c5ed-4cf1-9515-8448dbdc1363.json
deleted file mode 100644
index 94a2617..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--619f8bd8-c5ed-4cf1-9515-8448dbdc1363.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--f49864cb-2d69-4586-8e09-5bb763754586",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--619f8bd8-c5ed-4cf1-9515-8448dbdc1363",
- "created": "2022-07-02T17:28:37.020809Z",
- "modified": "2022-07-02T17:28:37.020809Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--aaeceb4e-5f3a-48c9-8e79-5c8e1424ab6d",
- "target_ref": "attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--62d7839f-63ff-4d75-85c9-ec035819a3b1.json b/generated_files/DISARM_STIX/relationship/relationship--62d7839f-63ff-4d75-85c9-ec035819a3b1.json
new file mode 100644
index 0000000..c08f6d9
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--62d7839f-63ff-4d75-85c9-ec035819a3b1.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--4f956862-14cb-45cb-b8a1-1d93c024434c",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--62d7839f-63ff-4d75-85c9-ec035819a3b1",
+ "created": "2022-07-02T19:59:12.749486Z",
+ "modified": "2022-07-02T19:59:12.749486Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--11af0d9d-1e5c-4b28-b586-cffc7b2e68fc",
+ "target_ref": "attack-pattern--2707372c-26a1-4c1f-8875-65a2433cda70"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--6454298d-e34d-4aa8-af05-9e3769ed45f0.json b/generated_files/DISARM_STIX/relationship/relationship--6454298d-e34d-4aa8-af05-9e3769ed45f0.json
new file mode 100644
index 0000000..7a4597f
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--6454298d-e34d-4aa8-af05-9e3769ed45f0.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--025e1bd8-6398-4bc6-8358-db441e9fc9dc",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--6454298d-e34d-4aa8-af05-9e3769ed45f0",
+ "created": "2022-07-02T19:59:12.748887Z",
+ "modified": "2022-07-02T19:59:12.748887Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--7763a745-0e8f-4319-b877-440860e304e7",
+ "target_ref": "attack-pattern--76e6a962-860b-461c-a6ed-6de2e9922be1"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--64742552-a3dd-4a06-8884-dcd129646dbe.json b/generated_files/DISARM_STIX/relationship/relationship--64742552-a3dd-4a06-8884-dcd129646dbe.json
new file mode 100644
index 0000000..61c107f
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--64742552-a3dd-4a06-8884-dcd129646dbe.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--4af2becf-413b-439b-8995-69b1498b9789",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--64742552-a3dd-4a06-8884-dcd129646dbe",
+ "created": "2022-07-02T19:59:12.752136Z",
+ "modified": "2022-07-02T19:59:12.752136Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--0d5e2457-30e9-4934-8197-651dbc00dc82",
+ "target_ref": "attack-pattern--5f5ff744-b5d2-45c2-a45a-412c2d43cbdf"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--6499c0aa-e954-4b27-9dee-4e6632a0bca2.json b/generated_files/DISARM_STIX/relationship/relationship--6499c0aa-e954-4b27-9dee-4e6632a0bca2.json
deleted file mode 100644
index f0f9104..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--6499c0aa-e954-4b27-9dee-4e6632a0bca2.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--9c34b07c-8752-4427-9a29-9ac56870a7b8",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--6499c0aa-e954-4b27-9dee-4e6632a0bca2",
- "created": "2022-07-02T17:28:37.026205Z",
- "modified": "2022-07-02T17:28:37.026205Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--c4b88244-71f7-4309-bae5-8f00976457a4",
- "target_ref": "attack-pattern--75e85269-638d-4f45-8d25-af320dcb016f"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--65a50d47-0e61-4095-85de-6506f71969f6.json b/generated_files/DISARM_STIX/relationship/relationship--65a50d47-0e61-4095-85de-6506f71969f6.json
new file mode 100644
index 0000000..2586193
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--65a50d47-0e61-4095-85de-6506f71969f6.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--f94ca531-3ee4-4195-af53-73df6d35dfce",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--65a50d47-0e61-4095-85de-6506f71969f6",
+ "created": "2022-07-02T19:59:12.753374Z",
+ "modified": "2022-07-02T19:59:12.753374Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--883a64c8-1f75-49ee-9cba-8e042c284993",
+ "target_ref": "attack-pattern--a18dda94-01e8-413a-98c4-125f28091614"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--67709935-64b9-48c4-aa84-9cdb5d9c7149.json b/generated_files/DISARM_STIX/relationship/relationship--67709935-64b9-48c4-aa84-9cdb5d9c7149.json
new file mode 100644
index 0000000..5d343e3
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--67709935-64b9-48c4-aa84-9cdb5d9c7149.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--4f0947a7-8474-46cb-8790-5f5d5e294152",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--67709935-64b9-48c4-aa84-9cdb5d9c7149",
+ "created": "2022-07-02T19:59:12.745675Z",
+ "modified": "2022-07-02T19:59:12.745675Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--c3f5bd0d-a29b-43ba-b455-ec9ef00f05b1",
+ "target_ref": "attack-pattern--8e486393-6d94-4855-989e-9a9fa9acdd13"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--67a54ea2-4e88-430a-a0a8-3449b83a6fe2.json b/generated_files/DISARM_STIX/relationship/relationship--67a54ea2-4e88-430a-a0a8-3449b83a6fe2.json
deleted file mode 100644
index 9d83a7a..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--67a54ea2-4e88-430a-a0a8-3449b83a6fe2.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--b8c32469-928a-4734-8959-4cb2ea68dc21",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--67a54ea2-4e88-430a-a0a8-3449b83a6fe2",
- "created": "2022-07-02T17:28:37.025999Z",
- "modified": "2022-07-02T17:28:37.025999Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--ff934521-e3f4-4f11-871c-8e7aa23574fe",
- "target_ref": "attack-pattern--2f2745b8-801a-41b5-b85a-ffba5caf53c4"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--68f3d66e-5d0b-4f76-b802-c5a380138bfa.json b/generated_files/DISARM_STIX/relationship/relationship--68f3d66e-5d0b-4f76-b802-c5a380138bfa.json
deleted file mode 100644
index f8a458a..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--68f3d66e-5d0b-4f76-b802-c5a380138bfa.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--e7eeaa8c-8d9e-43a8-aac6-5048445fab6c",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--68f3d66e-5d0b-4f76-b802-c5a380138bfa",
- "created": "2022-07-02T17:28:37.02669Z",
- "modified": "2022-07-02T17:28:37.02669Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--7acde6e3-f824-4ba8-bb8d-ef8018935e3c",
- "target_ref": "attack-pattern--b6db16cc-bbe2-44fe-99b4-c074b3b9595f"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--6954e70f-4def-4f65-bce4-12bf2c7bb3f6.json b/generated_files/DISARM_STIX/relationship/relationship--6954e70f-4def-4f65-bce4-12bf2c7bb3f6.json
deleted file mode 100644
index 6896d27..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--6954e70f-4def-4f65-bce4-12bf2c7bb3f6.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--8beb1098-eb33-46e3-bf3b-ff1c68766f10",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--6954e70f-4def-4f65-bce4-12bf2c7bb3f6",
- "created": "2022-07-02T17:28:37.020532Z",
- "modified": "2022-07-02T17:28:37.020532Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--838d2d28-0c80-4742-b60d-ceb63c1c864b",
- "target_ref": "attack-pattern--ccde7e48-1f25-46dd-a38f-39758274a024"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--6aac7ced-9c38-488b-884f-afd05b5271ab.json b/generated_files/DISARM_STIX/relationship/relationship--6aac7ced-9c38-488b-884f-afd05b5271ab.json
deleted file mode 100644
index b5070e9..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--6aac7ced-9c38-488b-884f-afd05b5271ab.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--a82e0a81-d403-4db6-8914-fd1d56ae62d1",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--6aac7ced-9c38-488b-884f-afd05b5271ab",
- "created": "2022-07-02T17:28:37.024543Z",
- "modified": "2022-07-02T17:28:37.024543Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--02b28a12-df83-4b45-8d7a-39498b54719b",
- "target_ref": "attack-pattern--e4eec620-e076-447d-9d6c-2e63edf671da"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--6b35c101-8b66-4c5e-b638-939c4ce3c676.json b/generated_files/DISARM_STIX/relationship/relationship--6b35c101-8b66-4c5e-b638-939c4ce3c676.json
new file mode 100644
index 0000000..b7c8e2b
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--6b35c101-8b66-4c5e-b638-939c4ce3c676.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--fd5dd4c8-c137-4214-838d-350d74f5bbce",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--6b35c101-8b66-4c5e-b638-939c4ce3c676",
+ "created": "2022-07-02T19:59:12.754798Z",
+ "modified": "2022-07-02T19:59:12.754798Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--13e7f270-5796-40dd-b5b5-f36d84beef48",
+ "target_ref": "attack-pattern--3c2e9e26-3af7-44f8-b046-694d9efbcd14"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--6da393bd-2e54-4117-95a8-a9af89ba4a8d.json b/generated_files/DISARM_STIX/relationship/relationship--6da393bd-2e54-4117-95a8-a9af89ba4a8d.json
deleted file mode 100644
index 21fcab6..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--6da393bd-2e54-4117-95a8-a9af89ba4a8d.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--46d3642b-5989-4180-bdc0-62c21b63ede5",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--6da393bd-2e54-4117-95a8-a9af89ba4a8d",
- "created": "2022-07-02T17:28:37.021852Z",
- "modified": "2022-07-02T17:28:37.021852Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--b0eb15ea-d4c2-49b9-a9e3-1fbf5c8dc11e",
- "target_ref": "attack-pattern--b3c2db10-3666-4b0b-a8f2-c97506382de0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--6e073edd-2d88-4b2c-95ff-f4dbeb0250ce.json b/generated_files/DISARM_STIX/relationship/relationship--6e073edd-2d88-4b2c-95ff-f4dbeb0250ce.json
new file mode 100644
index 0000000..ce2e5ef
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--6e073edd-2d88-4b2c-95ff-f4dbeb0250ce.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--ac5eb8ac-2908-4656-af46-21e91840646c",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--6e073edd-2d88-4b2c-95ff-f4dbeb0250ce",
+ "created": "2022-07-02T19:59:12.746753Z",
+ "modified": "2022-07-02T19:59:12.746753Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--695e41fe-b084-4065-953c-e2cffd80ea5f",
+ "target_ref": "attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--6e13a795-4ba6-40a0-af82-f14b7e5c6da9.json b/generated_files/DISARM_STIX/relationship/relationship--6e13a795-4ba6-40a0-af82-f14b7e5c6da9.json
deleted file mode 100644
index 7690f5c..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--6e13a795-4ba6-40a0-af82-f14b7e5c6da9.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--2b7fe6bd-7d3e-461d-bbc7-c489eb0c30bc",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--6e13a795-4ba6-40a0-af82-f14b7e5c6da9",
- "created": "2022-07-02T17:28:37.023491Z",
- "modified": "2022-07-02T17:28:37.023491Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--ba8f2965-53cc-410b-81c5-ecb749a85a25",
- "target_ref": "attack-pattern--78c65ad8-b96c-48b2-857d-f9952f3bcb7e"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--6f857529-a76a-48fc-8f87-40b5fbb3d8b1.json b/generated_files/DISARM_STIX/relationship/relationship--6f857529-a76a-48fc-8f87-40b5fbb3d8b1.json
deleted file mode 100644
index 10e96a2..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--6f857529-a76a-48fc-8f87-40b5fbb3d8b1.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--c088b3f9-ef46-4c10-9c39-237145c6e364",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--6f857529-a76a-48fc-8f87-40b5fbb3d8b1",
- "created": "2022-07-02T17:28:37.025718Z",
- "modified": "2022-07-02T17:28:37.025718Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--e8cb072b-23ac-468f-b9c8-78a69e1f6be8",
- "target_ref": "attack-pattern--2aeca1ac-da54-4744-a23e-c2b1641dac28"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--70021da0-bc4b-4de3-a1b4-d5bf19430820.json b/generated_files/DISARM_STIX/relationship/relationship--70021da0-bc4b-4de3-a1b4-d5bf19430820.json
deleted file mode 100644
index eb1adcb..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--70021da0-bc4b-4de3-a1b4-d5bf19430820.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--f0b72721-8271-4737-be80-10fd32cff4e5",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--70021da0-bc4b-4de3-a1b4-d5bf19430820",
- "created": "2022-07-02T17:28:37.022272Z",
- "modified": "2022-07-02T17:28:37.022272Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--d230f9c5-757d-4a27-a808-fa5a60b42824",
- "target_ref": "attack-pattern--75b32a49-e97e-4f8d-884a-870fad05bcc6"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--7043d4cf-29cb-477d-b9c3-e1f2b00ed32b.json b/generated_files/DISARM_STIX/relationship/relationship--7043d4cf-29cb-477d-b9c3-e1f2b00ed32b.json
deleted file mode 100644
index 34edc6c..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--7043d4cf-29cb-477d-b9c3-e1f2b00ed32b.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--26cf32cc-9007-4e07-9778-8c2f041d8a80",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--7043d4cf-29cb-477d-b9c3-e1f2b00ed32b",
- "created": "2022-07-02T17:28:37.02565Z",
- "modified": "2022-07-02T17:28:37.02565Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--a9e19bbd-eceb-4167-a6e9-3de030befeff",
- "target_ref": "attack-pattern--2aeca1ac-da54-4744-a23e-c2b1641dac28"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--70dce1b3-9b58-4b2e-8fd2-1b13acd91599.json b/generated_files/DISARM_STIX/relationship/relationship--70dce1b3-9b58-4b2e-8fd2-1b13acd91599.json
new file mode 100644
index 0000000..251ff51
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--70dce1b3-9b58-4b2e-8fd2-1b13acd91599.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--3b35ea91-f0af-41e8-a983-b2ed00526dca",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--70dce1b3-9b58-4b2e-8fd2-1b13acd91599",
+ "created": "2022-07-02T19:59:12.75533Z",
+ "modified": "2022-07-02T19:59:12.75533Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--6a6e6893-a55f-4437-befd-e3cf4af8fa96",
+ "target_ref": "attack-pattern--47939552-d779-467a-b393-92d25b0f9561"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--730a112d-75ac-461c-82c4-150f2b4a7fa5.json b/generated_files/DISARM_STIX/relationship/relationship--730a112d-75ac-461c-82c4-150f2b4a7fa5.json
deleted file mode 100644
index 3c3bbcc..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--730a112d-75ac-461c-82c4-150f2b4a7fa5.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--af038bf9-7129-48e3-a278-0fe654315cfa",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--730a112d-75ac-461c-82c4-150f2b4a7fa5",
- "created": "2022-07-02T17:28:37.024612Z",
- "modified": "2022-07-02T17:28:37.024612Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--055ffd5d-4aa8-4ce4-8b6b-e91872d4b77d",
- "target_ref": "attack-pattern--09c7c07b-108f-41a6-82e1-a5fff2b8182b"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--752e46a3-f1b6-4e99-a9ae-19a704b6ff7d.json b/generated_files/DISARM_STIX/relationship/relationship--752e46a3-f1b6-4e99-a9ae-19a704b6ff7d.json
new file mode 100644
index 0000000..0660a5c
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--752e46a3-f1b6-4e99-a9ae-19a704b6ff7d.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--2c3eb0ca-cf71-4b42-91ce-57a15825ae9a",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--752e46a3-f1b6-4e99-a9ae-19a704b6ff7d",
+ "created": "2022-07-02T19:59:12.746261Z",
+ "modified": "2022-07-02T19:59:12.746261Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--68c24d5c-02f4-4dda-b876-da222c052d86",
+ "target_ref": "attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--75602557-a481-4701-a284-e7116b1740e3.json b/generated_files/DISARM_STIX/relationship/relationship--75602557-a481-4701-a284-e7116b1740e3.json
new file mode 100644
index 0000000..680a1e0
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--75602557-a481-4701-a284-e7116b1740e3.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--522de730-88d0-435b-9e58-7edc8d97ab43",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--75602557-a481-4701-a284-e7116b1740e3",
+ "created": "2022-07-02T19:59:12.755255Z",
+ "modified": "2022-07-02T19:59:12.755255Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--428ae731-7efc-4a69-9da4-a7399e76e3ee",
+ "target_ref": "attack-pattern--bde29c42-3bce-4ba4-b09a-c2d6d685a5a0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--758986c5-a31f-4b64-b486-9f8ec496ca48.json b/generated_files/DISARM_STIX/relationship/relationship--758986c5-a31f-4b64-b486-9f8ec496ca48.json
new file mode 100644
index 0000000..7c05354
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--758986c5-a31f-4b64-b486-9f8ec496ca48.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--0c4c3796-d3c5-4d7a-ab44-a864fcf02089",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--758986c5-a31f-4b64-b486-9f8ec496ca48",
+ "created": "2022-07-02T19:59:12.745462Z",
+ "modified": "2022-07-02T19:59:12.745462Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--b8e80736-22ad-481d-9ea0-eebd0944187e",
+ "target_ref": "attack-pattern--8e486393-6d94-4855-989e-9a9fa9acdd13"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--7629b504-7f57-4c4c-9fd4-4fa1930ee87a.json b/generated_files/DISARM_STIX/relationship/relationship--7629b504-7f57-4c4c-9fd4-4fa1930ee87a.json
new file mode 100644
index 0000000..d66b893
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--7629b504-7f57-4c4c-9fd4-4fa1930ee87a.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--f935697c-f4f1-4c2b-9f79-91ae29e4fc19",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--7629b504-7f57-4c4c-9fd4-4fa1930ee87a",
+ "created": "2022-07-02T19:59:12.749037Z",
+ "modified": "2022-07-02T19:59:12.749037Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--23b92b9a-d1e2-4049-ac91-99c5f094a84e",
+ "target_ref": "attack-pattern--d6f1b55e-ccb2-4cd6-9ed0-84d326e51a89"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--78533ee5-ce9c-4650-8063-ea60b7e69a60.json b/generated_files/DISARM_STIX/relationship/relationship--78533ee5-ce9c-4650-8063-ea60b7e69a60.json
new file mode 100644
index 0000000..93e87ee
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--78533ee5-ce9c-4650-8063-ea60b7e69a60.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--158c7c1d-bbc6-48b1-8e9e-19bae188bb0e",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--78533ee5-ce9c-4650-8063-ea60b7e69a60",
+ "created": "2022-07-02T19:59:12.74774Z",
+ "modified": "2022-07-02T19:59:12.74774Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--28efce68-0e87-431b-920f-9d678eb6f444",
+ "target_ref": "attack-pattern--2e57c2b3-f885-4684-bc08-47d334463c48"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--788aa98d-8858-4c4f-974b-f91578fd00eb.json b/generated_files/DISARM_STIX/relationship/relationship--788aa98d-8858-4c4f-974b-f91578fd00eb.json
new file mode 100644
index 0000000..003809d
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--788aa98d-8858-4c4f-974b-f91578fd00eb.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--85408b13-58e6-4b4c-9e69-5fcc698b4d54",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--788aa98d-8858-4c4f-974b-f91578fd00eb",
+ "created": "2022-07-02T19:59:12.752289Z",
+ "modified": "2022-07-02T19:59:12.752289Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--20e97210-a216-42aa-9a31-da2961f5dfa7",
+ "target_ref": "attack-pattern--d1bed9f5-c57a-463b-a7e0-1217d5e91eeb"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--7894c853-588c-45e4-8aff-00253b24eaad.json b/generated_files/DISARM_STIX/relationship/relationship--7894c853-588c-45e4-8aff-00253b24eaad.json
new file mode 100644
index 0000000..afe1aad
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--7894c853-588c-45e4-8aff-00253b24eaad.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--4c54cc45-4f02-4a05-bc0e-47535e0afcf8",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--7894c853-588c-45e4-8aff-00253b24eaad",
+ "created": "2022-07-02T19:59:12.747457Z",
+ "modified": "2022-07-02T19:59:12.747457Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--3984387e-adea-4ccd-88d3-8a481e41a045",
+ "target_ref": "attack-pattern--fc6efd97-7618-4ea6-81bb-f83cc4d5f608"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--78e34073-7af0-40f7-9bc9-bd4a0e3a8aaf.json b/generated_files/DISARM_STIX/relationship/relationship--78e34073-7af0-40f7-9bc9-bd4a0e3a8aaf.json
deleted file mode 100644
index 83c9c9b..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--78e34073-7af0-40f7-9bc9-bd4a0e3a8aaf.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--b238a40c-b56c-4ff8-a77a-26b3fecc4828",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--78e34073-7af0-40f7-9bc9-bd4a0e3a8aaf",
- "created": "2022-07-02T17:28:37.023638Z",
- "modified": "2022-07-02T17:28:37.023638Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--fe3d67af-3f3c-4cc0-9514-2feef326b494",
- "target_ref": "attack-pattern--a6c98a38-b972-4c1b-aaba-27bf7be9afe8"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--78ea6982-4b7b-41c7-a44d-e6c1c92fccee.json b/generated_files/DISARM_STIX/relationship/relationship--78ea6982-4b7b-41c7-a44d-e6c1c92fccee.json
new file mode 100644
index 0000000..262fbfc
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--78ea6982-4b7b-41c7-a44d-e6c1c92fccee.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--af429391-6ced-4ca4-9df4-ad9eb42ddbf0",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--78ea6982-4b7b-41c7-a44d-e6c1c92fccee",
+ "created": "2022-07-02T19:59:12.743686Z",
+ "modified": "2022-07-02T19:59:12.743686Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--0c14a9d8-4304-4468-800b-c3c1d84dff5f",
+ "target_ref": "attack-pattern--08b0624d-4db7-4d38-838d-c7e970dbb292"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--79a74354-02ab-4bd5-a439-d40a7891737f.json b/generated_files/DISARM_STIX/relationship/relationship--79a74354-02ab-4bd5-a439-d40a7891737f.json
deleted file mode 100644
index a3a705c..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--79a74354-02ab-4bd5-a439-d40a7891737f.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--793ecbc6-2941-42f3-aa6e-068e31965c03",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--79a74354-02ab-4bd5-a439-d40a7891737f",
- "created": "2022-07-02T17:28:37.022902Z",
- "modified": "2022-07-02T17:28:37.022902Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--52d6fdeb-d6c6-4a0b-bf8e-6bc7b29e37ec",
- "target_ref": "attack-pattern--c8096e1e-bd17-43e9-b7cf-138cf344d73d"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--7aa82e22-3008-4f04-a3f8-691c67fcdc92.json b/generated_files/DISARM_STIX/relationship/relationship--7aa82e22-3008-4f04-a3f8-691c67fcdc92.json
deleted file mode 100644
index 89775be..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--7aa82e22-3008-4f04-a3f8-691c67fcdc92.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--0d08069f-bd40-4e4b-b534-edaf139b67d4",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--7aa82e22-3008-4f04-a3f8-691c67fcdc92",
- "created": "2022-07-02T17:28:37.02122Z",
- "modified": "2022-07-02T17:28:37.02122Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--3ff18f87-55ce-47c5-822d-94f2cd6aeb9f",
- "target_ref": "attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--7b0f214d-6696-4b3d-ae68-0aea07152e55.json b/generated_files/DISARM_STIX/relationship/relationship--7b0f214d-6696-4b3d-ae68-0aea07152e55.json
new file mode 100644
index 0000000..d221a75
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--7b0f214d-6696-4b3d-ae68-0aea07152e55.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--ece7b787-56e6-4af3-b769-898cf7fd6380",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--7b0f214d-6696-4b3d-ae68-0aea07152e55",
+ "created": "2022-07-02T19:59:12.747887Z",
+ "modified": "2022-07-02T19:59:12.747887Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--762233df-b2a8-404c-9136-d97611361d28",
+ "target_ref": "attack-pattern--81984c05-802f-4dc7-9288-fb3abb263ef5"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--7b9b76dc-40bf-46e4-ba01-8c2aeb9ec253.json b/generated_files/DISARM_STIX/relationship/relationship--7b9b76dc-40bf-46e4-ba01-8c2aeb9ec253.json
deleted file mode 100644
index ce1c7e7..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--7b9b76dc-40bf-46e4-ba01-8c2aeb9ec253.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--27a3fe82-770c-4f39-851b-0448c0df44e5",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--7b9b76dc-40bf-46e4-ba01-8c2aeb9ec253",
- "created": "2022-07-02T17:28:37.020395Z",
- "modified": "2022-07-02T17:28:37.020395Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--e5d4cc77-8a4c-4121-aafd-f8683a9d322c",
- "target_ref": "attack-pattern--ccde7e48-1f25-46dd-a38f-39758274a024"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--7c9cf66f-ab0c-44d6-a32c-e40fb46a0af5.json b/generated_files/DISARM_STIX/relationship/relationship--7c9cf66f-ab0c-44d6-a32c-e40fb46a0af5.json
deleted file mode 100644
index ee94681..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--7c9cf66f-ab0c-44d6-a32c-e40fb46a0af5.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--a3c2cc5f-1f44-44c3-a685-f4c3d2f02665",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--7c9cf66f-ab0c-44d6-a32c-e40fb46a0af5",
- "created": "2022-07-02T17:28:37.019075Z",
- "modified": "2022-07-02T17:28:37.019075Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--1b11a06d-2772-4b32-a70d-e64f6434bd3c",
- "target_ref": "attack-pattern--c96daf1f-ac43-40d9-88a7-0f6244a38c3c"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--7ca7095e-f6d4-4812-83b5-b1c711f48fbb.json b/generated_files/DISARM_STIX/relationship/relationship--7ca7095e-f6d4-4812-83b5-b1c711f48fbb.json
deleted file mode 100644
index 72a74ba..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--7ca7095e-f6d4-4812-83b5-b1c711f48fbb.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--87c6d0eb-b3bc-4e79-8083-616bedcea1d9",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--7ca7095e-f6d4-4812-83b5-b1c711f48fbb",
- "created": "2022-07-02T17:28:37.024818Z",
- "modified": "2022-07-02T17:28:37.024818Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--0361e3a0-398d-4cc5-a610-394919a8496a",
- "target_ref": "attack-pattern--09c7c07b-108f-41a6-82e1-a5fff2b8182b"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--7cf4cf86-1a83-4aac-b91a-c76711cf9276.json b/generated_files/DISARM_STIX/relationship/relationship--7cf4cf86-1a83-4aac-b91a-c76711cf9276.json
new file mode 100644
index 0000000..9efc382
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--7cf4cf86-1a83-4aac-b91a-c76711cf9276.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--9b0157c3-d28d-45d2-bc7f-e5599e8d7104",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--7cf4cf86-1a83-4aac-b91a-c76711cf9276",
+ "created": "2022-07-02T19:59:12.747814Z",
+ "modified": "2022-07-02T19:59:12.747814Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--ca7f1d3a-ee55-49d4-824f-1f060d97db12",
+ "target_ref": "attack-pattern--2e57c2b3-f885-4684-bc08-47d334463c48"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--7d02aeda-311c-4df8-8966-f6ebc4458f43.json b/generated_files/DISARM_STIX/relationship/relationship--7d02aeda-311c-4df8-8966-f6ebc4458f43.json
deleted file mode 100644
index 45c13a1..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--7d02aeda-311c-4df8-8966-f6ebc4458f43.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--e0e67d42-d770-410b-b282-60572203edfa",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--7d02aeda-311c-4df8-8966-f6ebc4458f43",
- "created": "2022-07-02T17:28:37.029001Z",
- "modified": "2022-07-02T17:28:37.029001Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--9b2e19bc-c4ef-4ce5-9e67-55be58b13579",
- "target_ref": "attack-pattern--0c3753ba-ec86-4186-97c8-242aa9d53b0f"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--8146d70a-3a30-48e4-a204-741d7ccc7a4b.json b/generated_files/DISARM_STIX/relationship/relationship--8146d70a-3a30-48e4-a204-741d7ccc7a4b.json
deleted file mode 100644
index 254471b..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--8146d70a-3a30-48e4-a204-741d7ccc7a4b.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--275552de-f77d-41f1-8cfc-4473aefed55f",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--8146d70a-3a30-48e4-a204-741d7ccc7a4b",
- "created": "2022-07-02T17:28:37.024124Z",
- "modified": "2022-07-02T17:28:37.024124Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--1880ffbe-6164-4bb5-9986-7a5fb0d10751",
- "target_ref": "attack-pattern--78596a5d-9d80-4993-81dd-b89edd68cf21"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--8168547d-7d5c-4b49-b0a6-bd4f18265362.json b/generated_files/DISARM_STIX/relationship/relationship--8168547d-7d5c-4b49-b0a6-bd4f18265362.json
new file mode 100644
index 0000000..02e29a0
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--8168547d-7d5c-4b49-b0a6-bd4f18265362.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--fd979924-0925-40f3-933c-82a7dd1a4422",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--8168547d-7d5c-4b49-b0a6-bd4f18265362",
+ "created": "2022-07-02T19:59:12.743774Z",
+ "modified": "2022-07-02T19:59:12.743774Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--da37527d-398a-4ada-b5e8-d4712b696fb6",
+ "target_ref": "attack-pattern--08b0624d-4db7-4d38-838d-c7e970dbb292"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--83bfce9a-5a23-4e2f-86de-5321ec87bfed.json b/generated_files/DISARM_STIX/relationship/relationship--83bfce9a-5a23-4e2f-86de-5321ec87bfed.json
new file mode 100644
index 0000000..6515bdd
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--83bfce9a-5a23-4e2f-86de-5321ec87bfed.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--1e5aefa3-a442-4ac5-848e-707c02abf52a",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--83bfce9a-5a23-4e2f-86de-5321ec87bfed",
+ "created": "2022-07-02T19:59:12.753031Z",
+ "modified": "2022-07-02T19:59:12.753031Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--7e2d4014-b049-4d8a-b902-2f08fd820ef8",
+ "target_ref": "attack-pattern--05792c90-5f5a-42e3-b7bf-b50284f7225e"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--83cc71a7-11d5-4815-b235-618d1d712493.json b/generated_files/DISARM_STIX/relationship/relationship--83cc71a7-11d5-4815-b235-618d1d712493.json
new file mode 100644
index 0000000..7f6a0b7
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--83cc71a7-11d5-4815-b235-618d1d712493.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--e51da0f0-3037-4851-bcd6-9810f495b483",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--83cc71a7-11d5-4815-b235-618d1d712493",
+ "created": "2022-07-02T19:59:12.744857Z",
+ "modified": "2022-07-02T19:59:12.744857Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--a6e4691f-4907-4270-ab84-fbb1b01be00c",
+ "target_ref": "attack-pattern--1059cdf7-3b45-40e6-93d3-b25ef3b6afac"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--84129a03-e70a-4b8e-95e5-b77ccc494c26.json b/generated_files/DISARM_STIX/relationship/relationship--84129a03-e70a-4b8e-95e5-b77ccc494c26.json
new file mode 100644
index 0000000..356884d
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--84129a03-e70a-4b8e-95e5-b77ccc494c26.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--92fbbc83-61d6-4dbc-8678-048ad32295e1",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--84129a03-e70a-4b8e-95e5-b77ccc494c26",
+ "created": "2022-07-02T19:59:12.745827Z",
+ "modified": "2022-07-02T19:59:12.745827Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--cf6ea412-b1f5-46ef-839b-9a550418d5c0",
+ "target_ref": "attack-pattern--1899a266-350e-4e86-ba2a-d783744ff76d"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--85379809-5fc5-4e03-96bc-44b3be12fef8.json b/generated_files/DISARM_STIX/relationship/relationship--85379809-5fc5-4e03-96bc-44b3be12fef8.json
new file mode 100644
index 0000000..de538e7
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--85379809-5fc5-4e03-96bc-44b3be12fef8.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--830f8b4a-f084-4d3c-9cb1-ef844df81056",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--85379809-5fc5-4e03-96bc-44b3be12fef8",
+ "created": "2022-07-02T19:59:12.749336Z",
+ "modified": "2022-07-02T19:59:12.749336Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--970f666f-aa3b-4cea-9ca6-c8e2410dedbb",
+ "target_ref": "attack-pattern--771a4024-a91e-4b1e-8744-c91b32196d63"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--85613672-8f04-479b-8d73-a0034a910968.json b/generated_files/DISARM_STIX/relationship/relationship--85613672-8f04-479b-8d73-a0034a910968.json
deleted file mode 100644
index cc791f4..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--85613672-8f04-479b-8d73-a0034a910968.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--bbd800fb-fb4a-45ee-9390-e77297a4a443",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--85613672-8f04-479b-8d73-a0034a910968",
- "created": "2022-07-02T17:28:37.02866Z",
- "modified": "2022-07-02T17:28:37.02866Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--dee53229-382c-48ab-bad6-1e53ab0c24e4",
- "target_ref": "attack-pattern--ab2961c1-e1bc-4b0d-aae1-7ba73ced39ba"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--85b299df-8f4d-4e1c-95c0-521a36b2ecdd.json b/generated_files/DISARM_STIX/relationship/relationship--85b299df-8f4d-4e1c-95c0-521a36b2ecdd.json
deleted file mode 100644
index 7cfd764..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--85b299df-8f4d-4e1c-95c0-521a36b2ecdd.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--e2226053-655e-4082-aacd-d4f8bcbd5508",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--85b299df-8f4d-4e1c-95c0-521a36b2ecdd",
- "created": "2022-07-02T17:28:37.026274Z",
- "modified": "2022-07-02T17:28:37.026274Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--233e4edf-3f30-456f-9875-2e0965434706",
- "target_ref": "attack-pattern--80cb8777-deb6-4071-8413-7e23f8dfb273"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--86719bf6-bcc0-4812-b8c5-dc6e41406e8f.json b/generated_files/DISARM_STIX/relationship/relationship--86719bf6-bcc0-4812-b8c5-dc6e41406e8f.json
deleted file mode 100644
index 5e4c058..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--86719bf6-bcc0-4812-b8c5-dc6e41406e8f.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--b0ff8ee5-1982-4109-af4a-a14c93ddc078",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--86719bf6-bcc0-4812-b8c5-dc6e41406e8f",
- "created": "2022-07-02T17:28:37.022695Z",
- "modified": "2022-07-02T17:28:37.022695Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--e63da0fd-83f8-443b-9767-eb50759f36c0",
- "target_ref": "attack-pattern--dc48b236-a1f8-4631-9645-bf76dd558c29"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--88153cd7-5a23-478f-81f2-b57b3ca3cbf1.json b/generated_files/DISARM_STIX/relationship/relationship--88153cd7-5a23-478f-81f2-b57b3ca3cbf1.json
deleted file mode 100644
index f29fd54..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--88153cd7-5a23-478f-81f2-b57b3ca3cbf1.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--466852c4-e517-4866-864f-9f274ab28e61",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--88153cd7-5a23-478f-81f2-b57b3ca3cbf1",
- "created": "2022-07-02T17:28:37.02371Z",
- "modified": "2022-07-02T17:28:37.02371Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--04158d63-8072-48ae-a05a-23809682cd1f",
- "target_ref": "attack-pattern--3006fa0c-25d6-4ea8-a9fa-bcaa272fbc1d"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--8818e2a9-bb27-4659-a0a7-c0f4253bec83.json b/generated_files/DISARM_STIX/relationship/relationship--8818e2a9-bb27-4659-a0a7-c0f4253bec83.json
deleted file mode 100644
index 666ea85..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--8818e2a9-bb27-4659-a0a7-c0f4253bec83.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--2e865e95-7367-407b-bc15-26fd54e1c449",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--8818e2a9-bb27-4659-a0a7-c0f4253bec83",
- "created": "2022-07-02T17:28:37.027377Z",
- "modified": "2022-07-02T17:28:37.027377Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--1397b0db-f680-4e24-a827-b0f25e18e56c",
- "target_ref": "attack-pattern--e4737241-ecc0-4ca1-a029-0ecd8b710862"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--8820e913-8a80-4488-a84b-cd99f8013385.json b/generated_files/DISARM_STIX/relationship/relationship--8820e913-8a80-4488-a84b-cd99f8013385.json
new file mode 100644
index 0000000..1bd5903
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--8820e913-8a80-4488-a84b-cd99f8013385.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--5233e1f3-6f2e-48a3-bc93-2069a6fea3e1",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--8820e913-8a80-4488-a84b-cd99f8013385",
+ "created": "2022-07-02T19:59:12.744182Z",
+ "modified": "2022-07-02T19:59:12.744182Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--bdc9c3fd-6f34-4a70-b9a4-d028bce2ea8a",
+ "target_ref": "attack-pattern--a1035e5a-489e-48e5-9a08-4c02118440dc"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--88c5bc5b-bbfc-4538-b7e5-675897307630.json b/generated_files/DISARM_STIX/relationship/relationship--88c5bc5b-bbfc-4538-b7e5-675897307630.json
new file mode 100644
index 0000000..7481c51
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--88c5bc5b-bbfc-4538-b7e5-675897307630.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--407f67f7-88fb-4496-b54c-63807b055e49",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--88c5bc5b-bbfc-4538-b7e5-675897307630",
+ "created": "2022-07-02T19:59:12.753108Z",
+ "modified": "2022-07-02T19:59:12.753108Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--29f4ee70-1a5c-4fcd-b76b-07b7a99b356a",
+ "target_ref": "attack-pattern--05792c90-5f5a-42e3-b7bf-b50284f7225e"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--8a8568b2-aefb-4a73-9fd4-1f972b8ffa5c.json b/generated_files/DISARM_STIX/relationship/relationship--8a8568b2-aefb-4a73-9fd4-1f972b8ffa5c.json
new file mode 100644
index 0000000..fd63fab
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--8a8568b2-aefb-4a73-9fd4-1f972b8ffa5c.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--79d6130d-bedc-47ba-986f-2ad85bd4403e",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--8a8568b2-aefb-4a73-9fd4-1f972b8ffa5c",
+ "created": "2022-07-02T19:59:12.744439Z",
+ "modified": "2022-07-02T19:59:12.744439Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--dd6177db-6803-454a-9ab5-0ab7dcfacde6",
+ "target_ref": "attack-pattern--46b33983-93aa-40b2-b70f-cbcf47e346e3"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--8afe82df-9ec9-49e7-93d5-7d86e37e424e.json b/generated_files/DISARM_STIX/relationship/relationship--8afe82df-9ec9-49e7-93d5-7d86e37e424e.json
deleted file mode 100644
index f732e6d..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--8afe82df-9ec9-49e7-93d5-7d86e37e424e.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--00ac5fd0-dea9-4fac-aa1e-e9da7ff53b26",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--8afe82df-9ec9-49e7-93d5-7d86e37e424e",
- "created": "2022-07-02T17:28:37.02468Z",
- "modified": "2022-07-02T17:28:37.02468Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--91a9dfee-6096-44b3-a266-9bbcf2ddb079",
- "target_ref": "attack-pattern--09c7c07b-108f-41a6-82e1-a5fff2b8182b"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--8d34c19c-cfc7-4855-9c4f-a7370513b1f6.json b/generated_files/DISARM_STIX/relationship/relationship--8d34c19c-cfc7-4855-9c4f-a7370513b1f6.json
deleted file mode 100644
index 767db96..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--8d34c19c-cfc7-4855-9c4f-a7370513b1f6.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--7030ed5d-dec1-41ed-8ceb-4e889131c4ce",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--8d34c19c-cfc7-4855-9c4f-a7370513b1f6",
- "created": "2022-07-02T17:28:37.024956Z",
- "modified": "2022-07-02T17:28:37.024956Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--962602ec-2602-4224-b6bd-413c2c8ec4bf",
- "target_ref": "attack-pattern--09c7c07b-108f-41a6-82e1-a5fff2b8182b"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--8d5130c3-68c5-48f1-bd1c-237795f94693.json b/generated_files/DISARM_STIX/relationship/relationship--8d5130c3-68c5-48f1-bd1c-237795f94693.json
deleted file mode 100644
index d9907b4..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--8d5130c3-68c5-48f1-bd1c-237795f94693.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--a5d73e11-e593-4061-8aa5-2658073e5766",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--8d5130c3-68c5-48f1-bd1c-237795f94693",
- "created": "2022-07-02T17:28:37.025236Z",
- "modified": "2022-07-02T17:28:37.025236Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--1360c84b-8b09-49e5-8950-9d8362008311",
- "target_ref": "attack-pattern--00b0e33d-257e-44e0-9195-0c0c3f290d2c"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--8f70a12c-6ffa-4c0a-8105-f2c5772b206d.json b/generated_files/DISARM_STIX/relationship/relationship--8f70a12c-6ffa-4c0a-8105-f2c5772b206d.json
new file mode 100644
index 0000000..3334cf1
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--8f70a12c-6ffa-4c0a-8105-f2c5772b206d.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--7f0065af-1901-417f-8e44-04be73f10da1",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--8f70a12c-6ffa-4c0a-8105-f2c5772b206d",
+ "created": "2022-07-02T19:59:12.743151Z",
+ "modified": "2022-07-02T19:59:12.743151Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--bb0a5dd6-ce06-4ed2-adb7-bd1e95890005",
+ "target_ref": "attack-pattern--c1adbb6d-74e6-4698-b856-ffbf21ede197"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--9069c9d2-ded1-41b7-8d33-8c78fb54a292.json b/generated_files/DISARM_STIX/relationship/relationship--9069c9d2-ded1-41b7-8d33-8c78fb54a292.json
deleted file mode 100644
index 95401ec..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--9069c9d2-ded1-41b7-8d33-8c78fb54a292.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--9833bd5f-4ea4-4dd6-b3a1-01bc565d9976",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--9069c9d2-ded1-41b7-8d33-8c78fb54a292",
- "created": "2022-07-02T17:28:37.020464Z",
- "modified": "2022-07-02T17:28:37.020464Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--5d3ed9dc-6f1f-43c0-b3d3-3da63a7192d6",
- "target_ref": "attack-pattern--ccde7e48-1f25-46dd-a38f-39758274a024"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--90a3f031-8444-4774-a609-11fe325d64c5.json b/generated_files/DISARM_STIX/relationship/relationship--90a3f031-8444-4774-a609-11fe325d64c5.json
new file mode 100644
index 0000000..30a51fe
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--90a3f031-8444-4774-a609-11fe325d64c5.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--70f4992c-5930-46cb-abd4-75c8b3daed41",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--90a3f031-8444-4774-a609-11fe325d64c5",
+ "created": "2022-07-02T19:59:12.749864Z",
+ "modified": "2022-07-02T19:59:12.749864Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--fa57c091-0ea0-4961-a1f4-99c34eaab23a",
+ "target_ref": "attack-pattern--91a26229-8c2f-46da-b4fb-5dc291ca84ad"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--92bfa6bf-279e-4852-855f-80c98ef0868f.json b/generated_files/DISARM_STIX/relationship/relationship--92bfa6bf-279e-4852-855f-80c98ef0868f.json
new file mode 100644
index 0000000..c3c9c9e
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--92bfa6bf-279e-4852-855f-80c98ef0868f.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--dfc40860-1631-4953-9b2c-128eb0cb3541",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--92bfa6bf-279e-4852-855f-80c98ef0868f",
+ "created": "2022-07-02T19:59:12.745972Z",
+ "modified": "2022-07-02T19:59:12.745972Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--bb7f412a-6e4e-4799-a32c-5ee05016e8b5",
+ "target_ref": "attack-pattern--2b2b06d9-26d3-4e69-93b3-5a3f37363b5f"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--938a4b44-c067-4385-9637-db131728fd8c.json b/generated_files/DISARM_STIX/relationship/relationship--938a4b44-c067-4385-9637-db131728fd8c.json
deleted file mode 100644
index de5db05..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--938a4b44-c067-4385-9637-db131728fd8c.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--2b0cc7ec-9599-4c37-9adb-69c75eddbec1",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--938a4b44-c067-4385-9637-db131728fd8c",
- "created": "2022-07-02T17:28:37.024749Z",
- "modified": "2022-07-02T17:28:37.024749Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--2bd6c575-4b68-4623-bc01-6964c53476cc",
- "target_ref": "attack-pattern--09c7c07b-108f-41a6-82e1-a5fff2b8182b"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--96358892-060a-44ab-b15f-d6e8fc3739d2.json b/generated_files/DISARM_STIX/relationship/relationship--96358892-060a-44ab-b15f-d6e8fc3739d2.json
new file mode 100644
index 0000000..c81ff99
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--96358892-060a-44ab-b15f-d6e8fc3739d2.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--ce71eaf5-99da-43d9-ac29-2cc42b16a538",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--96358892-060a-44ab-b15f-d6e8fc3739d2",
+ "created": "2022-07-02T19:59:12.752875Z",
+ "modified": "2022-07-02T19:59:12.752875Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--0950f50e-8b4d-4c16-93ed-5e52562fc1a7",
+ "target_ref": "attack-pattern--a9ec183d-c4dc-4c17-8571-f6e9dbdc643f"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--96eb0cc5-8863-488f-85b8-13a6a5ca7e2b.json b/generated_files/DISARM_STIX/relationship/relationship--96eb0cc5-8863-488f-85b8-13a6a5ca7e2b.json
deleted file mode 100644
index b69802a..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--96eb0cc5-8863-488f-85b8-13a6a5ca7e2b.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--531f4133-55b1-4649-b5d0-0d1f7a3b15cd",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--96eb0cc5-8863-488f-85b8-13a6a5ca7e2b",
- "created": "2022-07-02T17:28:37.028034Z",
- "modified": "2022-07-02T17:28:37.028034Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--38ac5a3d-12b5-46e5-9875-00514da8587a",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--970cbe10-1cd6-40f2-b384-63ebd57dfe8f.json b/generated_files/DISARM_STIX/relationship/relationship--970cbe10-1cd6-40f2-b384-63ebd57dfe8f.json
deleted file mode 100644
index 279e1e6..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--970cbe10-1cd6-40f2-b384-63ebd57dfe8f.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--0bfc062e-858f-4860-bf8a-cb71972e44cf",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--970cbe10-1cd6-40f2-b384-63ebd57dfe8f",
- "created": "2022-07-02T17:28:37.022132Z",
- "modified": "2022-07-02T17:28:37.022132Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--18dfaddc-b4d8-43dc-baff-e92c4ad7b6c1",
- "target_ref": "attack-pattern--b5a8668d-e35e-406f-b2a9-62bc4aa25cfe"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--9a49ce83-a049-4314-8483-539222063246.json b/generated_files/DISARM_STIX/relationship/relationship--9a49ce83-a049-4314-8483-539222063246.json
new file mode 100644
index 0000000..5d24685
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--9a49ce83-a049-4314-8483-539222063246.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--95b2c2b3-4d6b-4221-b41c-ad0b9f9f0757",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--9a49ce83-a049-4314-8483-539222063246",
+ "created": "2022-07-02T19:59:12.750471Z",
+ "modified": "2022-07-02T19:59:12.750471Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--2c7bded2-3bf3-4c5b-8c70-958b3856dc7a",
+ "target_ref": "attack-pattern--6565d00e-6281-4157-b050-3974e3c55616"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--9b3f4e38-0e7b-4181-8fa6-cccba11a1589.json b/generated_files/DISARM_STIX/relationship/relationship--9b3f4e38-0e7b-4181-8fa6-cccba11a1589.json
deleted file mode 100644
index 84b0602..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--9b3f4e38-0e7b-4181-8fa6-cccba11a1589.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--c8bb2903-970e-44a5-9138-067bffe98a85",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--9b3f4e38-0e7b-4181-8fa6-cccba11a1589",
- "created": "2022-07-02T17:28:37.022557Z",
- "modified": "2022-07-02T17:28:37.022557Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--2fd5387c-c9c4-4de2-bcb7-0ef7364b819c",
- "target_ref": "attack-pattern--dc48b236-a1f8-4631-9645-bf76dd558c29"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--9d638174-d542-4279-be8f-5c617346a51f.json b/generated_files/DISARM_STIX/relationship/relationship--9d638174-d542-4279-be8f-5c617346a51f.json
new file mode 100644
index 0000000..5fcd5c9
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--9d638174-d542-4279-be8f-5c617346a51f.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--10dc16ee-5791-4b11-9615-a61bdbe3bf89",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--9d638174-d542-4279-be8f-5c617346a51f",
+ "created": "2022-07-02T19:59:12.748179Z",
+ "modified": "2022-07-02T19:59:12.748179Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--a0a9b00c-cd91-4bbb-bfe7-546b64d8334d",
+ "target_ref": "attack-pattern--9ae37313-f374-4007-bf44-91d0b85d8e1a"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--9f79b9d0-8312-4b4a-a70b-3b19557e90fd.json b/generated_files/DISARM_STIX/relationship/relationship--9f79b9d0-8312-4b4a-a70b-3b19557e90fd.json
new file mode 100644
index 0000000..ec5b6d3
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--9f79b9d0-8312-4b4a-a70b-3b19557e90fd.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--29c783ea-9424-45a7-9e1b-91d51c85dbc7",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--9f79b9d0-8312-4b4a-a70b-3b19557e90fd",
+ "created": "2022-07-02T19:59:12.747178Z",
+ "modified": "2022-07-02T19:59:12.747178Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--88a99ab0-5135-4c6b-9832-74260b6c1dbd",
+ "target_ref": "attack-pattern--24bd7bc9-64dc-4ec9-b0e0-551c00666462"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--9fe85056-8731-4a6f-96ef-3fe1eee2f18f.json b/generated_files/DISARM_STIX/relationship/relationship--9fe85056-8731-4a6f-96ef-3fe1eee2f18f.json
new file mode 100644
index 0000000..e2ce886
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--9fe85056-8731-4a6f-96ef-3fe1eee2f18f.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--0b2c2ff0-aef1-4dc4-8c8a-721b465f2d76",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--9fe85056-8731-4a6f-96ef-3fe1eee2f18f",
+ "created": "2022-07-02T19:59:12.748735Z",
+ "modified": "2022-07-02T19:59:12.748735Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--0f5cbbee-3e87-4cdc-b544-ee9374919426",
+ "target_ref": "attack-pattern--a5d16185-7fbd-41e8-b549-f8534a570ca9"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--a0300cf6-6307-411f-b911-da7c7f2c7741.json b/generated_files/DISARM_STIX/relationship/relationship--a0300cf6-6307-411f-b911-da7c7f2c7741.json
new file mode 100644
index 0000000..5933749
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--a0300cf6-6307-411f-b911-da7c7f2c7741.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--8c5ff9ad-0b64-4ed0-b16f-7b082ffb439d",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--a0300cf6-6307-411f-b911-da7c7f2c7741",
+ "created": "2022-07-02T19:59:12.754339Z",
+ "modified": "2022-07-02T19:59:12.754339Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--a8cbd92a-bf04-4f6c-85d2-2d8802d3905e",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--a0b188b3-0e74-4944-8b62-732d446d1e89.json b/generated_files/DISARM_STIX/relationship/relationship--a0b188b3-0e74-4944-8b62-732d446d1e89.json
new file mode 100644
index 0000000..078ca2d
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--a0b188b3-0e74-4944-8b62-732d446d1e89.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--4b64ffda-0519-4863-ba87-3ae4db5ab1d8",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--a0b188b3-0e74-4944-8b62-732d446d1e89",
+ "created": "2022-07-02T19:59:12.747107Z",
+ "modified": "2022-07-02T19:59:12.747107Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--02b93bbb-3137-4ffe-8644-599e9a3bec76",
+ "target_ref": "attack-pattern--24bd7bc9-64dc-4ec9-b0e0-551c00666462"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--a2d71b61-4a22-4158-9fe0-6216a3005b94.json b/generated_files/DISARM_STIX/relationship/relationship--a2d71b61-4a22-4158-9fe0-6216a3005b94.json
new file mode 100644
index 0000000..0a9e9e0
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--a2d71b61-4a22-4158-9fe0-6216a3005b94.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--d65defdb-5a59-4321-9210-36c8ff8da79b",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--a2d71b61-4a22-4158-9fe0-6216a3005b94",
+ "created": "2022-07-02T19:59:12.751913Z",
+ "modified": "2022-07-02T19:59:12.751913Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--471067d8-da62-4984-b4f6-e5e8f297babe",
+ "target_ref": "attack-pattern--2506b127-497f-4c10-80ee-6ccfebea2fda"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--a2e4e8e1-1e4e-43c3-8217-7bfc530b7943.json b/generated_files/DISARM_STIX/relationship/relationship--a2e4e8e1-1e4e-43c3-8217-7bfc530b7943.json
new file mode 100644
index 0000000..c435354
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--a2e4e8e1-1e4e-43c3-8217-7bfc530b7943.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--725c7d5f-fd67-40b3-8703-438b55e4a644",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--a2e4e8e1-1e4e-43c3-8217-7bfc530b7943",
+ "created": "2022-07-02T19:59:12.749113Z",
+ "modified": "2022-07-02T19:59:12.749113Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--3b04c334-059e-4983-80c7-c602062352c4",
+ "target_ref": "attack-pattern--d6f1b55e-ccb2-4cd6-9ed0-84d326e51a89"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--a411eee5-77be-4bd4-be84-4b60275c441c.json b/generated_files/DISARM_STIX/relationship/relationship--a411eee5-77be-4bd4-be84-4b60275c441c.json
deleted file mode 100644
index d608692..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--a411eee5-77be-4bd4-be84-4b60275c441c.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--07cfc00b-d4ab-45cf-8795-b78ebdc727d5",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--a411eee5-77be-4bd4-be84-4b60275c441c",
- "created": "2022-07-02T17:28:37.022764Z",
- "modified": "2022-07-02T17:28:37.022764Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--3dc7575f-3242-497a-a47c-23d50e05cbfc",
- "target_ref": "attack-pattern--dc48b236-a1f8-4631-9645-bf76dd558c29"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--a46759f8-d062-4480-9231-f3d2a480275d.json b/generated_files/DISARM_STIX/relationship/relationship--a46759f8-d062-4480-9231-f3d2a480275d.json
new file mode 100644
index 0000000..e092c62
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--a46759f8-d062-4480-9231-f3d2a480275d.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--68624ada-e10e-41d0-9af3-7121d191a108",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--a46759f8-d062-4480-9231-f3d2a480275d",
+ "created": "2022-07-02T19:59:12.746683Z",
+ "modified": "2022-07-02T19:59:12.746683Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--74722b9d-d4cc-4d80-8261-d4e53b3b7af2",
+ "target_ref": "attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--a59f901c-d475-48f0-b6c8-15350aa9e5a3.json b/generated_files/DISARM_STIX/relationship/relationship--a59f901c-d475-48f0-b6c8-15350aa9e5a3.json
deleted file mode 100644
index 1c58ab6..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--a59f901c-d475-48f0-b6c8-15350aa9e5a3.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--42ce430d-c174-425a-95d2-b1f928deb16e",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--a59f901c-d475-48f0-b6c8-15350aa9e5a3",
- "created": "2022-07-02T17:28:37.028591Z",
- "modified": "2022-07-02T17:28:37.028591Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--d0cadcb4-3f75-43cf-9124-86e7caf7ee45",
- "target_ref": "attack-pattern--b7a97f05-92a6-434d-922b-9be6f49225c7"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--a61bbf54-ae7d-4e65-a61d-c32fcd0c9e7a.json b/generated_files/DISARM_STIX/relationship/relationship--a61bbf54-ae7d-4e65-a61d-c32fcd0c9e7a.json
new file mode 100644
index 0000000..5e91fcd
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--a61bbf54-ae7d-4e65-a61d-c32fcd0c9e7a.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--74a98e25-914f-454f-add1-cfed68cfdc76",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--a61bbf54-ae7d-4e65-a61d-c32fcd0c9e7a",
+ "created": "2022-07-02T19:59:12.750545Z",
+ "modified": "2022-07-02T19:59:12.750545Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--c753d5bf-9336-4115-8c8a-18d5a417b6a5",
+ "target_ref": "attack-pattern--6565d00e-6281-4157-b050-3974e3c55616"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--a805d9df-80c1-4f0b-b2e4-5f6e1350878d.json b/generated_files/DISARM_STIX/relationship/relationship--a805d9df-80c1-4f0b-b2e4-5f6e1350878d.json
deleted file mode 100644
index e2dce95..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--a805d9df-80c1-4f0b-b2e4-5f6e1350878d.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--6774bb09-e6e4-4310-85b1-c1df4a2849e1",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--a805d9df-80c1-4f0b-b2e4-5f6e1350878d",
- "created": "2022-07-02T17:28:37.023421Z",
- "modified": "2022-07-02T17:28:37.023421Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--070ebd8c-f578-4334-8f77-06b59315438e",
- "target_ref": "attack-pattern--78c65ad8-b96c-48b2-857d-f9952f3bcb7e"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--a8ae8984-adc0-4f88-a940-bdc5caf92f9e.json b/generated_files/DISARM_STIX/relationship/relationship--a8ae8984-adc0-4f88-a940-bdc5caf92f9e.json
new file mode 100644
index 0000000..8e6a797
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--a8ae8984-adc0-4f88-a940-bdc5caf92f9e.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--14735fc3-2f77-444d-916c-2154e0f6aa0c",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--a8ae8984-adc0-4f88-a940-bdc5caf92f9e",
+ "created": "2022-07-02T19:59:12.751316Z",
+ "modified": "2022-07-02T19:59:12.751316Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--dc7b3aae-7df9-405d-a530-3a753a776a9a",
+ "target_ref": "attack-pattern--4c396c44-aafa-4651-9478-9db90638238d"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--a9cb1f85-5c94-47e3-b6a4-ffd9d5a0ab79.json b/generated_files/DISARM_STIX/relationship/relationship--a9cb1f85-5c94-47e3-b6a4-ffd9d5a0ab79.json
deleted file mode 100644
index 7aa331e..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--a9cb1f85-5c94-47e3-b6a4-ffd9d5a0ab79.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--be61d68b-3157-48ce-ad4c-a6fffe519264",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--a9cb1f85-5c94-47e3-b6a4-ffd9d5a0ab79",
- "created": "2022-07-02T17:28:37.027102Z",
- "modified": "2022-07-02T17:28:37.027102Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--9772c4cc-18fd-4563-8119-0d295f90b088",
- "target_ref": "attack-pattern--e4737241-ecc0-4ca1-a029-0ecd8b710862"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--abc8e022-6d45-4440-8f0b-9e5828699097.json b/generated_files/DISARM_STIX/relationship/relationship--abc8e022-6d45-4440-8f0b-9e5828699097.json
deleted file mode 100644
index 238745b..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--abc8e022-6d45-4440-8f0b-9e5828699097.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--b824cbaf-4a83-4da3-979c-7c21bf8860ed",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--abc8e022-6d45-4440-8f0b-9e5828699097",
- "created": "2022-07-02T17:28:37.025856Z",
- "modified": "2022-07-02T17:28:37.025856Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--37b3cf33-f0bf-40ed-9b97-0bb74ede8923",
- "target_ref": "attack-pattern--9fd0219a-66d7-49a1-ab9e-856ea5e25c98"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--ac006c4f-4fba-4351-9fe7-c3b21ca6b803.json b/generated_files/DISARM_STIX/relationship/relationship--ac006c4f-4fba-4351-9fe7-c3b21ca6b803.json
new file mode 100644
index 0000000..b8fa593
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--ac006c4f-4fba-4351-9fe7-c3b21ca6b803.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--151c522f-f0b6-47dc-a9d3-df0a8a671a17",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--ac006c4f-4fba-4351-9fe7-c3b21ca6b803",
+ "created": "2022-07-02T19:59:12.755105Z",
+ "modified": "2022-07-02T19:59:12.755105Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--aa0a3435-a9b6-4b5e-9874-0aa4a4a828d0",
+ "target_ref": "attack-pattern--bde29c42-3bce-4ba4-b09a-c2d6d685a5a0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--aca119ff-0bf4-44b7-a4f1-add1574787c4.json b/generated_files/DISARM_STIX/relationship/relationship--aca119ff-0bf4-44b7-a4f1-add1574787c4.json
deleted file mode 100644
index 2deb16a..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--aca119ff-0bf4-44b7-a4f1-add1574787c4.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--c751c8a8-63df-4ab2-b9c0-8ef0e32106f4",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--aca119ff-0bf4-44b7-a4f1-add1574787c4",
- "created": "2022-07-02T17:28:37.022485Z",
- "modified": "2022-07-02T17:28:37.022485Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--7b6755fc-a945-4ee8-9547-34be9f979b92",
- "target_ref": "attack-pattern--8f74ba8b-807b-4b71-81fd-d1fa6edcc1a7"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--acc4bfdd-841b-455a-a995-8d6774c6f5d9.json b/generated_files/DISARM_STIX/relationship/relationship--acc4bfdd-841b-455a-a995-8d6774c6f5d9.json
new file mode 100644
index 0000000..9fb80d5
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--acc4bfdd-841b-455a-a995-8d6774c6f5d9.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--7269c5a0-9f5c-4942-8d46-4fcbc34ef4cd",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--acc4bfdd-841b-455a-a995-8d6774c6f5d9",
+ "created": "2022-07-02T19:59:12.755742Z",
+ "modified": "2022-07-02T19:59:12.755742Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--dd6a5e38-a8cd-48a7-9f76-c320cb8305b7",
+ "target_ref": "attack-pattern--47939552-d779-467a-b393-92d25b0f9561"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--acc9e3ec-1d4b-4fe1-9704-f39322e91cb0.json b/generated_files/DISARM_STIX/relationship/relationship--acc9e3ec-1d4b-4fe1-9704-f39322e91cb0.json
deleted file mode 100644
index 7fe4aa0..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--acc9e3ec-1d4b-4fe1-9704-f39322e91cb0.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--4b25a612-7812-4f05-a371-18c76cf5ef72",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--acc9e3ec-1d4b-4fe1-9704-f39322e91cb0",
- "created": "2022-07-02T17:28:37.020946Z",
- "modified": "2022-07-02T17:28:37.020946Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--d673e8b6-858b-4b8e-b396-4bf840217fc1",
- "target_ref": "attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--ad6a239a-e1b6-47b0-86af-7c757dc07fb5.json b/generated_files/DISARM_STIX/relationship/relationship--ad6a239a-e1b6-47b0-86af-7c757dc07fb5.json
deleted file mode 100644
index e7828e0..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--ad6a239a-e1b6-47b0-86af-7c757dc07fb5.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--11f815d8-9850-4515-a265-8a355dc76a17",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--ad6a239a-e1b6-47b0-86af-7c757dc07fb5",
- "created": "2022-07-02T17:28:37.029138Z",
- "modified": "2022-07-02T17:28:37.029138Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--2da637f8-4277-4a95-8dc4-c17a92be1281",
- "target_ref": "attack-pattern--0c3753ba-ec86-4186-97c8-242aa9d53b0f"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--ad7f42f8-d02b-4911-880c-3741e145d59e.json b/generated_files/DISARM_STIX/relationship/relationship--ad7f42f8-d02b-4911-880c-3741e145d59e.json
deleted file mode 100644
index 354fd4b..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--ad7f42f8-d02b-4911-880c-3741e145d59e.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--f1e42493-6c58-4d58-848c-4201002be38e",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--ad7f42f8-d02b-4911-880c-3741e145d59e",
- "created": "2022-07-02T17:28:37.022204Z",
- "modified": "2022-07-02T17:28:37.022204Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--87790d44-0beb-434e-bfae-178a7765a765",
- "target_ref": "attack-pattern--75b32a49-e97e-4f8d-884a-870fad05bcc6"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--ad859dbe-9bc0-4f8a-8174-38f290412c56.json b/generated_files/DISARM_STIX/relationship/relationship--ad859dbe-9bc0-4f8a-8174-38f290412c56.json
new file mode 100644
index 0000000..731fd09
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--ad859dbe-9bc0-4f8a-8174-38f290412c56.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--c8c145e6-799e-4dd8-aeec-ad2f6547e8c2",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--ad859dbe-9bc0-4f8a-8174-38f290412c56",
+ "created": "2022-07-02T19:59:12.753919Z",
+ "modified": "2022-07-02T19:59:12.753919Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--6743a7f5-1cbd-470a-afcc-bbd48afdcfc0",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--ae2a3a7f-194d-46be-a4ee-435a188a86df.json b/generated_files/DISARM_STIX/relationship/relationship--ae2a3a7f-194d-46be-a4ee-435a188a86df.json
deleted file mode 100644
index 8802a00..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--ae2a3a7f-194d-46be-a4ee-435a188a86df.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--8f44e9f0-fb57-474d-9d47-b13cfda3588a",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--ae2a3a7f-194d-46be-a4ee-435a188a86df",
- "created": "2022-07-02T17:28:37.019424Z",
- "modified": "2022-07-02T17:28:37.019424Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--095aa344-86dc-4488-a1d7-a8a7c1363d4a",
- "target_ref": "attack-pattern--2f9be5f3-9474-46c1-9bf8-038577c4b6a8"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--ae8f316d-e39f-4d84-a58d-ce2dd1c588dc.json b/generated_files/DISARM_STIX/relationship/relationship--ae8f316d-e39f-4d84-a58d-ce2dd1c588dc.json
deleted file mode 100644
index dc4e372..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--ae8f316d-e39f-4d84-a58d-ce2dd1c588dc.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--677eb35c-a4e4-412b-b60a-d7036518c393",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--ae8f316d-e39f-4d84-a58d-ce2dd1c588dc",
- "created": "2022-07-02T17:28:37.027515Z",
- "modified": "2022-07-02T17:28:37.027515Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--b410c8af-d88e-483e-bf89-594d70de8f11",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--aeeb4ff8-62cb-491e-acdf-b7b973a470de.json b/generated_files/DISARM_STIX/relationship/relationship--aeeb4ff8-62cb-491e-acdf-b7b973a470de.json
deleted file mode 100644
index f161d47..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--aeeb4ff8-62cb-491e-acdf-b7b973a470de.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--7c8a2ef6-64b8-4cd9-837e-1949b8828b80",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--aeeb4ff8-62cb-491e-acdf-b7b973a470de",
- "created": "2022-07-02T17:28:37.026068Z",
- "modified": "2022-07-02T17:28:37.026068Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--08ee90a4-5d68-4c14-bd0a-583535d27b92",
- "target_ref": "attack-pattern--2f2745b8-801a-41b5-b85a-ffba5caf53c4"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--af49029d-64f3-44fd-ab74-15f41e2b23f5.json b/generated_files/DISARM_STIX/relationship/relationship--af49029d-64f3-44fd-ab74-15f41e2b23f5.json
deleted file mode 100644
index bc325a4..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--af49029d-64f3-44fd-ab74-15f41e2b23f5.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--b9703208-cae0-474e-9059-ce29b4a84c25",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--af49029d-64f3-44fd-ab74-15f41e2b23f5",
- "created": "2022-07-02T17:28:37.021014Z",
- "modified": "2022-07-02T17:28:37.021014Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--4db9874c-0b6b-4159-8ef9-1ecae17677cc",
- "target_ref": "attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--b0223488-0819-46d8-97cc-31a010225aff.json b/generated_files/DISARM_STIX/relationship/relationship--b0223488-0819-46d8-97cc-31a010225aff.json
new file mode 100644
index 0000000..4cb9fbb
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--b0223488-0819-46d8-97cc-31a010225aff.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--9daa1f62-eb72-48ec-9d4c-c98b59f767e6",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--b0223488-0819-46d8-97cc-31a010225aff",
+ "created": "2022-07-02T19:59:12.743441Z",
+ "modified": "2022-07-02T19:59:12.743441Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--06504d3c-f7cc-46fd-a6a4-5f1fb3291232",
+ "target_ref": "attack-pattern--04f0b6bb-47f6-430e-ae9d-0a4188eb9388"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--b1116d3b-722e-4413-bad5-33d5d876b52d.json b/generated_files/DISARM_STIX/relationship/relationship--b1116d3b-722e-4413-bad5-33d5d876b52d.json
new file mode 100644
index 0000000..c24f52a
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--b1116d3b-722e-4413-bad5-33d5d876b52d.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--0c778487-d976-451a-b6da-3bb7bdcc1ec3",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--b1116d3b-722e-4413-bad5-33d5d876b52d",
+ "created": "2022-07-02T19:59:12.755029Z",
+ "modified": "2022-07-02T19:59:12.755029Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--dce18434-811e-4284-9e14-a7a1bac3fc23",
+ "target_ref": "attack-pattern--6632ab1a-e798-45f7-8703-e09c110f11ea"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--b1ffcd2c-358d-4e76-855b-7b63f706f3fc.json b/generated_files/DISARM_STIX/relationship/relationship--b1ffcd2c-358d-4e76-855b-7b63f706f3fc.json
deleted file mode 100644
index 252134a..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--b1ffcd2c-358d-4e76-855b-7b63f706f3fc.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--64608c75-a8ff-47d7-a67a-dfa7e228fb7c",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--b1ffcd2c-358d-4e76-855b-7b63f706f3fc",
- "created": "2022-07-02T17:28:37.027172Z",
- "modified": "2022-07-02T17:28:37.027172Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--a495269c-e4e5-4a1a-88f4-7554c43a8a56",
- "target_ref": "attack-pattern--e4737241-ecc0-4ca1-a029-0ecd8b710862"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--b2777be2-15ab-4732-aa7e-9ddbac1f85db.json b/generated_files/DISARM_STIX/relationship/relationship--b2777be2-15ab-4732-aa7e-9ddbac1f85db.json
new file mode 100644
index 0000000..1f2bceb
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--b2777be2-15ab-4732-aa7e-9ddbac1f85db.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--e5dfa04c-329e-4b01-b50b-9cf4f0889379",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--b2777be2-15ab-4732-aa7e-9ddbac1f85db",
+ "created": "2022-07-02T19:59:12.752544Z",
+ "modified": "2022-07-02T19:59:12.752544Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--aa481717-27f3-4896-a28e-44cb68291a6f",
+ "target_ref": "attack-pattern--72e298d1-2ba8-47cb-839a-3a4c06a75de4"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--b33881ef-90a4-48b9-8174-6321b3ff37dd.json b/generated_files/DISARM_STIX/relationship/relationship--b33881ef-90a4-48b9-8174-6321b3ff37dd.json
new file mode 100644
index 0000000..ec680a5
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--b33881ef-90a4-48b9-8174-6321b3ff37dd.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--862a1be2-d1f6-4860-803f-f0c876854e34",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--b33881ef-90a4-48b9-8174-6321b3ff37dd",
+ "created": "2022-07-02T19:59:12.751163Z",
+ "modified": "2022-07-02T19:59:12.751163Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--539ad344-a6e3-4cff-aae8-bc592d7404a1",
+ "target_ref": "attack-pattern--bc05d8a7-e306-4112-9826-75687e7cba5c"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--b3e9ba68-6e98-4703-af2f-f76bff5ae91e.json b/generated_files/DISARM_STIX/relationship/relationship--b3e9ba68-6e98-4703-af2f-f76bff5ae91e.json
new file mode 100644
index 0000000..be72308
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--b3e9ba68-6e98-4703-af2f-f76bff5ae91e.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--5a356707-8a5e-4fe1-a560-f49da8f229c1",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--b3e9ba68-6e98-4703-af2f-f76bff5ae91e",
+ "created": "2022-07-02T19:59:12.754183Z",
+ "modified": "2022-07-02T19:59:12.754183Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--22aa8f48-20f8-4b96-bd44-2ae1b1621447",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--b508e8c0-b951-4c4c-98fe-d9a465dd6f48.json b/generated_files/DISARM_STIX/relationship/relationship--b508e8c0-b951-4c4c-98fe-d9a465dd6f48.json
deleted file mode 100644
index 020d798..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--b508e8c0-b951-4c4c-98fe-d9a465dd6f48.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--0465a645-a2e8-4cde-9c84-b047a843b374",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--b508e8c0-b951-4c4c-98fe-d9a465dd6f48",
- "created": "2022-07-02T17:28:37.023986Z",
- "modified": "2022-07-02T17:28:37.023986Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--edea2df0-2c56-46b7-9264-1622a44476e2",
- "target_ref": "attack-pattern--41bdae21-3938-47e4-81e9-a4ffa5cffb61"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--b733ce71-9f73-414a-b92d-c3195feafe13.json b/generated_files/DISARM_STIX/relationship/relationship--b733ce71-9f73-414a-b92d-c3195feafe13.json
new file mode 100644
index 0000000..a55a0dc
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--b733ce71-9f73-414a-b92d-c3195feafe13.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--54fbde8c-4461-46f0-b512-694401eeb86b",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--b733ce71-9f73-414a-b92d-c3195feafe13",
+ "created": "2022-07-02T19:59:12.751985Z",
+ "modified": "2022-07-02T19:59:12.751985Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--90b784fc-b681-48ab-a15e-f9e38ff64f27",
+ "target_ref": "attack-pattern--8b1caa97-3fa6-4615-8646-30234d0399ce"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--b78482dd-9587-4e46-97c0-fa72ed89f96a.json b/generated_files/DISARM_STIX/relationship/relationship--b78482dd-9587-4e46-97c0-fa72ed89f96a.json
new file mode 100644
index 0000000..4143c7e
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--b78482dd-9587-4e46-97c0-fa72ed89f96a.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--0d23171c-0174-4da6-bc61-920e80ee8f47",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--b78482dd-9587-4e46-97c0-fa72ed89f96a",
+ "created": "2022-07-02T19:59:12.748255Z",
+ "modified": "2022-07-02T19:59:12.748255Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--7be98bc2-6d02-413b-bf2d-cd3f71a72526",
+ "target_ref": "attack-pattern--9ae37313-f374-4007-bf44-91d0b85d8e1a"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--b90eb555-d31e-4e98-b337-fe622f08bd5d.json b/generated_files/DISARM_STIX/relationship/relationship--b90eb555-d31e-4e98-b337-fe622f08bd5d.json
new file mode 100644
index 0000000..968ce3b
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--b90eb555-d31e-4e98-b337-fe622f08bd5d.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--f5dde5c6-0c39-46bc-a42c-d6b870fab1ea",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--b90eb555-d31e-4e98-b337-fe622f08bd5d",
+ "created": "2022-07-02T19:59:12.743997Z",
+ "modified": "2022-07-02T19:59:12.743997Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--dd4a7b60-a845-46d7-a189-dc05fc8a247c",
+ "target_ref": "attack-pattern--6fc3a1a6-7989-4d46-8dc5-25ec1be29106"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--b9b54052-f207-45dd-88d1-fb00048e6f51.json b/generated_files/DISARM_STIX/relationship/relationship--b9b54052-f207-45dd-88d1-fb00048e6f51.json
new file mode 100644
index 0000000..c6d7788
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--b9b54052-f207-45dd-88d1-fb00048e6f51.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--b3790fa3-da21-4c4a-9682-69e1b6620fea",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--b9b54052-f207-45dd-88d1-fb00048e6f51",
+ "created": "2022-07-02T19:59:12.750321Z",
+ "modified": "2022-07-02T19:59:12.750321Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--98966f30-7ef7-4620-a9b1-20869084b669",
+ "target_ref": "attack-pattern--6565d00e-6281-4157-b050-3974e3c55616"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--ba28b76a-677e-4358-994d-09fff02d0be5.json b/generated_files/DISARM_STIX/relationship/relationship--ba28b76a-677e-4358-994d-09fff02d0be5.json
new file mode 100644
index 0000000..c665c66
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--ba28b76a-677e-4358-994d-09fff02d0be5.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--8e64b5e0-3b6c-41b3-ab61-82edbddd5c0b",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--ba28b76a-677e-4358-994d-09fff02d0be5",
+ "created": "2022-07-02T19:59:12.753566Z",
+ "modified": "2022-07-02T19:59:12.753566Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--107e3180-34f6-4e11-a952-705df35b52f7",
+ "target_ref": "attack-pattern--a18dda94-01e8-413a-98c4-125f28091614"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--ba4e3f23-5568-4f00-971e-4049569e6e11.json b/generated_files/DISARM_STIX/relationship/relationship--ba4e3f23-5568-4f00-971e-4049569e6e11.json
new file mode 100644
index 0000000..58480e3
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--ba4e3f23-5568-4f00-971e-4049569e6e11.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--dbbb411c-6d02-4b1c-8d96-b622e37ba5c4",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--ba4e3f23-5568-4f00-971e-4049569e6e11",
+ "created": "2022-07-02T19:59:12.75093Z",
+ "modified": "2022-07-02T19:59:12.75093Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--809f414f-c81e-448a-8e2b-14704a0b743a",
+ "target_ref": "attack-pattern--dee6a0f9-6e1c-40fb-b347-b0d181d37c32"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--ba583f86-e5e5-43f8-b0aa-17b95c18caba.json b/generated_files/DISARM_STIX/relationship/relationship--ba583f86-e5e5-43f8-b0aa-17b95c18caba.json
new file mode 100644
index 0000000..2fc0867
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--ba583f86-e5e5-43f8-b0aa-17b95c18caba.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--2991625a-4bde-448d-a890-321367ced28b",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--ba583f86-e5e5-43f8-b0aa-17b95c18caba",
+ "created": "2022-07-02T19:59:12.746614Z",
+ "modified": "2022-07-02T19:59:12.746614Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--0f3f9883-6db6-4936-94ce-e89e0f994f6d",
+ "target_ref": "attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--babe3471-e21b-49f8-b75a-c60873287e78.json b/generated_files/DISARM_STIX/relationship/relationship--babe3471-e21b-49f8-b75a-c60873287e78.json
deleted file mode 100644
index f57b043..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--babe3471-e21b-49f8-b75a-c60873287e78.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--c31955b2-821c-440b-9f19-57a764b1d490",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--babe3471-e21b-49f8-b75a-c60873287e78",
- "created": "2022-07-02T17:28:37.028381Z",
- "modified": "2022-07-02T17:28:37.028381Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--d6d1b5a1-b4b2-4743-913a-ae241a3ffab4",
- "target_ref": "attack-pattern--c236acce-da3a-44b6-ab3a-24268c897c0e"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--bb6c0c2d-df2e-49bd-afd5-7b5536770bb7.json b/generated_files/DISARM_STIX/relationship/relationship--bb6c0c2d-df2e-49bd-afd5-7b5536770bb7.json
new file mode 100644
index 0000000..f0d44e5
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--bb6c0c2d-df2e-49bd-afd5-7b5536770bb7.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--bbdc273e-440a-487a-9866-6753ea24fcd5",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--bb6c0c2d-df2e-49bd-afd5-7b5536770bb7",
+ "created": "2022-07-02T19:59:12.751009Z",
+ "modified": "2022-07-02T19:59:12.751009Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--71f9d8d7-d6c4-4815-a56a-7dfee6d18c30",
+ "target_ref": "attack-pattern--92b5c39b-f162-482d-8704-e109b453f35f"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--bcb0b08d-beba-4fb3-b4cc-3e60b556de54.json b/generated_files/DISARM_STIX/relationship/relationship--bcb0b08d-beba-4fb3-b4cc-3e60b556de54.json
deleted file mode 100644
index fba66a2..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--bcb0b08d-beba-4fb3-b4cc-3e60b556de54.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--74560339-041e-4cc2-85f9-344aed38c488",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--bcb0b08d-beba-4fb3-b4cc-3e60b556de54",
- "created": "2022-07-02T17:28:37.018286Z",
- "modified": "2022-07-02T17:28:37.018286Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--cbb1d58a-133a-45ff-8e58-1e96660d647d",
- "target_ref": "attack-pattern--f8d9b96f-0edc-419e-b5f0-557f4588bf90"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--bcdb111d-6ec8-4607-ae1f-5753493e3cb3.json b/generated_files/DISARM_STIX/relationship/relationship--bcdb111d-6ec8-4607-ae1f-5753493e3cb3.json
deleted file mode 100644
index 39e551f..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--bcdb111d-6ec8-4607-ae1f-5753493e3cb3.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--b2e55b34-ca4d-4667-a674-d24d67b6f9d5",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--bcdb111d-6ec8-4607-ae1f-5753493e3cb3",
- "created": "2022-07-02T17:28:37.027869Z",
- "modified": "2022-07-02T17:28:37.027869Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--8c2967be-eca2-4a8e-948c-b94e0ca8e436",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--bce4d833-715a-4235-9b0e-e93243269189.json b/generated_files/DISARM_STIX/relationship/relationship--bce4d833-715a-4235-9b0e-e93243269189.json
deleted file mode 100644
index f46d6f5..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--bce4d833-715a-4235-9b0e-e93243269189.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--3b99a614-0fab-43ee-945c-e1fd91f9bec9",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--bce4d833-715a-4235-9b0e-e93243269189",
- "created": "2022-07-02T17:28:37.023039Z",
- "modified": "2022-07-02T17:28:37.023039Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--4cf400f0-0874-4b3f-86ac-5e55dda4506e",
- "target_ref": "attack-pattern--939d0f04-b080-47cc-ad3a-c971084d37ca"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--be604ddd-4851-416c-b4c9-3c4f9e25803e.json b/generated_files/DISARM_STIX/relationship/relationship--be604ddd-4851-416c-b4c9-3c4f9e25803e.json
new file mode 100644
index 0000000..2191089
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--be604ddd-4851-416c-b4c9-3c4f9e25803e.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--43aa60fb-81e6-406a-87d5-175f21acbfa1",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--be604ddd-4851-416c-b4c9-3c4f9e25803e",
+ "created": "2022-07-02T19:59:12.75169Z",
+ "modified": "2022-07-02T19:59:12.75169Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--0d6d9eb1-1113-46a5-a518-ac21258eb513",
+ "target_ref": "attack-pattern--bbb40d99-27b8-4bea-b294-92a07a8121b1"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--bed17d47-3230-4493-b9f7-3a0883f7d9a8.json b/generated_files/DISARM_STIX/relationship/relationship--bed17d47-3230-4493-b9f7-3a0883f7d9a8.json
new file mode 100644
index 0000000..6525c6c
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--bed17d47-3230-4493-b9f7-3a0883f7d9a8.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--25451fe6-0f66-49bc-a018-84f9a79f93a3",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--bed17d47-3230-4493-b9f7-3a0883f7d9a8",
+ "created": "2022-07-02T19:59:12.747036Z",
+ "modified": "2022-07-02T19:59:12.747036Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--1d658549-c2db-4d51-805e-7f2577fe1a95",
+ "target_ref": "attack-pattern--acb35a90-5c38-42f4-a32e-5e96bacf0e33"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--bf5c8ac0-b62d-4559-89de-97a8c91d81b8.json b/generated_files/DISARM_STIX/relationship/relationship--bf5c8ac0-b62d-4559-89de-97a8c91d81b8.json
new file mode 100644
index 0000000..3284e02
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--bf5c8ac0-b62d-4559-89de-97a8c91d81b8.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--5ca07bbd-5fe6-4676-9710-f1b84644e3fc",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--bf5c8ac0-b62d-4559-89de-97a8c91d81b8",
+ "created": "2022-07-02T19:59:12.755492Z",
+ "modified": "2022-07-02T19:59:12.755492Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--501987ea-c8a7-494e-a250-f5f25314959c",
+ "target_ref": "attack-pattern--47939552-d779-467a-b393-92d25b0f9561"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--c0539e77-1139-45d0-b05b-35c6453a0e26.json b/generated_files/DISARM_STIX/relationship/relationship--c0539e77-1139-45d0-b05b-35c6453a0e26.json
deleted file mode 100644
index 59dfacd..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--c0539e77-1139-45d0-b05b-35c6453a0e26.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--9110ea72-202e-46c6-892e-7d23e12fe306",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--c0539e77-1139-45d0-b05b-35c6453a0e26",
- "created": "2022-07-02T17:28:37.018447Z",
- "modified": "2022-07-02T17:28:37.018447Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--c11289f8-7f05-4975-a789-a089d34d96dd",
- "target_ref": "attack-pattern--63ecf892-add4-4423-a27f-e49e63406771"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--c081b526-ed45-488c-bd37-ef4a3fb7036b.json b/generated_files/DISARM_STIX/relationship/relationship--c081b526-ed45-488c-bd37-ef4a3fb7036b.json
deleted file mode 100644
index a9d6650..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--c081b526-ed45-488c-bd37-ef4a3fb7036b.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--78578c3b-c9da-44e9-a37b-3a5714e1e225",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--c081b526-ed45-488c-bd37-ef4a3fb7036b",
- "created": "2022-07-02T17:28:37.021706Z",
- "modified": "2022-07-02T17:28:37.021706Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--12cd627c-2617-486e-bcbf-a5bf5f467286",
- "target_ref": "attack-pattern--89258f59-9d58-42c6-9fbb-ceffd2530a76"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--c30bb10b-8aea-4d45-b827-a57ca8d0dcc8.json b/generated_files/DISARM_STIX/relationship/relationship--c30bb10b-8aea-4d45-b827-a57ca8d0dcc8.json
new file mode 100644
index 0000000..145570b
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--c30bb10b-8aea-4d45-b827-a57ca8d0dcc8.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--f334fcba-1886-4d43-923f-0baddd9d6e1d",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--c30bb10b-8aea-4d45-b827-a57ca8d0dcc8",
+ "created": "2022-07-02T19:59:12.745236Z",
+ "modified": "2022-07-02T19:59:12.745236Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--3cdec22a-d46b-4fab-b15a-20db08e58221",
+ "target_ref": "attack-pattern--e8310cb2-e346-47a7-8410-7f0dc34f2ac2"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--c3b1b730-6b60-4e76-b233-93b51e0320ce.json b/generated_files/DISARM_STIX/relationship/relationship--c3b1b730-6b60-4e76-b233-93b51e0320ce.json
new file mode 100644
index 0000000..ecd0e6e
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--c3b1b730-6b60-4e76-b233-93b51e0320ce.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--b84c9cff-02e6-45df-81be-091919303c6a",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--c3b1b730-6b60-4e76-b233-93b51e0320ce",
+ "created": "2022-07-02T19:59:12.744702Z",
+ "modified": "2022-07-02T19:59:12.744702Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--7cab144f-1942-4393-8f30-25d1f73160b6",
+ "target_ref": "attack-pattern--1059cdf7-3b45-40e6-93d3-b25ef3b6afac"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--c41e1f2d-ddff-4058-a616-07d02bd9a4e7.json b/generated_files/DISARM_STIX/relationship/relationship--c41e1f2d-ddff-4058-a616-07d02bd9a4e7.json
new file mode 100644
index 0000000..940b742
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--c41e1f2d-ddff-4058-a616-07d02bd9a4e7.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--cf1e7cf7-fdaa-46e2-bbf2-851390c50f4a",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--c41e1f2d-ddff-4058-a616-07d02bd9a4e7",
+ "created": "2022-07-02T19:59:12.74926Z",
+ "modified": "2022-07-02T19:59:12.74926Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--4163a8ac-c555-49bf-a17e-b9e15036b667",
+ "target_ref": "attack-pattern--dc5fe86d-bf2c-4e17-8d7b-9e3cfa6a0683"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--c4f5f409-9bd0-4883-b2e6-0807612c3d0b.json b/generated_files/DISARM_STIX/relationship/relationship--c4f5f409-9bd0-4883-b2e6-0807612c3d0b.json
new file mode 100644
index 0000000..d4bfd4a
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--c4f5f409-9bd0-4883-b2e6-0807612c3d0b.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--12cfcf68-559f-497d-95a5-875a23e1a8bb",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--c4f5f409-9bd0-4883-b2e6-0807612c3d0b",
+ "created": "2022-07-02T19:59:12.752366Z",
+ "modified": "2022-07-02T19:59:12.752366Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--8409255c-b2a4-41c4-8a32-784dab41e289",
+ "target_ref": "attack-pattern--d1bed9f5-c57a-463b-a7e0-1217d5e91eeb"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--c58d0428-1fef-47a9-81f9-76e604d7866b.json b/generated_files/DISARM_STIX/relationship/relationship--c58d0428-1fef-47a9-81f9-76e604d7866b.json
deleted file mode 100644
index 1ee9abd..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--c58d0428-1fef-47a9-81f9-76e604d7866b.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--812588b9-8db4-4e2c-8028-0d899f89196c",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--c58d0428-1fef-47a9-81f9-76e604d7866b",
- "created": "2022-07-02T17:28:37.025025Z",
- "modified": "2022-07-02T17:28:37.025025Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--494544eb-fb55-41f6-82f2-c2a180ebd8b4",
- "target_ref": "attack-pattern--cb89181b-cb31-4902-ba50-930ca46b86fc"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--c60fa99a-da28-4ee6-8ca9-20a804dbabe6.json b/generated_files/DISARM_STIX/relationship/relationship--c60fa99a-da28-4ee6-8ca9-20a804dbabe6.json
deleted file mode 100644
index 23619a4..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--c60fa99a-da28-4ee6-8ca9-20a804dbabe6.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--22f6191a-cecf-4a3f-b526-a6aec7a22937",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--c60fa99a-da28-4ee6-8ca9-20a804dbabe6",
- "created": "2022-07-02T17:28:37.029276Z",
- "modified": "2022-07-02T17:28:37.029276Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--38a623d7-b925-49be-ac03-cae2586cea18",
- "target_ref": "attack-pattern--cbf66a9a-6f05-4508-9ab9-c0f6a2ecdcc6"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--c7ce46fa-e539-4e6e-bf88-ae92835f65e4.json b/generated_files/DISARM_STIX/relationship/relationship--c7ce46fa-e539-4e6e-bf88-ae92835f65e4.json
deleted file mode 100644
index 8f0ebe6..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--c7ce46fa-e539-4e6e-bf88-ae92835f65e4.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--a088a580-131c-4f44-9721-838c8080f849",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--c7ce46fa-e539-4e6e-bf88-ae92835f65e4",
- "created": "2022-07-02T17:28:37.023779Z",
- "modified": "2022-07-02T17:28:37.023779Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--ed4f4eb5-994b-45b3-9018-7a8cd5d6f16a",
- "target_ref": "attack-pattern--fbff3e68-3833-46aa-8b05-223b16c12608"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--c8c9776e-7041-412a-96d9-81a8a81464e2.json b/generated_files/DISARM_STIX/relationship/relationship--c8c9776e-7041-412a-96d9-81a8a81464e2.json
deleted file mode 100644
index 81fd7e5..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--c8c9776e-7041-412a-96d9-81a8a81464e2.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--55a3cf3c-3854-4a7e-9f41-858c1018b34e",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--c8c9776e-7041-412a-96d9-81a8a81464e2",
- "created": "2022-07-02T17:28:37.020118Z",
- "modified": "2022-07-02T17:28:37.020118Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--96893208-0e96-4154-b045-4fc1bdaf4af3",
- "target_ref": "attack-pattern--c2651250-61d5-4cfa-92f2-4745198e0c29"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--c9505ac0-dd73-4821-ba07-9af8bd3abacc.json b/generated_files/DISARM_STIX/relationship/relationship--c9505ac0-dd73-4821-ba07-9af8bd3abacc.json
deleted file mode 100644
index dcb0809..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--c9505ac0-dd73-4821-ba07-9af8bd3abacc.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--1adce9c1-58e9-42f2-ad6e-725a282f708b",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--c9505ac0-dd73-4821-ba07-9af8bd3abacc",
- "created": "2022-07-02T17:28:37.019006Z",
- "modified": "2022-07-02T17:28:37.019006Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--1d8883bc-3e8c-406d-ad8e-f7d660d05494",
- "target_ref": "attack-pattern--c96daf1f-ac43-40d9-88a7-0f6244a38c3c"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--cb5ce666-b123-4c1b-a913-6e7b79dd88d3.json b/generated_files/DISARM_STIX/relationship/relationship--cb5ce666-b123-4c1b-a913-6e7b79dd88d3.json
new file mode 100644
index 0000000..2c144f2
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--cb5ce666-b123-4c1b-a913-6e7b79dd88d3.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--c56471de-5314-4467-94e4-1dc6183a59af",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--cb5ce666-b123-4c1b-a913-6e7b79dd88d3",
+ "created": "2022-07-02T19:59:12.746825Z",
+ "modified": "2022-07-02T19:59:12.746825Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--cadb4dca-7f14-4616-a515-c211d418c4c9",
+ "target_ref": "attack-pattern--acb35a90-5c38-42f4-a32e-5e96bacf0e33"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--ccf9d6cd-ec91-425d-89ef-c1f331567040.json b/generated_files/DISARM_STIX/relationship/relationship--ccf9d6cd-ec91-425d-89ef-c1f331567040.json
new file mode 100644
index 0000000..2208f8f
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--ccf9d6cd-ec91-425d-89ef-c1f331567040.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--cf39eda6-e45e-4e8a-a513-b79055ae2ef7",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--ccf9d6cd-ec91-425d-89ef-c1f331567040",
+ "created": "2022-07-02T19:59:12.746474Z",
+ "modified": "2022-07-02T19:59:12.746474Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--b75f97dd-e18e-4555-8c9e-97680b398ae3",
+ "target_ref": "attack-pattern--953eae58-ea98-44c1-a4ea-ade622224db0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--cd10fb9a-d155-4308-ad3f-b3ad9e309a51.json b/generated_files/DISARM_STIX/relationship/relationship--cd10fb9a-d155-4308-ad3f-b3ad9e309a51.json
new file mode 100644
index 0000000..19a8982
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--cd10fb9a-d155-4308-ad3f-b3ad9e309a51.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--8b01ced3-a4df-46ec-82a5-2515550eeb75",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--cd10fb9a-d155-4308-ad3f-b3ad9e309a51",
+ "created": "2022-07-02T19:59:12.746043Z",
+ "modified": "2022-07-02T19:59:12.746043Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--7285bc0e-2e3f-4ee7-ab50-637c84d538e2",
+ "target_ref": "attack-pattern--2b2b06d9-26d3-4e69-93b3-5a3f37363b5f"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--cd940d81-abe9-470f-9d61-0240e57e0743.json b/generated_files/DISARM_STIX/relationship/relationship--cd940d81-abe9-470f-9d61-0240e57e0743.json
new file mode 100644
index 0000000..c53e191
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--cd940d81-abe9-470f-9d61-0240e57e0743.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--6dc2e4de-c3ff-4770-874e-f0ce085bb815",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--cd940d81-abe9-470f-9d61-0240e57e0743",
+ "created": "2022-07-02T19:59:12.743921Z",
+ "modified": "2022-07-02T19:59:12.743921Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--fbd5b3c6-7f47-4bdc-afeb-206d430abd9b",
+ "target_ref": "attack-pattern--74a90d3f-f426-4832-9cf7-5e9ec799bec0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--cdb46ac3-0e9c-42b5-9b0a-c20f62b8d6c4.json b/generated_files/DISARM_STIX/relationship/relationship--cdb46ac3-0e9c-42b5-9b0a-c20f62b8d6c4.json
deleted file mode 100644
index 2f1faf6..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--cdb46ac3-0e9c-42b5-9b0a-c20f62b8d6c4.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--0cabd2bf-1478-4cee-b5b8-489c9f70c2bf",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--cdb46ac3-0e9c-42b5-9b0a-c20f62b8d6c4",
- "created": "2022-07-02T17:28:37.018866Z",
- "modified": "2022-07-02T17:28:37.018866Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--4c383d4a-da5d-4730-82a5-93901362e4e4",
- "target_ref": "attack-pattern--a94b4289-5956-4b89-a3a8-d1ed9b604840"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--cefa3cb3-9aa7-4dbe-b9a8-894093b5ada1.json b/generated_files/DISARM_STIX/relationship/relationship--cefa3cb3-9aa7-4dbe-b9a8-894093b5ada1.json
new file mode 100644
index 0000000..990c130
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--cefa3cb3-9aa7-4dbe-b9a8-894093b5ada1.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--d5bd1e53-add5-432f-8b0c-a7c8861d946b",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--cefa3cb3-9aa7-4dbe-b9a8-894093b5ada1",
+ "created": "2022-07-02T19:59:12.748584Z",
+ "modified": "2022-07-02T19:59:12.748584Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--09c83f74-e10c-452e-b55b-37807cc79c95",
+ "target_ref": "attack-pattern--aa3dd7f6-b16f-4ee4-850a-91394b33622a"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--cf7aa95d-d732-41a5-b0ef-8205b1690696.json b/generated_files/DISARM_STIX/relationship/relationship--cf7aa95d-d732-41a5-b0ef-8205b1690696.json
deleted file mode 100644
index 7e41709..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--cf7aa95d-d732-41a5-b0ef-8205b1690696.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--11f78171-5c02-4168-839d-7f8ce074c2e2",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--cf7aa95d-d732-41a5-b0ef-8205b1690696",
- "created": "2022-07-02T17:28:37.028521Z",
- "modified": "2022-07-02T17:28:37.028521Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--e88bb789-d3a3-48ce-9861-d1b486cb86d1",
- "target_ref": "attack-pattern--b7a97f05-92a6-434d-922b-9be6f49225c7"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--d0ebea8c-7d76-45de-a7f9-2d61750b3f04.json b/generated_files/DISARM_STIX/relationship/relationship--d0ebea8c-7d76-45de-a7f9-2d61750b3f04.json
deleted file mode 100644
index b08e53c..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--d0ebea8c-7d76-45de-a7f9-2d61750b3f04.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--a9a1f552-de55-4bc8-b63f-ac3a5f7f6d3c",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--d0ebea8c-7d76-45de-a7f9-2d61750b3f04",
- "created": "2022-07-02T17:28:37.025162Z",
- "modified": "2022-07-02T17:28:37.025162Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--8342730a-496e-460b-9a2f-bad4316b43d7",
- "target_ref": "attack-pattern--cb89181b-cb31-4902-ba50-930ca46b86fc"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--d14107f5-d97f-48de-b561-3ab682a6ecc0.json b/generated_files/DISARM_STIX/relationship/relationship--d14107f5-d97f-48de-b561-3ab682a6ecc0.json
deleted file mode 100644
index ba4c95a..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--d14107f5-d97f-48de-b561-3ab682a6ecc0.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--59098417-a3f1-41a4-b25d-d8ff111cc699",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--d14107f5-d97f-48de-b561-3ab682a6ecc0",
- "created": "2022-07-02T17:28:37.021361Z",
- "modified": "2022-07-02T17:28:37.021361Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--2b86f30b-02d0-4759-9ccd-7abff53714a2",
- "target_ref": "attack-pattern--de5a467e-4326-4909-9c2d-d123830edca6"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--d17a1df5-e3e1-4436-86ec-bdf158c03317.json b/generated_files/DISARM_STIX/relationship/relationship--d17a1df5-e3e1-4436-86ec-bdf158c03317.json
new file mode 100644
index 0000000..eacc0fb
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--d17a1df5-e3e1-4436-86ec-bdf158c03317.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--2cbbac5d-a4d7-4493-92c7-9ba56c481ebb",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--d17a1df5-e3e1-4436-86ec-bdf158c03317",
+ "created": "2022-07-02T19:59:12.754074Z",
+ "modified": "2022-07-02T19:59:12.754074Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--710c216a-b1f4-409f-ad57-3c57fa5bad9b",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--d2121220-e99a-4f58-b5fb-4593d5077216.json b/generated_files/DISARM_STIX/relationship/relationship--d2121220-e99a-4f58-b5fb-4593d5077216.json
deleted file mode 100644
index 0e27045..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--d2121220-e99a-4f58-b5fb-4593d5077216.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--0d614c3b-1c27-496c-818e-ba20f2e8abce",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--d2121220-e99a-4f58-b5fb-4593d5077216",
- "created": "2022-07-02T17:28:37.025374Z",
- "modified": "2022-07-02T17:28:37.025374Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--709c2d40-c1c8-4a87-b63b-35968701d12c",
- "target_ref": "attack-pattern--bceb35c5-c32f-48fd-b02d-69c1170a0565"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--d29bff70-edf6-4b8b-8f0b-aa6e865a3ab3.json b/generated_files/DISARM_STIX/relationship/relationship--d29bff70-edf6-4b8b-8f0b-aa6e865a3ab3.json
deleted file mode 100644
index b98e3e1..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--d29bff70-edf6-4b8b-8f0b-aa6e865a3ab3.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--0be84edd-acc7-414d-945d-8364462b2cf0",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--d29bff70-edf6-4b8b-8f0b-aa6e865a3ab3",
- "created": "2022-07-02T17:28:37.021291Z",
- "modified": "2022-07-02T17:28:37.021291Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--8e21ea76-776b-4113-ab50-0ced1178fd21",
- "target_ref": "attack-pattern--de5a467e-4326-4909-9c2d-d123830edca6"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--d34afb15-b90c-490e-b7f3-fc22dabb91e9.json b/generated_files/DISARM_STIX/relationship/relationship--d34afb15-b90c-490e-b7f3-fc22dabb91e9.json
new file mode 100644
index 0000000..3557fd9
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--d34afb15-b90c-490e-b7f3-fc22dabb91e9.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--7fc5ce40-c212-4365-94b3-95edc74e608e",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--d34afb15-b90c-490e-b7f3-fc22dabb91e9",
+ "created": "2022-07-02T19:59:12.750851Z",
+ "modified": "2022-07-02T19:59:12.750851Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--7aa9d580-7c3e-4e10-ac50-4fd541c7b7f2",
+ "target_ref": "attack-pattern--dee6a0f9-6e1c-40fb-b347-b0d181d37c32"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--d3818506-a1ec-46bc-831f-333ed0e1c1c7.json b/generated_files/DISARM_STIX/relationship/relationship--d3818506-a1ec-46bc-831f-333ed0e1c1c7.json
deleted file mode 100644
index a7fe314..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--d3818506-a1ec-46bc-831f-333ed0e1c1c7.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--3077aab1-8be1-43e7-8054-70c99e0301b8",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--d3818506-a1ec-46bc-831f-333ed0e1c1c7",
- "created": "2022-07-02T17:28:37.028172Z",
- "modified": "2022-07-02T17:28:37.028172Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--beefe7f3-62e4-4422-9c8a-a8b6da01f0a3",
- "target_ref": "attack-pattern--c236acce-da3a-44b6-ab3a-24268c897c0e"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--d3ac33ff-8066-497a-860b-f0c9a5d9242b.json b/generated_files/DISARM_STIX/relationship/relationship--d3ac33ff-8066-497a-860b-f0c9a5d9242b.json
deleted file mode 100644
index c2e3c72..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--d3ac33ff-8066-497a-860b-f0c9a5d9242b.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--5ce2d5b0-5372-427b-928f-34763d4f3e90",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--d3ac33ff-8066-497a-860b-f0c9a5d9242b",
- "created": "2022-07-02T17:28:37.019493Z",
- "modified": "2022-07-02T17:28:37.019493Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--f16b324b-cb5f-496e-8575-f3ff97963e54",
- "target_ref": "attack-pattern--2f9be5f3-9474-46c1-9bf8-038577c4b6a8"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--d48ad4af-6e19-4943-b1fb-b677988c5ce3.json b/generated_files/DISARM_STIX/relationship/relationship--d48ad4af-6e19-4943-b1fb-b677988c5ce3.json
new file mode 100644
index 0000000..9508642
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--d48ad4af-6e19-4943-b1fb-b677988c5ce3.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--42f19b2a-70c4-4480-a68c-a70ed9c8117a",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--d48ad4af-6e19-4943-b1fb-b677988c5ce3",
+ "created": "2022-07-02T19:59:12.752793Z",
+ "modified": "2022-07-02T19:59:12.752793Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--3d6c883e-34bb-4c1a-8784-6d3265683039",
+ "target_ref": "attack-pattern--72e298d1-2ba8-47cb-839a-3a4c06a75de4"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--d505e7a3-e42f-4d5c-a181-eaa9da73d67c.json b/generated_files/DISARM_STIX/relationship/relationship--d505e7a3-e42f-4d5c-a181-eaa9da73d67c.json
deleted file mode 100644
index 57213c9..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--d505e7a3-e42f-4d5c-a181-eaa9da73d67c.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--8090b362-1670-4464-a8c2-8d91eabaa688",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--d505e7a3-e42f-4d5c-a181-eaa9da73d67c",
- "created": "2022-07-02T17:28:37.022342Z",
- "modified": "2022-07-02T17:28:37.022342Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--a224996d-effe-42ed-b7a6-78a7d86c662d",
- "target_ref": "attack-pattern--8f74ba8b-807b-4b71-81fd-d1fa6edcc1a7"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--d583545d-0d60-40dc-a750-e79dfce59e57.json b/generated_files/DISARM_STIX/relationship/relationship--d583545d-0d60-40dc-a750-e79dfce59e57.json
new file mode 100644
index 0000000..678a21a
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--d583545d-0d60-40dc-a750-e79dfce59e57.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--66debe9a-bc5a-4e64-8d8b-c896fd1ec8bf",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--d583545d-0d60-40dc-a750-e79dfce59e57",
+ "created": "2022-07-02T19:59:12.748963Z",
+ "modified": "2022-07-02T19:59:12.748963Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--8591e263-fb0c-4a9b-bcb6-ac1c940ff152",
+ "target_ref": "attack-pattern--76e6a962-860b-461c-a6ed-6de2e9922be1"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--d5a129d8-b38f-4f43-ad8f-173f2b114ef7.json b/generated_files/DISARM_STIX/relationship/relationship--d5a129d8-b38f-4f43-ad8f-173f2b114ef7.json
deleted file mode 100644
index 35fe421..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--d5a129d8-b38f-4f43-ad8f-173f2b114ef7.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--5f7087bd-e1f8-4c65-8d13-1205555f0f30",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--d5a129d8-b38f-4f43-ad8f-173f2b114ef7",
- "created": "2022-07-02T17:28:37.024888Z",
- "modified": "2022-07-02T17:28:37.024888Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--05dc1204-4147-4a09-a017-2484ee5fdc6b",
- "target_ref": "attack-pattern--09c7c07b-108f-41a6-82e1-a5fff2b8182b"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--d5a8e541-cc9a-43f2-9d6d-86a31c5e794e.json b/generated_files/DISARM_STIX/relationship/relationship--d5a8e541-cc9a-43f2-9d6d-86a31c5e794e.json
deleted file mode 100644
index f6a2377..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--d5a8e541-cc9a-43f2-9d6d-86a31c5e794e.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--fdfc5803-e66d-43cf-b5fd-d4ce99908660",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--d5a8e541-cc9a-43f2-9d6d-86a31c5e794e",
- "created": "2022-07-02T17:28:37.026553Z",
- "modified": "2022-07-02T17:28:37.026553Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--cc032d4b-b84c-46f7-ba6f-6b04fdf20299",
- "target_ref": "attack-pattern--5621af39-db87-4673-9840-9125cc4a17c4"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--d5eeef10-2feb-4b53-92d5-10063cc7edd0.json b/generated_files/DISARM_STIX/relationship/relationship--d5eeef10-2feb-4b53-92d5-10063cc7edd0.json
deleted file mode 100644
index 4611cf2..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--d5eeef10-2feb-4b53-92d5-10063cc7edd0.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--87ae5b95-8a6c-40e5-a9a0-c634c3f14d81",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--d5eeef10-2feb-4b53-92d5-10063cc7edd0",
- "created": "2022-07-02T17:28:37.027801Z",
- "modified": "2022-07-02T17:28:37.027801Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--19641024-86e4-435e-8f10-6f6fcac96da9",
- "target_ref": "attack-pattern--f493b830-a4d8-4045-9eac-11cb116292f0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--d66ee555-abc0-46ce-8086-24aae3ac6916.json b/generated_files/DISARM_STIX/relationship/relationship--d66ee555-abc0-46ce-8086-24aae3ac6916.json
new file mode 100644
index 0000000..5ab2b45
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--d66ee555-abc0-46ce-8086-24aae3ac6916.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--c728171f-e56e-45c9-a7e9-081ab730138b",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--d66ee555-abc0-46ce-8086-24aae3ac6916",
+ "created": "2022-07-02T19:59:12.750397Z",
+ "modified": "2022-07-02T19:59:12.750397Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--afdce902-18af-40c1-955a-1355cbdd99d7",
+ "target_ref": "attack-pattern--6565d00e-6281-4157-b050-3974e3c55616"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--d8a019a4-8db4-422a-86c0-b7f56c866616.json b/generated_files/DISARM_STIX/relationship/relationship--d8a019a4-8db4-422a-86c0-b7f56c866616.json
deleted file mode 100644
index 825c905..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--d8a019a4-8db4-422a-86c0-b7f56c866616.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--766ba599-415c-438b-a243-f8730f786c3d",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--d8a019a4-8db4-422a-86c0-b7f56c866616",
- "created": "2022-07-02T17:28:37.027241Z",
- "modified": "2022-07-02T17:28:37.027241Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--692ddfe6-92da-4b8a-8c1e-7371c6eb0da5",
- "target_ref": "attack-pattern--e4737241-ecc0-4ca1-a029-0ecd8b710862"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--d8bf935e-cac0-4384-ada9-63f8925b5823.json b/generated_files/DISARM_STIX/relationship/relationship--d8bf935e-cac0-4384-ada9-63f8925b5823.json
new file mode 100644
index 0000000..cec2c1c
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--d8bf935e-cac0-4384-ada9-63f8925b5823.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--ad5c6e57-a1d8-44d6-948a-642e057b5361",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--d8bf935e-cac0-4384-ada9-63f8925b5823",
+ "created": "2022-07-02T19:59:12.751614Z",
+ "modified": "2022-07-02T19:59:12.751614Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--5927a58a-2416-4205-9000-e4a7824ade15",
+ "target_ref": "attack-pattern--82052da3-7f68-471c-9991-f1e09eaf8cb2"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--d8e2e61e-3caa-481c-b560-7a657ac08528.json b/generated_files/DISARM_STIX/relationship/relationship--d8e2e61e-3caa-481c-b560-7a657ac08528.json
new file mode 100644
index 0000000..365b6ac
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--d8e2e61e-3caa-481c-b560-7a657ac08528.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--bd1d08f6-110a-4c69-8372-8bde64ecb66c",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--d8e2e61e-3caa-481c-b560-7a657ac08528",
+ "created": "2022-07-02T19:59:12.752212Z",
+ "modified": "2022-07-02T19:59:12.752212Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--cd25a2d2-5102-4666-932c-5bd7de061504",
+ "target_ref": "attack-pattern--d1bed9f5-c57a-463b-a7e0-1217d5e91eeb"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--d9757e38-8535-4ef7-829c-d04cb9aaeaf4.json b/generated_files/DISARM_STIX/relationship/relationship--d9757e38-8535-4ef7-829c-d04cb9aaeaf4.json
deleted file mode 100644
index bcc8683..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--d9757e38-8535-4ef7-829c-d04cb9aaeaf4.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--51ccf28d-5713-494f-8674-6966ff06392e",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--d9757e38-8535-4ef7-829c-d04cb9aaeaf4",
- "created": "2022-07-02T17:28:37.018656Z",
- "modified": "2022-07-02T17:28:37.018656Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--c423ab99-cdc3-4abf-bf4e-880a1011dd2c",
- "target_ref": "attack-pattern--8f344f67-cc73-4826-9edf-9d9a202f1127"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--da26624e-11e1-411c-af3d-26f82e6e885b.json b/generated_files/DISARM_STIX/relationship/relationship--da26624e-11e1-411c-af3d-26f82e6e885b.json
new file mode 100644
index 0000000..6f56bd6
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--da26624e-11e1-411c-af3d-26f82e6e885b.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--c0986d72-29eb-4393-acc4-6f2af9bbcb38",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--da26624e-11e1-411c-af3d-26f82e6e885b",
+ "created": "2022-07-02T19:59:12.746895Z",
+ "modified": "2022-07-02T19:59:12.746895Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--c7076dd5-bc90-466a-9bd5-6cdd3d0d6be7",
+ "target_ref": "attack-pattern--acb35a90-5c38-42f4-a32e-5e96bacf0e33"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--dbf6c56a-6e00-4fb0-a6e2-a2a622c780d6.json b/generated_files/DISARM_STIX/relationship/relationship--dbf6c56a-6e00-4fb0-a6e2-a2a622c780d6.json
deleted file mode 100644
index d27dca4..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--dbf6c56a-6e00-4fb0-a6e2-a2a622c780d6.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--071724fc-96e7-4b8d-894f-e0e897a2d05c",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--dbf6c56a-6e00-4fb0-a6e2-a2a622c780d6",
- "created": "2022-07-02T17:28:37.019905Z",
- "modified": "2022-07-02T17:28:37.019905Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--3603a527-d7c9-4562-ae2d-e66c49d597c5",
- "target_ref": "attack-pattern--e99f96c7-38d4-4fa9-b337-984da5ff0e9c"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--dc039675-1b8c-4581-a9f3-9d834092b339.json b/generated_files/DISARM_STIX/relationship/relationship--dc039675-1b8c-4581-a9f3-9d834092b339.json
new file mode 100644
index 0000000..8a5ee1d
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--dc039675-1b8c-4581-a9f3-9d834092b339.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--8f1bef46-ec5d-4200-a39d-45c64de72314",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--dc039675-1b8c-4581-a9f3-9d834092b339",
+ "created": "2022-07-02T19:59:12.754569Z",
+ "modified": "2022-07-02T19:59:12.754569Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--07425155-0f00-47cd-8e61-01da0fd19388",
+ "target_ref": "attack-pattern--3c2e9e26-3af7-44f8-b046-694d9efbcd14"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--dc093239-f871-48ed-a9a5-bcd6d64e5356.json b/generated_files/DISARM_STIX/relationship/relationship--dc093239-f871-48ed-a9a5-bcd6d64e5356.json
deleted file mode 100644
index 6496f40..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--dc093239-f871-48ed-a9a5-bcd6d64e5356.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--7bc270e1-1ddb-4b3e-9d02-2a08737a8439",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--dc093239-f871-48ed-a9a5-bcd6d64e5356",
- "created": "2022-07-02T17:28:37.020739Z",
- "modified": "2022-07-02T17:28:37.020739Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--cd282f8b-686c-44c1-af4d-02ce5b4c707a",
- "target_ref": "attack-pattern--673d032a-48d4-490e-a71e-32a6bb2b0334"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--dc40a578-1cb9-4f65-ad87-1b18fec5a26a.json b/generated_files/DISARM_STIX/relationship/relationship--dc40a578-1cb9-4f65-ad87-1b18fec5a26a.json
new file mode 100644
index 0000000..dd8cc5b
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--dc40a578-1cb9-4f65-ad87-1b18fec5a26a.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--95bc7584-cbeb-49e0-a1db-77ac340ab772",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--dc40a578-1cb9-4f65-ad87-1b18fec5a26a",
+ "created": "2022-07-02T19:59:12.753185Z",
+ "modified": "2022-07-02T19:59:12.753185Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--973f4b45-2d71-4d57-a1c4-58411b90fa5c",
+ "target_ref": "attack-pattern--a18dda94-01e8-413a-98c4-125f28091614"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--dd6b0219-b6ca-41f7-85fb-3f5ae21e39bd.json b/generated_files/DISARM_STIX/relationship/relationship--dd6b0219-b6ca-41f7-85fb-3f5ae21e39bd.json
deleted file mode 100644
index d01b0c1..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--dd6b0219-b6ca-41f7-85fb-3f5ae21e39bd.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--5d24b170-29f8-4a4d-8a93-66b6583ce5b3",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--dd6b0219-b6ca-41f7-85fb-3f5ae21e39bd",
- "created": "2022-07-02T17:28:37.018726Z",
- "modified": "2022-07-02T17:28:37.018726Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--cee96770-2751-43aa-9ce9-23012235ae8b",
- "target_ref": "attack-pattern--c6118c1f-e163-4eb0-a647-44a9d4074bb0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--dd9de432-df86-48a1-ade5-4db6d0740781.json b/generated_files/DISARM_STIX/relationship/relationship--dd9de432-df86-48a1-ade5-4db6d0740781.json
deleted file mode 100644
index 8a57925..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--dd9de432-df86-48a1-ade5-4db6d0740781.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--a4dd63f6-f999-4bb4-96c1-8942cd1a26da",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--dd9de432-df86-48a1-ade5-4db6d0740781",
- "created": "2022-07-02T17:28:37.025787Z",
- "modified": "2022-07-02T17:28:37.025787Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--eb58a67d-72ef-4b62-8d0c-e14dcfc6032d",
- "target_ref": "attack-pattern--2aeca1ac-da54-4744-a23e-c2b1641dac28"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--de9ca95a-598a-47b2-b188-f6580e4c3980.json b/generated_files/DISARM_STIX/relationship/relationship--de9ca95a-598a-47b2-b188-f6580e4c3980.json
new file mode 100644
index 0000000..875c490
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--de9ca95a-598a-47b2-b188-f6580e4c3980.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--a61555f7-2ef9-4e5f-9990-03660e1514c7",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--de9ca95a-598a-47b2-b188-f6580e4c3980",
+ "created": "2022-07-02T19:59:12.751539Z",
+ "modified": "2022-07-02T19:59:12.751539Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--063e1fbb-d23c-404a-a9b0-bfb3bf2b9c8d",
+ "target_ref": "attack-pattern--82052da3-7f68-471c-9991-f1e09eaf8cb2"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--df7d3e12-4497-432f-8843-d1453fd5449b.json b/generated_files/DISARM_STIX/relationship/relationship--df7d3e12-4497-432f-8843-d1453fd5449b.json
deleted file mode 100644
index 495492c..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--df7d3e12-4497-432f-8843-d1453fd5449b.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--003c85c7-e02a-4803-a3b2-5cc6cd96a8fe",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--df7d3e12-4497-432f-8843-d1453fd5449b",
- "created": "2022-07-02T17:28:37.018796Z",
- "modified": "2022-07-02T17:28:37.018796Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--782d58da-2c24-4520-a283-b89b54b5e59a",
- "target_ref": "attack-pattern--c6118c1f-e163-4eb0-a647-44a9d4074bb0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--e096acbd-8409-4540-8162-a5be690b369a.json b/generated_files/DISARM_STIX/relationship/relationship--e096acbd-8409-4540-8162-a5be690b369a.json
new file mode 100644
index 0000000..2cb464a
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--e096acbd-8409-4540-8162-a5be690b369a.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--4e6af1b6-0900-4004-83e8-525c0203cb17",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--e096acbd-8409-4540-8162-a5be690b369a",
+ "created": "2022-07-02T19:59:12.750695Z",
+ "modified": "2022-07-02T19:59:12.750695Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--ac315aea-b839-437d-8b28-4ae7c1cdeed8",
+ "target_ref": "attack-pattern--6565d00e-6281-4157-b050-3974e3c55616"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--e15091ce-4f1f-4a09-81b9-1da13d4ccba8.json b/generated_files/DISARM_STIX/relationship/relationship--e15091ce-4f1f-4a09-81b9-1da13d4ccba8.json
new file mode 100644
index 0000000..24713ae
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--e15091ce-4f1f-4a09-81b9-1da13d4ccba8.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--b6f64dc6-29ed-4a25-b295-92fdbc83a66d",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--e15091ce-4f1f-4a09-81b9-1da13d4ccba8",
+ "created": "2022-07-02T19:59:12.754417Z",
+ "modified": "2022-07-02T19:59:12.754417Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--9a82c606-3876-4821-94a2-25aee12190d4",
+ "target_ref": "attack-pattern--ac20552b-5bb8-470b-93f7-f241991bc60b"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--e1634fcd-0df1-4287-b235-04146ea2c793.json b/generated_files/DISARM_STIX/relationship/relationship--e1634fcd-0df1-4287-b235-04146ea2c793.json
deleted file mode 100644
index d81293e..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--e1634fcd-0df1-4287-b235-04146ea2c793.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--b057be82-70e6-401a-9f5f-1d26c48c5dec",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--e1634fcd-0df1-4287-b235-04146ea2c793",
- "created": "2022-07-02T17:28:37.024262Z",
- "modified": "2022-07-02T17:28:37.024262Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--88a55935-0548-48cc-9062-53a501a2afa6",
- "target_ref": "attack-pattern--d1f4502a-e10b-4854-a5d2-92a8400bb55f"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--e2aaf14e-ea67-40ab-92dc-1a9fef33a473.json b/generated_files/DISARM_STIX/relationship/relationship--e2aaf14e-ea67-40ab-92dc-1a9fef33a473.json
deleted file mode 100644
index 720dd92..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--e2aaf14e-ea67-40ab-92dc-1a9fef33a473.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--e294e802-356f-4eb1-b2dd-44a726c1d050",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--e2aaf14e-ea67-40ab-92dc-1a9fef33a473",
- "created": "2022-07-02T17:28:37.022833Z",
- "modified": "2022-07-02T17:28:37.022833Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--1d35a05b-99d7-4efb-8619-c0bfc4ef13a7",
- "target_ref": "attack-pattern--c8096e1e-bd17-43e9-b7cf-138cf344d73d"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--e2c6e14f-2851-4c74-bba8-ce53c0445616.json b/generated_files/DISARM_STIX/relationship/relationship--e2c6e14f-2851-4c74-bba8-ce53c0445616.json
deleted file mode 100644
index ddef515..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--e2c6e14f-2851-4c74-bba8-ce53c0445616.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--816f82db-b2fa-4e1a-ba16-29f1f6682a5a",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--e2c6e14f-2851-4c74-bba8-ce53c0445616",
- "created": "2022-07-02T17:28:37.020187Z",
- "modified": "2022-07-02T17:28:37.020187Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--d4a81525-7093-4cf1-8a25-5f65270f9663",
- "target_ref": "attack-pattern--c2651250-61d5-4cfa-92f2-4745198e0c29"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--e3488d27-4126-485c-bd22-ec8d8a6e02d3.json b/generated_files/DISARM_STIX/relationship/relationship--e3488d27-4126-485c-bd22-ec8d8a6e02d3.json
deleted file mode 100644
index 4f69cf9..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--e3488d27-4126-485c-bd22-ec8d8a6e02d3.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--19b43d2f-afd8-4d7e-8ac9-fe97ac4cb969",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--e3488d27-4126-485c-bd22-ec8d8a6e02d3",
- "created": "2022-07-02T17:28:37.026758Z",
- "modified": "2022-07-02T17:28:37.026758Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--1f5bb3dc-8ad8-4e32-9ac5-d408197bb1b1",
- "target_ref": "attack-pattern--b6db16cc-bbe2-44fe-99b4-c074b3b9595f"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--e41d4699-606d-4b16-b2f7-61e52bec9b47.json b/generated_files/DISARM_STIX/relationship/relationship--e41d4699-606d-4b16-b2f7-61e52bec9b47.json
new file mode 100644
index 0000000..f5107bd
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--e41d4699-606d-4b16-b2f7-61e52bec9b47.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--db697451-b4eb-4007-b5d7-dcc57daef77e",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--e41d4699-606d-4b16-b2f7-61e52bec9b47",
+ "created": "2022-07-02T19:59:12.745009Z",
+ "modified": "2022-07-02T19:59:12.745009Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--86a9f2a7-2d8c-4d82-9b68-60c133cbe662",
+ "target_ref": "attack-pattern--1059cdf7-3b45-40e6-93d3-b25ef3b6afac"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--e654a272-fad6-4b5e-8c84-a22065c69f52.json b/generated_files/DISARM_STIX/relationship/relationship--e654a272-fad6-4b5e-8c84-a22065c69f52.json
deleted file mode 100644
index 6566f44..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--e654a272-fad6-4b5e-8c84-a22065c69f52.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--fd1fac2f-4284-494c-9c15-8f7031d2ba40",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--e654a272-fad6-4b5e-8c84-a22065c69f52",
- "created": "2022-07-02T17:28:37.018367Z",
- "modified": "2022-07-02T17:28:37.018367Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--c5333233-57a6-460d-858d-9503d840d8cc",
- "target_ref": "attack-pattern--a922b4a9-b5c1-479e-b471-a06a94320842"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--e6881e5d-abdf-4ec0-a708-8ed9abbb0475.json b/generated_files/DISARM_STIX/relationship/relationship--e6881e5d-abdf-4ec0-a708-8ed9abbb0475.json
deleted file mode 100644
index afb943a..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--e6881e5d-abdf-4ec0-a708-8ed9abbb0475.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--b10b0773-42e9-4feb-8360-071fdd6d9932",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--e6881e5d-abdf-4ec0-a708-8ed9abbb0475",
- "created": "2022-07-02T17:28:37.019974Z",
- "modified": "2022-07-02T17:28:37.019974Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--734be066-e37f-4e86-b819-a868c2c4d798",
- "target_ref": "attack-pattern--c2651250-61d5-4cfa-92f2-4745198e0c29"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--e76ea0cb-28ff-4c9f-9818-2c055cde0421.json b/generated_files/DISARM_STIX/relationship/relationship--e76ea0cb-28ff-4c9f-9818-2c055cde0421.json
new file mode 100644
index 0000000..76959fe
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--e76ea0cb-28ff-4c9f-9818-2c055cde0421.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--2eb1bda1-6d94-4467-929f-28b06bcb9152",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--e76ea0cb-28ff-4c9f-9818-2c055cde0421",
+ "created": "2022-07-02T19:59:12.750773Z",
+ "modified": "2022-07-02T19:59:12.750773Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--a7cfa600-2359-4fdd-8c5f-d6efef64b498",
+ "target_ref": "attack-pattern--dee6a0f9-6e1c-40fb-b347-b0d181d37c32"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--ea9d4cac-e526-42d2-b482-d9c1afc6a7bf.json b/generated_files/DISARM_STIX/relationship/relationship--ea9d4cac-e526-42d2-b482-d9c1afc6a7bf.json
deleted file mode 100644
index 9939a50..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--ea9d4cac-e526-42d2-b482-d9c1afc6a7bf.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--632653cc-b045-47f0-985f-9e90945bd6b3",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--ea9d4cac-e526-42d2-b482-d9c1afc6a7bf",
- "created": "2022-07-02T17:28:37.026827Z",
- "modified": "2022-07-02T17:28:37.026827Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--58368496-c7b3-443a-80a8-636157faa954",
- "target_ref": "attack-pattern--27bd786c-eb5e-4e88-9786-b4cea8789542"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--eaa297b9-2aab-481d-a89a-055c0d21b8f1.json b/generated_files/DISARM_STIX/relationship/relationship--eaa297b9-2aab-481d-a89a-055c0d21b8f1.json
deleted file mode 100644
index 7c37388..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--eaa297b9-2aab-481d-a89a-055c0d21b8f1.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--e9d15c8b-7b1e-44f6-9e8e-0ed8bb164957",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--eaa297b9-2aab-481d-a89a-055c0d21b8f1",
- "created": "2022-07-02T17:28:37.025443Z",
- "modified": "2022-07-02T17:28:37.025443Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--f0252e68-f05e-4284-b9da-1f406874c630",
- "target_ref": "attack-pattern--bceb35c5-c32f-48fd-b02d-69c1170a0565"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--eb5d6ef7-87f4-4d7f-b8ed-1dd268276a1c.json b/generated_files/DISARM_STIX/relationship/relationship--eb5d6ef7-87f4-4d7f-b8ed-1dd268276a1c.json
new file mode 100644
index 0000000..192963e
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--eb5d6ef7-87f4-4d7f-b8ed-1dd268276a1c.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--9d796a02-6389-402d-a6ad-9ab234195745",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--eb5d6ef7-87f4-4d7f-b8ed-1dd268276a1c",
+ "created": "2022-07-02T19:59:12.747669Z",
+ "modified": "2022-07-02T19:59:12.747669Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--2cf97da8-f92c-49f3-bc58-d2527ce2a931",
+ "target_ref": "attack-pattern--acdb4254-8f84-4ae5-b26a-b4e19f29b6f0"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--eb65272a-c0f5-4cd6-b05e-df67b95a9367.json b/generated_files/DISARM_STIX/relationship/relationship--eb65272a-c0f5-4cd6-b05e-df67b95a9367.json
deleted file mode 100644
index 3f681fa..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--eb65272a-c0f5-4cd6-b05e-df67b95a9367.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--cf75b635-3cdd-4ac9-9df4-2c8fff8571c2",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--eb65272a-c0f5-4cd6-b05e-df67b95a9367",
- "created": "2022-07-02T17:28:37.019768Z",
- "modified": "2022-07-02T17:28:37.019768Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--c472a384-f73e-4d83-b22d-6b42fb25a2e7",
- "target_ref": "attack-pattern--7565c59e-0831-42ce-a211-25058d5159bf"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--ec2ec364-1838-48cf-8377-f8b206e28a88.json b/generated_files/DISARM_STIX/relationship/relationship--ec2ec364-1838-48cf-8377-f8b206e28a88.json
new file mode 100644
index 0000000..b41db46
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--ec2ec364-1838-48cf-8377-f8b206e28a88.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--85fcc753-365b-4aa1-930e-eef344e996a8",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--ec2ec364-1838-48cf-8377-f8b206e28a88",
+ "created": "2022-07-02T19:59:12.746114Z",
+ "modified": "2022-07-02T19:59:12.746114Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--20d348c8-0ed6-46b8-adea-6f82f154b5d4",
+ "target_ref": "attack-pattern--2b2b06d9-26d3-4e69-93b3-5a3f37363b5f"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--ecc9fe70-68da-44c8-8a33-4dd7d0c5c088.json b/generated_files/DISARM_STIX/relationship/relationship--ecc9fe70-68da-44c8-8a33-4dd7d0c5c088.json
deleted file mode 100644
index ead8c0c..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--ecc9fe70-68da-44c8-8a33-4dd7d0c5c088.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--a56b1bf8-d99a-48d8-a025-32d08b0c5ae5",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--ecc9fe70-68da-44c8-8a33-4dd7d0c5c088",
- "created": "2022-07-02T17:28:37.023211Z",
- "modified": "2022-07-02T17:28:37.023211Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--b802c014-90dc-4e3f-8ee8-9c77ccc07f7c",
- "target_ref": "attack-pattern--939d0f04-b080-47cc-ad3a-c971084d37ca"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--edd1fe3b-600b-427c-9e4d-6c8a1e9e328a.json b/generated_files/DISARM_STIX/relationship/relationship--edd1fe3b-600b-427c-9e4d-6c8a1e9e328a.json
new file mode 100644
index 0000000..180855e
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--edd1fe3b-600b-427c-9e4d-6c8a1e9e328a.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--8cb29279-e293-41c9-956b-ea6d5adc8172",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--edd1fe3b-600b-427c-9e4d-6c8a1e9e328a",
+ "created": "2022-07-02T19:59:12.752441Z",
+ "modified": "2022-07-02T19:59:12.752441Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--a463f183-d98c-4bfb-ae1c-7614958be7be",
+ "target_ref": "attack-pattern--d1bed9f5-c57a-463b-a7e0-1217d5e91eeb"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--edf52749-5c11-4fad-baec-3ad9c4f8ea2c.json b/generated_files/DISARM_STIX/relationship/relationship--edf52749-5c11-4fad-baec-3ad9c4f8ea2c.json
new file mode 100644
index 0000000..0e1251f
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--edf52749-5c11-4fad-baec-3ad9c4f8ea2c.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--aaa0c7bb-6b99-4ae8-aa86-f1c2ad4a2aab",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--edf52749-5c11-4fad-baec-3ad9c4f8ea2c",
+ "created": "2022-07-02T19:59:12.746963Z",
+ "modified": "2022-07-02T19:59:12.746963Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--c77cddbe-3859-4fbb-ba3f-ce9a9c19497f",
+ "target_ref": "attack-pattern--acb35a90-5c38-42f4-a32e-5e96bacf0e33"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--ef700340-f9ca-4e34-869a-05b73e3c2bce.json b/generated_files/DISARM_STIX/relationship/relationship--ef700340-f9ca-4e34-869a-05b73e3c2bce.json
deleted file mode 100644
index ed7152b..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--ef700340-f9ca-4e34-869a-05b73e3c2bce.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--ae55f531-5d4e-4b44-92b4-09451b0efb48",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--ef700340-f9ca-4e34-869a-05b73e3c2bce",
- "created": "2022-07-02T17:28:37.028309Z",
- "modified": "2022-07-02T17:28:37.028309Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--b129dcda-0956-4c1b-a856-02f5f03cf86e",
- "target_ref": "attack-pattern--c236acce-da3a-44b6-ab3a-24268c897c0e"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--f04a6f5a-4c33-43e8-ac8d-534c764d0209.json b/generated_files/DISARM_STIX/relationship/relationship--f04a6f5a-4c33-43e8-ac8d-534c764d0209.json
new file mode 100644
index 0000000..1e159d0
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--f04a6f5a-4c33-43e8-ac8d-534c764d0209.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--31af83a6-12bf-4abe-a3ef-7a73d9693a97",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--f04a6f5a-4c33-43e8-ac8d-534c764d0209",
+ "created": "2022-07-02T19:59:12.74796Z",
+ "modified": "2022-07-02T19:59:12.74796Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--fb297eec-3fc8-4599-bc41-60f5b0d71cb5",
+ "target_ref": "attack-pattern--81984c05-802f-4dc7-9288-fb3abb263ef5"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--f1693acb-1267-4374-a871-9f9719eba104.json b/generated_files/DISARM_STIX/relationship/relationship--f1693acb-1267-4374-a871-9f9719eba104.json
deleted file mode 100644
index 25dbd6d..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--f1693acb-1267-4374-a871-9f9719eba104.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--0bde2dc1-74d0-402b-b30c-a1835fe8d892",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--f1693acb-1267-4374-a871-9f9719eba104",
- "created": "2022-07-02T17:28:37.028934Z",
- "modified": "2022-07-02T17:28:37.028934Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--8d9f0257-a14c-4397-92e5-0ee58ab9ece2",
- "target_ref": "attack-pattern--0c3753ba-ec86-4186-97c8-242aa9d53b0f"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--f2ab8b67-e366-480e-b0bf-b401f28e19b2.json b/generated_files/DISARM_STIX/relationship/relationship--f2ab8b67-e366-480e-b0bf-b401f28e19b2.json
deleted file mode 100644
index f27cae5..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--f2ab8b67-e366-480e-b0bf-b401f28e19b2.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--86470f26-df0a-4325-b8e2-3c840f035deb",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--f2ab8b67-e366-480e-b0bf-b401f28e19b2",
- "created": "2022-07-02T17:28:37.025094Z",
- "modified": "2022-07-02T17:28:37.025094Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--467c2c32-1353-4c04-b5cc-3707f88885eb",
- "target_ref": "attack-pattern--cb89181b-cb31-4902-ba50-930ca46b86fc"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--f4378ddc-7483-435b-98ce-bcdcdb45ec17.json b/generated_files/DISARM_STIX/relationship/relationship--f4378ddc-7483-435b-98ce-bcdcdb45ec17.json
deleted file mode 100644
index 68363fe..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--f4378ddc-7483-435b-98ce-bcdcdb45ec17.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--dc233a58-b988-4c9d-b3f8-85b293b4465d",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--f4378ddc-7483-435b-98ce-bcdcdb45ec17",
- "created": "2022-07-02T17:28:37.026345Z",
- "modified": "2022-07-02T17:28:37.026345Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--b474bed9-be50-493e-a336-73adff0ec24d",
- "target_ref": "attack-pattern--5621af39-db87-4673-9840-9125cc4a17c4"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--f5a02c77-f51f-46d4-a515-dd02d28e91b9.json b/generated_files/DISARM_STIX/relationship/relationship--f5a02c77-f51f-46d4-a515-dd02d28e91b9.json
deleted file mode 100644
index 00a330a..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--f5a02c77-f51f-46d4-a515-dd02d28e91b9.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--26927f36-8115-4259-8530-7ad14e56b5b9",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--f5a02c77-f51f-46d4-a515-dd02d28e91b9",
- "created": "2022-07-02T17:28:37.027034Z",
- "modified": "2022-07-02T17:28:37.027034Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--6bc7f315-d082-49de-b664-9fb7b9b1184c",
- "target_ref": "attack-pattern--418a55bf-5c5e-4a90-8f10-a18fc80a2964"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--f6cbea72-80e9-4bd9-9e47-e986eba95a02.json b/generated_files/DISARM_STIX/relationship/relationship--f6cbea72-80e9-4bd9-9e47-e986eba95a02.json
deleted file mode 100644
index 9021e24..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--f6cbea72-80e9-4bd9-9e47-e986eba95a02.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--35b2937c-17fd-40b7-b0f4-cbf8ca074deb",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--f6cbea72-80e9-4bd9-9e47-e986eba95a02",
- "created": "2022-07-02T17:28:37.025513Z",
- "modified": "2022-07-02T17:28:37.025513Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--33b83d49-01b3-452e-a68a-abd77118353c",
- "target_ref": "attack-pattern--4faa614b-8a0a-4e5e-8492-59d12b08df18"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--f807240d-0ac5-4eec-9955-6786d8345683.json b/generated_files/DISARM_STIX/relationship/relationship--f807240d-0ac5-4eec-9955-6786d8345683.json
new file mode 100644
index 0000000..89f9611
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--f807240d-0ac5-4eec-9955-6786d8345683.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--65a34f5d-225b-4808-8a8a-c0697401f123",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--f807240d-0ac5-4eec-9955-6786d8345683",
+ "created": "2022-07-02T19:59:12.744779Z",
+ "modified": "2022-07-02T19:59:12.744779Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--748bd382-1819-41d9-addc-de7081097b73",
+ "target_ref": "attack-pattern--1059cdf7-3b45-40e6-93d3-b25ef3b6afac"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--f98c67cd-097a-4f56-89a8-d5944c74992d.json b/generated_files/DISARM_STIX/relationship/relationship--f98c67cd-097a-4f56-89a8-d5944c74992d.json
new file mode 100644
index 0000000..72ad636
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--f98c67cd-097a-4f56-89a8-d5944c74992d.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--7bf8dd59-fb1b-44f4-ad58-2eaf4c8e3f66",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--f98c67cd-097a-4f56-89a8-d5944c74992d",
+ "created": "2022-07-02T19:59:12.744934Z",
+ "modified": "2022-07-02T19:59:12.744934Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--e8bb5015-934a-41d1-8bf9-812973ea34ac",
+ "target_ref": "attack-pattern--1059cdf7-3b45-40e6-93d3-b25ef3b6afac"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--fa7ff5ef-7a36-42b8-a63b-0363c0aa8318.json b/generated_files/DISARM_STIX/relationship/relationship--fa7ff5ef-7a36-42b8-a63b-0363c0aa8318.json
deleted file mode 100644
index a21365e..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--fa7ff5ef-7a36-42b8-a63b-0363c0aa8318.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--cafbb72a-7642-4810-850c-a8c59e5a88d7",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--fa7ff5ef-7a36-42b8-a63b-0363c0aa8318",
- "created": "2022-07-02T17:28:37.021924Z",
- "modified": "2022-07-02T17:28:37.021924Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--a500a0b8-2780-497c-82cf-6b053542e489",
- "target_ref": "attack-pattern--b3c2db10-3666-4b0b-a8f2-c97506382de0"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--fb1e0672-97e6-429b-ac88-790b3d3316d5.json b/generated_files/DISARM_STIX/relationship/relationship--fb1e0672-97e6-429b-ac88-790b3d3316d5.json
deleted file mode 100644
index 957e87f..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--fb1e0672-97e6-429b-ac88-790b3d3316d5.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--fa2ef1b2-2bb5-40a4-8d4a-a51f414f5b3b",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--fb1e0672-97e6-429b-ac88-790b3d3316d5",
- "created": "2022-07-02T17:28:37.020256Z",
- "modified": "2022-07-02T17:28:37.020256Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--3ff7e5b9-ac4b-44f9-81d7-1475ee208c20",
- "target_ref": "attack-pattern--c2651250-61d5-4cfa-92f2-4745198e0c29"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--fbe75a4b-9b52-4c4a-88ec-a52f1a3e1362.json b/generated_files/DISARM_STIX/relationship/relationship--fbe75a4b-9b52-4c4a-88ec-a52f1a3e1362.json
deleted file mode 100644
index d7f338b..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--fbe75a4b-9b52-4c4a-88ec-a52f1a3e1362.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--3a10227e-402d-4942-98c7-1e6ecd24eb6f",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--fbe75a4b-9b52-4c4a-88ec-a52f1a3e1362",
- "created": "2022-07-02T17:28:37.027309Z",
- "modified": "2022-07-02T17:28:37.027309Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--d9e51370-28b8-47a2-bf15-9436aa2f8c1b",
- "target_ref": "attack-pattern--e4737241-ecc0-4ca1-a029-0ecd8b710862"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--fc15eab0-aef9-4105-b892-9a6544dcbbf1.json b/generated_files/DISARM_STIX/relationship/relationship--fc15eab0-aef9-4105-b892-9a6544dcbbf1.json
new file mode 100644
index 0000000..38876a1
--- /dev/null
+++ b/generated_files/DISARM_STIX/relationship/relationship--fc15eab0-aef9-4105-b892-9a6544dcbbf1.json
@@ -0,0 +1,16 @@
+{
+ "type": "bundle",
+ "id": "bundle--56261cfb-6e21-4680-a119-eaa3ddd10d6f",
+ "objects": [
+ {
+ "type": "relationship",
+ "spec_version": "2.1",
+ "id": "relationship--fc15eab0-aef9-4105-b892-9a6544dcbbf1",
+ "created": "2022-07-02T19:59:12.74516Z",
+ "modified": "2022-07-02T19:59:12.74516Z",
+ "relationship_type": "subtechnique-of",
+ "source_ref": "attack-pattern--01ca6965-45eb-49e0-85c3-64092e2fc7cf",
+ "target_ref": "attack-pattern--1059cdf7-3b45-40e6-93d3-b25ef3b6afac"
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--fcd19cdc-236e-407f-ba10-89fa65ac6ee0.json b/generated_files/DISARM_STIX/relationship/relationship--fcd19cdc-236e-407f-ba10-89fa65ac6ee0.json
deleted file mode 100644
index 4bc97ca..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--fcd19cdc-236e-407f-ba10-89fa65ac6ee0.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--22debcf9-7808-4e71-ae3e-5c8271f61aec",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--fcd19cdc-236e-407f-ba10-89fa65ac6ee0",
- "created": "2022-07-02T17:28:37.019836Z",
- "modified": "2022-07-02T17:28:37.019836Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--4e5b4790-3f96-44c5-9fb4-24cd84d57c31",
- "target_ref": "attack-pattern--7565c59e-0831-42ce-a211-25058d5159bf"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--fe180c6c-ad99-4ec5-95ca-b2db9b0424c1.json b/generated_files/DISARM_STIX/relationship/relationship--fe180c6c-ad99-4ec5-95ca-b2db9b0424c1.json
deleted file mode 100644
index 4614293..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--fe180c6c-ad99-4ec5-95ca-b2db9b0424c1.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--d0fc58f3-2215-47f1-a9ee-907b52e228e8",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--fe180c6c-ad99-4ec5-95ca-b2db9b0424c1",
- "created": "2022-07-02T17:28:37.021568Z",
- "modified": "2022-07-02T17:28:37.021568Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--203756a5-ac3d-4a82-a096-25d01609571b",
- "target_ref": "attack-pattern--89258f59-9d58-42c6-9fbb-ceffd2530a76"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--fedaec4d-1eb5-484c-abd2-4db0da3705d3.json b/generated_files/DISARM_STIX/relationship/relationship--fedaec4d-1eb5-484c-abd2-4db0da3705d3.json
deleted file mode 100644
index bad82c0..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--fedaec4d-1eb5-484c-abd2-4db0da3705d3.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--9eab2625-b4be-4758-adcd-7e0a90bad1ba",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--fedaec4d-1eb5-484c-abd2-4db0da3705d3",
- "created": "2022-07-02T17:28:37.024334Z",
- "modified": "2022-07-02T17:28:37.024334Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--5460ed5f-dec4-4a99-8430-809244e2c236",
- "target_ref": "attack-pattern--d1f4502a-e10b-4854-a5d2-92a8400bb55f"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/relationship/relationship--ff46138e-b5c1-4483-866c-613579dc24be.json b/generated_files/DISARM_STIX/relationship/relationship--ff46138e-b5c1-4483-866c-613579dc24be.json
deleted file mode 100644
index 9d11cc9..0000000
--- a/generated_files/DISARM_STIX/relationship/relationship--ff46138e-b5c1-4483-866c-613579dc24be.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--ecfff6be-2f68-4d0f-a801-b9904df5f6c7",
- "objects": [
- {
- "type": "relationship",
- "spec_version": "2.1",
- "id": "relationship--ff46138e-b5c1-4483-866c-613579dc24be",
- "created": "2022-07-02T17:28:37.019631Z",
- "modified": "2022-07-02T17:28:37.019631Z",
- "relationship_type": "subtechnique-of",
- "source_ref": "attack-pattern--13942c8f-1337-4de0-8b7b-3802fa4c7276",
- "target_ref": "attack-pattern--2f9be5f3-9474-46c1-9bf8-038577c4b6a8"
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/x-mitre-matrix/x-mitre-matrix--640228b8-a3b5-43b5-bbb7-66a89e34e38c.json b/generated_files/DISARM_STIX/x-mitre-matrix/x-mitre-matrix--640228b8-a3b5-43b5-bbb7-66a89e34e38c.json
deleted file mode 100644
index 48390c9..0000000
--- a/generated_files/DISARM_STIX/x-mitre-matrix/x-mitre-matrix--640228b8-a3b5-43b5-bbb7-66a89e34e38c.json
+++ /dev/null
@@ -1,40 +0,0 @@
-{
- "type": "bundle",
- "id": "bundle--823c7cef-3979-4494-8382-381d6890e1f8",
- "objects": [
- {
- "type": "x-mitre-matrix",
- "spec_version": "2.1",
- "id": "x-mitre-matrix--640228b8-a3b5-43b5-bbb7-66a89e34e38c",
- "created": "2022-07-02T17:28:37.029365Z",
- "modified": "2022-07-02T17:28:37.029365Z",
- "name": "DISARM Framework",
- "description": "DISARM is a framework designed for describing and understanding disinformation incidents.",
- "tactic_refs": [
- "x-mitre-tactic--c4ac8ab7-ea56-43fe-8f26-83ee065d078e",
- "x-mitre-tactic--e34df713-d1f5-4a10-bb0a-0a1ada573b51",
- "x-mitre-tactic--51bb4e10-02fc-471f-9478-0cce0e4cb958",
- "x-mitre-tactic--3552f239-dd03-4e44-b3a5-d1a5ab04b36a",
- "x-mitre-tactic--04cbb20f-af5f-4dba-b98b-216fea9d9e85",
- "x-mitre-tactic--3d3dea08-0512-45af-8c70-c3ee8e20ecd1",
- "x-mitre-tactic--18b0a137-fbc8-4351-b84e-18090ca8ccb8",
- "x-mitre-tactic--b63b9b6f-0178-4275-a717-634caf904c0a",
- "x-mitre-tactic--43c9e386-bd22-4d32-8b41-44b89d8257ef",
- "x-mitre-tactic--7003dd30-2fd8-4da6-be27-d13210a570ec",
- "x-mitre-tactic--98feb296-62c7-4e8a-bca7-a00aab59fc6e",
- "x-mitre-tactic--39b5a167-e580-4f91-9139-b329c0a47632",
- "x-mitre-tactic--bfa7fd1d-ac3f-4f1f-a2aa-ae3819cc0fdc",
- "x-mitre-tactic--63348954-e476-45d3-9a07-9bba81316a75",
- "x-mitre-tactic--5246f92a-de17-4038-a557-8420ff53200d",
- "x-mitre-tactic--25df641e-05a4-47d2-b32e-9b92302b7298"
- ],
- "external_references": [
- {
- "source_name": "DISARM",
- "url": "https://github.com/DISARMFoundation",
- "external_id": "DISARM"
- }
- ]
- }
- ]
-}
diff --git a/generated_files/DISARM_STIX/x-mitre-matrix/x-mitre-matrix--70636dcb-00da-4dfd-aecc-74d52bdc74e0.json b/generated_files/DISARM_STIX/x-mitre-matrix/x-mitre-matrix--70636dcb-00da-4dfd-aecc-74d52bdc74e0.json
new file mode 100644
index 0000000..5ca2c91
--- /dev/null
+++ b/generated_files/DISARM_STIX/x-mitre-matrix/x-mitre-matrix--70636dcb-00da-4dfd-aecc-74d52bdc74e0.json
@@ -0,0 +1,40 @@
+{
+ "type": "bundle",
+ "id": "bundle--236caed2-9782-4637-ba02-5cba6653489c",
+ "objects": [
+ {
+ "type": "x-mitre-matrix",
+ "spec_version": "2.1",
+ "id": "x-mitre-matrix--70636dcb-00da-4dfd-aecc-74d52bdc74e0",
+ "created": "2022-07-02T19:59:12.756031Z",
+ "modified": "2022-07-02T19:59:12.756031Z",
+ "name": "DISARM Framework",
+ "description": "DISARM is a framework designed for describing and understanding disinformation incidents.",
+ "tactic_refs": [
+ "x-mitre-tactic--5d65f4a0-b48a-4c8b-b2d6-a7bba81d1d36",
+ "x-mitre-tactic--b2b13cd3-c0da-4cc1-bbab-a68211de88e1",
+ "x-mitre-tactic--3ad9f88d-278c-461e-966a-102ec22a2585",
+ "x-mitre-tactic--1668c1d4-98fb-4bc1-b801-7e7359f4c59d",
+ "x-mitre-tactic--e61c944e-9445-4715-b6d1-a730f0327c35",
+ "x-mitre-tactic--deec33a7-21f9-4eea-adff-1c4df2d4cace",
+ "x-mitre-tactic--96fb9f2b-c2bb-44d3-9613-fc3fa46182e7",
+ "x-mitre-tactic--73e754e4-10ee-49e4-9e56-7805b5be39c5",
+ "x-mitre-tactic--bcf16e08-ac6e-420a-88eb-7b0c9558e6d0",
+ "x-mitre-tactic--ed407f47-6d8e-4ccf-8572-b423a4153747",
+ "x-mitre-tactic--103f5cc2-a673-43a8-b497-4ba1d8be65bc",
+ "x-mitre-tactic--f43e51ee-3870-4daa-95e0-14cf49ddaca9",
+ "x-mitre-tactic--44343de0-dba6-4147-b6fd-cf5e92afe84b",
+ "x-mitre-tactic--5a30fcc1-fdd1-4472-b2bd-e4a0e64800a5",
+ "x-mitre-tactic--83c9a938-8f0d-48ef-9ed8-e1250c894805",
+ "x-mitre-tactic--16ae43af-4f68-4e98-baac-61561eb5e3f4"
+ ],
+ "external_references": [
+ {
+ "source_name": "DISARM",
+ "url": "https://github.com/DISARMFoundation",
+ "external_id": "DISARM"
+ }
+ ]
+ }
+ ]
+}
diff --git a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--98feb296-62c7-4e8a-bca7-a00aab59fc6e.json b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--103f5cc2-a673-43a8-b497-4ba1d8be65bc.json
similarity index 74%
rename from generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--98feb296-62c7-4e8a-bca7-a00aab59fc6e.json
rename to generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--103f5cc2-a673-43a8-b497-4ba1d8be65bc.json
index 6cbd8b1..19cc911 100644
--- a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--98feb296-62c7-4e8a-bca7-a00aab59fc6e.json
+++ b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--103f5cc2-a673-43a8-b497-4ba1d8be65bc.json
@@ -1,14 +1,14 @@
{
"type": "bundle",
- "id": "bundle--56cbdc97-5d9f-4989-826b-5858e6cd65b7",
+ "id": "bundle--d6df7c43-a845-41d5-b6ec-3f39b6085bd0",
"objects": [
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--98feb296-62c7-4e8a-bca7-a00aab59fc6e",
- "created_by_ref": "identity--cd46acc9-b4ac-480a-a623-dcab29f8baee",
- "created": "2022-07-02T17:28:36.93096Z",
- "modified": "2022-07-02T17:28:36.93096Z",
+ "id": "x-mitre-tactic--103f5cc2-a673-43a8-b497-4ba1d8be65bc",
+ "created_by_ref": "identity--ca6d8f63-8cb2-46f7-9570-5cd40cd72734",
+ "created": "2022-07-02T19:59:12.615954Z",
+ "modified": "2022-07-02T19:59:12.615954Z",
"name": "Target Audience Analysis",
"description": "Identifying and analyzing the target audience examines target audience member locations, political affiliations, financial situations, and other attributes that an influence operation may incorporate into its messaging strategy. During this tactic, influence operations may also identify existing similarities and differences between target audience members to unite like groups and divide opposing groups. Identifying and analyzing target audience members allows influence operations to tailor operation strategy and content to their analysis. ",
"external_references": [
@@ -19,7 +19,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e0d71223-7d46-497c-a88c-3994bd39b81e"
+ "marking-definition--767fb3e7-7b15-419d-a943-e7bc1550548a"
],
"x_mitre_shortname": "target-audience-analysis"
}
diff --git a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--3552f239-dd03-4e44-b3a5-d1a5ab04b36a.json b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--1668c1d4-98fb-4bc1-b801-7e7359f4c59d.json
similarity index 62%
rename from generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--3552f239-dd03-4e44-b3a5-d1a5ab04b36a.json
rename to generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--1668c1d4-98fb-4bc1-b801-7e7359f4c59d.json
index 16ed967..02123d1 100644
--- a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--3552f239-dd03-4e44-b3a5-d1a5ab04b36a.json
+++ b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--1668c1d4-98fb-4bc1-b801-7e7359f4c59d.json
@@ -1,14 +1,14 @@
{
"type": "bundle",
- "id": "bundle--ba765ed6-7481-460b-87d0-60ffa93c5011",
+ "id": "bundle--24e82750-f26c-4556-8538-0fa29ddadbd2",
"objects": [
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--3552f239-dd03-4e44-b3a5-d1a5ab04b36a",
- "created_by_ref": "identity--e7884c2b-37db-4860-96ee-3a9e52c48db8",
- "created": "2022-07-02T17:28:36.928857Z",
- "modified": "2022-07-02T17:28:36.928857Z",
+ "id": "x-mitre-tactic--1668c1d4-98fb-4bc1-b801-7e7359f4c59d",
+ "created_by_ref": "identity--f8035490-4a2b-4133-ae0d-85c243b6f69b",
+ "created": "2022-07-02T19:59:12.613439Z",
+ "modified": "2022-07-02T19:59:12.613439Z",
"name": "Develop Content",
"description": "Create or acquire text, images, and other content",
"external_references": [
@@ -19,7 +19,7 @@
}
],
"object_marking_refs": [
- "marking-definition--739cc37a-afac-4dd3-9ac5-39b9b3f7ef84"
+ "marking-definition--efbeb05a-3261-441c-8061-6410f9097d58"
],
"x_mitre_shortname": "develop-content"
}
diff --git a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--25df641e-05a4-47d2-b32e-9b92302b7298.json b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--16ae43af-4f68-4e98-baac-61561eb5e3f4.json
similarity index 67%
rename from generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--25df641e-05a4-47d2-b32e-9b92302b7298.json
rename to generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--16ae43af-4f68-4e98-baac-61561eb5e3f4.json
index 4937129..53a7d87 100644
--- a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--25df641e-05a4-47d2-b32e-9b92302b7298.json
+++ b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--16ae43af-4f68-4e98-baac-61561eb5e3f4.json
@@ -1,14 +1,14 @@
{
"type": "bundle",
- "id": "bundle--e21a39ce-4802-4efc-a743-d826058917d2",
+ "id": "bundle--a09c912b-3e69-4d5c-ad38-5e1847faa4e6",
"objects": [
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--25df641e-05a4-47d2-b32e-9b92302b7298",
- "created_by_ref": "identity--d62c7261-8efc-4c74-b3e1-d89ca6145d19",
- "created": "2022-07-02T17:28:36.932431Z",
- "modified": "2022-07-02T17:28:36.932431Z",
+ "id": "x-mitre-tactic--16ae43af-4f68-4e98-baac-61561eb5e3f4",
+ "created_by_ref": "identity--9b1bb10f-1219-49bd-80cf-985925b933c2",
+ "created": "2022-07-02T19:59:12.61753Z",
+ "modified": "2022-07-02T19:59:12.61753Z",
"name": "Drive Online Harms",
"description": "Actions taken by an influence operation to harm their opponents in online spaces through harassment, suppression, releasing private information, and controlling the information space through offensive cyberspace operations. ",
"external_references": [
@@ -19,7 +19,7 @@
}
],
"object_marking_refs": [
- "marking-definition--0cc3507d-9ce9-4376-98c5-ce50a6fadc0c"
+ "marking-definition--e14266ef-efb4-41dc-ba77-c8859582d342"
],
"x_mitre_shortname": "drive-online-harms"
}
diff --git a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--51bb4e10-02fc-471f-9478-0cce0e4cb958.json b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--3ad9f88d-278c-461e-966a-102ec22a2585.json
similarity index 61%
rename from generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--51bb4e10-02fc-471f-9478-0cce0e4cb958.json
rename to generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--3ad9f88d-278c-461e-966a-102ec22a2585.json
index dec9ba0..3c9cefc 100644
--- a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--51bb4e10-02fc-471f-9478-0cce0e4cb958.json
+++ b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--3ad9f88d-278c-461e-966a-102ec22a2585.json
@@ -1,14 +1,14 @@
{
"type": "bundle",
- "id": "bundle--cc148da3-6438-4239-8489-8301c003b4a7",
+ "id": "bundle--0862ed40-3520-4abb-ba8b-74df477f0164",
"objects": [
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--51bb4e10-02fc-471f-9478-0cce0e4cb958",
- "created_by_ref": "identity--0411e9d8-4c88-42e1-aba9-1216bda19f75",
- "created": "2022-07-02T17:28:36.928556Z",
- "modified": "2022-07-02T17:28:36.928556Z",
+ "id": "x-mitre-tactic--3ad9f88d-278c-461e-966a-102ec22a2585",
+ "created_by_ref": "identity--f746a22f-d8bc-4d6c-b240-af9b08c19cc4",
+ "created": "2022-07-02T19:59:12.613099Z",
+ "modified": "2022-07-02T19:59:12.613099Z",
"name": "Microtarget",
"description": "Target very specific populations of people",
"external_references": [
@@ -19,7 +19,7 @@
}
],
"object_marking_refs": [
- "marking-definition--d2cae706-2737-49d7-a72f-6bc6b5c806e0"
+ "marking-definition--dbe17e42-0f4f-496e-adf4-874247fe435f"
],
"x_mitre_shortname": "microtarget"
}
diff --git a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--bfa7fd1d-ac3f-4f1f-a2aa-ae3819cc0fdc.json b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--44343de0-dba6-4147-b6fd-cf5e92afe84b.json
similarity index 75%
rename from generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--bfa7fd1d-ac3f-4f1f-a2aa-ae3819cc0fdc.json
rename to generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--44343de0-dba6-4147-b6fd-cf5e92afe84b.json
index 021ce88..20f7d45 100644
--- a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--bfa7fd1d-ac3f-4f1f-a2aa-ae3819cc0fdc.json
+++ b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--44343de0-dba6-4147-b6fd-cf5e92afe84b.json
@@ -1,14 +1,14 @@
{
"type": "bundle",
- "id": "bundle--cb15020a-0704-40ec-8338-e9bf47db2b6c",
+ "id": "bundle--7a390cb6-426b-4cee-8de6-9993b4fe4775",
"objects": [
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--bfa7fd1d-ac3f-4f1f-a2aa-ae3819cc0fdc",
- "created_by_ref": "identity--35f606a8-7d29-4469-8519-9a878f096ef1",
- "created": "2022-07-02T17:28:36.931547Z",
- "modified": "2022-07-02T17:28:36.931547Z",
+ "id": "x-mitre-tactic--44343de0-dba6-4147-b6fd-cf5e92afe84b",
+ "created_by_ref": "identity--f4cf0ee9-c47c-4ade-9da3-73f13683c69f",
+ "created": "2022-07-02T19:59:12.616572Z",
+ "modified": "2022-07-02T19:59:12.616572Z",
"name": "Establish Social Assets",
"description": "Establishing information assets generates messaging tools, including social media accounts, operation personnel, and organizations, including directly and indirectly managed assets. For assets under their direct control, the operation can add, change, or remove these assets at will. \nEstablishing information assets allows an influence operation to promote messaging directly to the target audience without navigating through external entities. Many online influence operations create or compromise social media accounts as a primary vector of information dissemination.",
"external_references": [
@@ -19,7 +19,7 @@
}
],
"object_marking_refs": [
- "marking-definition--052ee987-b37e-4464-a0ea-4d63e0424351"
+ "marking-definition--fd1f7b00-9a7b-4755-af43-cc0a00b045c2"
],
"x_mitre_shortname": "establish-social-assets"
}
diff --git a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--63348954-e476-45d3-9a07-9bba81316a75.json b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--5a30fcc1-fdd1-4472-b2bd-e4a0e64800a5.json
similarity index 61%
rename from generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--63348954-e476-45d3-9a07-9bba81316a75.json
rename to generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--5a30fcc1-fdd1-4472-b2bd-e4a0e64800a5.json
index b05b781..7e5b08c 100644
--- a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--63348954-e476-45d3-9a07-9bba81316a75.json
+++ b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--5a30fcc1-fdd1-4472-b2bd-e4a0e64800a5.json
@@ -1,14 +1,14 @@
{
"type": "bundle",
- "id": "bundle--1f74d627-7841-47b5-b3ca-f116cde4335d",
+ "id": "bundle--c8f5ed6a-7a57-42a7-ae59-cd71da40c598",
"objects": [
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--63348954-e476-45d3-9a07-9bba81316a75",
- "created_by_ref": "identity--e99b8fff-d450-46ab-947d-7168e55697db",
- "created": "2022-07-02T17:28:36.931847Z",
- "modified": "2022-07-02T17:28:36.931847Z",
+ "id": "x-mitre-tactic--5a30fcc1-fdd1-4472-b2bd-e4a0e64800a5",
+ "created_by_ref": "identity--88677963-cdde-499c-ac67-536b6245120a",
+ "created": "2022-07-02T19:59:12.616883Z",
+ "modified": "2022-07-02T19:59:12.616883Z",
"name": "Establish Legitimacy",
"description": "Establish assets that create trust",
"external_references": [
@@ -19,7 +19,7 @@
}
],
"object_marking_refs": [
- "marking-definition--1daf7e1c-0c30-4aff-809d-f84dcbd7fb69"
+ "marking-definition--0255af01-86f8-4867-abe8-7b32507fd847"
],
"x_mitre_shortname": "establish-legitimacy"
}
diff --git a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--c4ac8ab7-ea56-43fe-8f26-83ee065d078e.json b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--5d65f4a0-b48a-4c8b-b2d6-a7bba81d1d36.json
similarity index 64%
rename from generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--c4ac8ab7-ea56-43fe-8f26-83ee065d078e.json
rename to generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--5d65f4a0-b48a-4c8b-b2d6-a7bba81d1d36.json
index 9d7cb82..62971c0 100644
--- a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--c4ac8ab7-ea56-43fe-8f26-83ee065d078e.json
+++ b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--5d65f4a0-b48a-4c8b-b2d6-a7bba81d1d36.json
@@ -1,14 +1,14 @@
{
"type": "bundle",
- "id": "bundle--e9bb555d-e244-4277-80c7-1efa146feb78",
+ "id": "bundle--27285db3-ff81-442b-ada8-cb3e7af5d2c7",
"objects": [
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--c4ac8ab7-ea56-43fe-8f26-83ee065d078e",
- "created_by_ref": "identity--a34190ba-0c2c-4436-b0d3-4c973958f322",
- "created": "2022-07-02T17:28:36.927901Z",
- "modified": "2022-07-02T17:28:36.927901Z",
+ "id": "x-mitre-tactic--5d65f4a0-b48a-4c8b-b2d6-a7bba81d1d36",
+ "created_by_ref": "identity--43ec108f-d3b2-4be4-b099-9cf02f166dba",
+ "created": "2022-07-02T19:59:12.612381Z",
+ "modified": "2022-07-02T19:59:12.612381Z",
"name": "Plan Strategy",
"description": "Define the desired end state, i.e. the set of required conditions that defines achievement of all objectives.",
"external_references": [
@@ -19,7 +19,7 @@
}
],
"object_marking_refs": [
- "marking-definition--fd46b7f0-c2ff-434b-bc22-6970f53e77c1"
+ "marking-definition--121feb80-d4b8-434c-a835-6474613063c3"
],
"x_mitre_shortname": "plan-strategy"
}
diff --git a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--b63b9b6f-0178-4275-a717-634caf904c0a.json b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--73e754e4-10ee-49e4-9e56-7805b5be39c5.json
similarity index 73%
rename from generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--b63b9b6f-0178-4275-a717-634caf904c0a.json
rename to generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--73e754e4-10ee-49e4-9e56-7805b5be39c5.json
index 16cc8fa..d4c3e96 100644
--- a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--b63b9b6f-0178-4275-a717-634caf904c0a.json
+++ b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--73e754e4-10ee-49e4-9e56-7805b5be39c5.json
@@ -1,14 +1,14 @@
{
"type": "bundle",
- "id": "bundle--d2052a0b-3202-47c1-9f16-e793d5b5b02e",
+ "id": "bundle--d8c07d3b-9e75-4ef7-8380-1b59380456a9",
"objects": [
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--b63b9b6f-0178-4275-a717-634caf904c0a",
- "created_by_ref": "identity--49f28fa8-aac0-499a-9c76-cee8a056cffe",
- "created": "2022-07-02T17:28:36.930063Z",
- "modified": "2022-07-02T17:28:36.930063Z",
+ "id": "x-mitre-tactic--73e754e4-10ee-49e4-9e56-7805b5be39c5",
+ "created_by_ref": "identity--a00e716a-32a3-4500-9024-bd28bb04382d",
+ "created": "2022-07-02T19:59:12.614995Z",
+ "modified": "2022-07-02T19:59:12.614995Z",
"name": "Drive Offline Activity",
"description": "Move incident/campaign from online to offline. Encouraging users to move from the platform on which they initially viewed operation content and engage in the physical information space or offline world. This may include operation-aligned rallies or protests, radio, newspaper, or billboards. An influence operation may drive to physical forums to diversify its information channels and facilitate spaces where the target audience can engage with both operation content and like-minded individuals offline. ",
"external_references": [
@@ -19,7 +19,7 @@
}
],
"object_marking_refs": [
- "marking-definition--d4e807a9-c7b4-4029-b9b0-7b81518a5284"
+ "marking-definition--68b8dc28-328b-4ff7-9a8d-1f60aa4f0f86"
],
"x_mitre_shortname": "drive-offline-activity"
}
diff --git a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--5246f92a-de17-4038-a557-8420ff53200d.json b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--83c9a938-8f0d-48ef-9ed8-e1250c894805.json
similarity index 64%
rename from generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--5246f92a-de17-4038-a557-8420ff53200d.json
rename to generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--83c9a938-8f0d-48ef-9ed8-e1250c894805.json
index 7437a1e..49ee2e3 100644
--- a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--5246f92a-de17-4038-a557-8420ff53200d.json
+++ b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--83c9a938-8f0d-48ef-9ed8-e1250c894805.json
@@ -1,14 +1,14 @@
{
"type": "bundle",
- "id": "bundle--a65d0c62-443d-462d-804e-e43f66ef23a5",
+ "id": "bundle--70ce954b-b288-465d-8a39-d8173be9982b",
"objects": [
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--5246f92a-de17-4038-a557-8420ff53200d",
- "created_by_ref": "identity--2727c1f1-1d0f-4601-9def-98e1231ff903",
- "created": "2022-07-02T17:28:36.932138Z",
- "modified": "2022-07-02T17:28:36.932138Z",
+ "id": "x-mitre-tactic--83c9a938-8f0d-48ef-9ed8-e1250c894805",
+ "created_by_ref": "identity--59ba0414-4eea-42c8-8279-903bd3f7e9a5",
+ "created": "2022-07-02T19:59:12.61719Z",
+ "modified": "2022-07-02T19:59:12.61719Z",
"name": "Maximize Exposure",
"description": "Maximize exposure of the target audience to incident/campaign content via flooding, amplifying, and cross-posting.",
"external_references": [
@@ -19,7 +19,7 @@
}
],
"object_marking_refs": [
- "marking-definition--e4394836-949c-450f-a185-f74f002a58d7"
+ "marking-definition--68fd1401-0a73-420a-bc17-b02b212e9b69"
],
"x_mitre_shortname": "maximize-exposure"
}
diff --git a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--18b0a137-fbc8-4351-b84e-18090ca8ccb8.json b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--96fb9f2b-c2bb-44d3-9613-fc3fa46182e7.json
similarity index 62%
rename from generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--18b0a137-fbc8-4351-b84e-18090ca8ccb8.json
rename to generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--96fb9f2b-c2bb-44d3-9613-fc3fa46182e7.json
index 71f777f..7310f11 100644
--- a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--18b0a137-fbc8-4351-b84e-18090ca8ccb8.json
+++ b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--96fb9f2b-c2bb-44d3-9613-fc3fa46182e7.json
@@ -1,14 +1,14 @@
{
"type": "bundle",
- "id": "bundle--eca8bb82-60a5-47cf-8e86-f54ea2772b11",
+ "id": "bundle--08822aec-14a1-4e46-84bc-df1d8c0c6605",
"objects": [
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--18b0a137-fbc8-4351-b84e-18090ca8ccb8",
- "created_by_ref": "identity--5e903b30-0879-4886-8f35-975173dfc3c2",
- "created": "2022-07-02T17:28:36.929753Z",
- "modified": "2022-07-02T17:28:36.929753Z",
+ "id": "x-mitre-tactic--96fb9f2b-c2bb-44d3-9613-fc3fa46182e7",
+ "created_by_ref": "identity--45bc2bd8-bd63-4e58-a0fb-52a625ffbad0",
+ "created": "2022-07-02T19:59:12.614484Z",
+ "modified": "2022-07-02T19:59:12.614484Z",
"name": "Deliver Content",
"description": "Release content to general public or larger population",
"external_references": [
@@ -19,7 +19,7 @@
}
],
"object_marking_refs": [
- "marking-definition--3bb6aae9-d675-4456-8815-716d14f1dec0"
+ "marking-definition--81d5e807-ce92-467d-8e86-3ecf79f967d8"
],
"x_mitre_shortname": "deliver-content"
}
diff --git a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--e34df713-d1f5-4a10-bb0a-0a1ada573b51.json b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--b2b13cd3-c0da-4cc1-bbab-a68211de88e1.json
similarity index 73%
rename from generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--e34df713-d1f5-4a10-bb0a-0a1ada573b51.json
rename to generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--b2b13cd3-c0da-4cc1-bbab-a68211de88e1.json
index 728a9dc..f7b4a71 100644
--- a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--e34df713-d1f5-4a10-bb0a-0a1ada573b51.json
+++ b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--b2b13cd3-c0da-4cc1-bbab-a68211de88e1.json
@@ -1,14 +1,14 @@
{
"type": "bundle",
- "id": "bundle--2ca17ae7-4949-44f2-8df9-6f8f22978d0b",
+ "id": "bundle--c8b5e025-f86e-4fa3-b3a5-5905789bbd35",
"objects": [
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--e34df713-d1f5-4a10-bb0a-0a1ada573b51",
- "created_by_ref": "identity--2c093a89-5462-4e95-88a7-fd2e6b4ca125",
- "created": "2022-07-02T17:28:36.928249Z",
- "modified": "2022-07-02T17:28:36.928249Z",
+ "id": "x-mitre-tactic--b2b13cd3-c0da-4cc1-bbab-a68211de88e1",
+ "created_by_ref": "identity--e658afb5-e1ff-43be-af7f-d27d6d77688c",
+ "created": "2022-07-02T19:59:12.612758Z",
+ "modified": "2022-07-02T19:59:12.612758Z",
"name": "Plan Objectives",
"description": "Set clearly defined, measurable, and achievable objectives. Achieving objectives ties execution of tactical tasks to reaching the desired end state. There are four primary considerations: \n- Each desired effect should link directly to one or more objectives \n- The effect should be measurable \n- The objective statement should not specify the way and means of accomplishment \n- The effect should be distinguishable from the objective it supports as a condition for success, not as another objective or task.",
"external_references": [
@@ -19,7 +19,7 @@
}
],
"object_marking_refs": [
- "marking-definition--51f8acf1-76ca-4181-a36c-8430bf07b08e"
+ "marking-definition--c7eb23eb-f2d8-4d6a-bed1-ef63d022470c"
],
"x_mitre_shortname": "plan-objectives"
}
diff --git a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--43c9e386-bd22-4d32-8b41-44b89d8257ef.json b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--bcf16e08-ac6e-420a-88eb-7b0c9558e6d0.json
similarity index 73%
rename from generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--43c9e386-bd22-4d32-8b41-44b89d8257ef.json
rename to generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--bcf16e08-ac6e-420a-88eb-7b0c9558e6d0.json
index c74b83a..04c6b9a 100644
--- a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--43c9e386-bd22-4d32-8b41-44b89d8257ef.json
+++ b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--bcf16e08-ac6e-420a-88eb-7b0c9558e6d0.json
@@ -1,14 +1,14 @@
{
"type": "bundle",
- "id": "bundle--eb8e6add-8080-4b6e-9082-d7671fb8229c",
+ "id": "bundle--dd3dd17a-6aa1-4673-a59e-62dacbfcb381",
"objects": [
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--43c9e386-bd22-4d32-8b41-44b89d8257ef",
- "created_by_ref": "identity--ae3c7095-6295-49a4-b935-f967c5e7942d",
- "created": "2022-07-02T17:28:36.930373Z",
- "modified": "2022-07-02T17:28:36.930373Z",
+ "id": "x-mitre-tactic--bcf16e08-ac6e-420a-88eb-7b0c9558e6d0",
+ "created_by_ref": "identity--9d59898a-d81b-46c1-834d-76623c855b4e",
+ "created": "2022-07-02T19:59:12.615328Z",
+ "modified": "2022-07-02T19:59:12.615328Z",
"name": "Persist in the Information Environment",
"description": "Persist in the Information Space refers to taking measures that allow an operation to maintain its presence and avoid takedown by an external entity. Techniques in Persist in the Information Space help campaigns operate without detection and appear legitimate to the target audience and platform monitoring services. Influence operations on social media often persist online by varying the type of information assets and platforms used throughout the campaign.",
"external_references": [
@@ -19,7 +19,7 @@
}
],
"object_marking_refs": [
- "marking-definition--1ff33bf7-0d77-425d-ad85-20afb09d228e"
+ "marking-definition--06530200-9382-4129-ab7a-d44f9486ace4"
],
"x_mitre_shortname": "persist-in-the-information-environment"
}
diff --git a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--3d3dea08-0512-45af-8c70-c3ee8e20ecd1.json b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--deec33a7-21f9-4eea-adff-1c4df2d4cace.json
similarity index 68%
rename from generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--3d3dea08-0512-45af-8c70-c3ee8e20ecd1.json
rename to generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--deec33a7-21f9-4eea-adff-1c4df2d4cace.json
index 5d97a9b..ca10180 100644
--- a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--3d3dea08-0512-45af-8c70-c3ee8e20ecd1.json
+++ b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--deec33a7-21f9-4eea-adff-1c4df2d4cace.json
@@ -1,14 +1,14 @@
{
"type": "bundle",
- "id": "bundle--f9817260-9a04-4d59-8c8a-9eba93299637",
+ "id": "bundle--ad63709e-d70e-4adb-8538-d1207dd1cc9e",
"objects": [
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--3d3dea08-0512-45af-8c70-c3ee8e20ecd1",
- "created_by_ref": "identity--ed14fc4f-0871-4b46-b5c6-6b00d7eaf010",
- "created": "2022-07-02T17:28:36.92946Z",
- "modified": "2022-07-02T17:28:36.92946Z",
+ "id": "x-mitre-tactic--deec33a7-21f9-4eea-adff-1c4df2d4cace",
+ "created_by_ref": "identity--82661400-5ddb-4daa-ab03-b573f5562771",
+ "created": "2022-07-02T19:59:12.614068Z",
+ "modified": "2022-07-02T19:59:12.614068Z",
"name": "Conduct Pump Priming",
"description": "Release content on a targetted small scale, prior to general release, including releasing seed. Used for preparation before broader release, and as message honing. Used for preparation before broader release, and as message honing. ",
"external_references": [
@@ -19,7 +19,7 @@
}
],
"object_marking_refs": [
- "marking-definition--23a58ec2-c6a7-418f-8d8b-2cc0fbc1f79b"
+ "marking-definition--f4b05b16-1c2b-47c2-bc6a-a1151adcf5a2"
],
"x_mitre_shortname": "conduct-pump-priming"
}
diff --git a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--04cbb20f-af5f-4dba-b98b-216fea9d9e85.json b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--e61c944e-9445-4715-b6d1-a730f0327c35.json
similarity index 76%
rename from generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--04cbb20f-af5f-4dba-b98b-216fea9d9e85.json
rename to generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--e61c944e-9445-4715-b6d1-a730f0327c35.json
index f272aa2..7c36095 100644
--- a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--04cbb20f-af5f-4dba-b98b-216fea9d9e85.json
+++ b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--e61c944e-9445-4715-b6d1-a730f0327c35.json
@@ -1,14 +1,14 @@
{
"type": "bundle",
- "id": "bundle--6ea51839-e8bb-440a-b023-676b91140940",
+ "id": "bundle--2c66f2d7-c549-4162-af3e-bd5505d8293d",
"objects": [
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--04cbb20f-af5f-4dba-b98b-216fea9d9e85",
- "created_by_ref": "identity--8ff7f3f6-7228-479c-a01f-b41e0f87a842",
- "created": "2022-07-02T17:28:36.929161Z",
- "modified": "2022-07-02T17:28:36.929161Z",
+ "id": "x-mitre-tactic--e61c944e-9445-4715-b6d1-a730f0327c35",
+ "created_by_ref": "identity--90282e61-9f75-42ce-96ce-c329d753a92a",
+ "created": "2022-07-02T19:59:12.613754Z",
+ "modified": "2022-07-02T19:59:12.613754Z",
"name": "Select Channels and Affordances",
"description": "Selecting platforms and affordances assesses which online or offline platforms and their associated affordances maximize an influence operation\u2019s ability to reach its target audience. To select the most appropriate platform(s), an operation may assess the technological affordances including platform algorithms, terms of service, permitted content types, or other attributes that determine platform usability and accessibility. Selecting platforms includes both choosing platforms on which the operation will publish its own content and platforms on which the operation will attempt to restrict adversarial content.",
"external_references": [
@@ -19,7 +19,7 @@
}
],
"object_marking_refs": [
- "marking-definition--0b8856f1-ea61-442a-9711-a86662525910"
+ "marking-definition--1322623d-3c5f-451b-be10-8079472ba75a"
],
"x_mitre_shortname": "select-channels-and-affordances"
}
diff --git a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--7003dd30-2fd8-4da6-be27-d13210a570ec.json b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--ed407f47-6d8e-4ccf-8572-b423a4153747.json
similarity index 62%
rename from generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--7003dd30-2fd8-4da6-be27-d13210a570ec.json
rename to generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--ed407f47-6d8e-4ccf-8572-b423a4153747.json
index 9616999..ff6f15c 100644
--- a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--7003dd30-2fd8-4da6-be27-d13210a570ec.json
+++ b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--ed407f47-6d8e-4ccf-8572-b423a4153747.json
@@ -1,14 +1,14 @@
{
"type": "bundle",
- "id": "bundle--d6b362bf-e300-4e56-a2c1-b3e8a8d6f7b6",
+ "id": "bundle--f9b8c791-4401-4339-9057-f18de5bf3a1a",
"objects": [
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--7003dd30-2fd8-4da6-be27-d13210a570ec",
- "created_by_ref": "identity--abcd4f50-3415-4545-aaa4-75a7ba5ec5cd",
- "created": "2022-07-02T17:28:36.930667Z",
- "modified": "2022-07-02T17:28:36.930667Z",
+ "id": "x-mitre-tactic--ed407f47-6d8e-4ccf-8572-b423a4153747",
+ "created_by_ref": "identity--89819b20-2394-4d4f-9c9e-f16603fbcd46",
+ "created": "2022-07-02T19:59:12.615643Z",
+ "modified": "2022-07-02T19:59:12.615643Z",
"name": "Assess Effectiveness",
"description": "Assess effectiveness of action, for use in future plans ",
"external_references": [
@@ -19,7 +19,7 @@
}
],
"object_marking_refs": [
- "marking-definition--bbc88c5b-2249-4d3f-b070-4037ccd5b6b8"
+ "marking-definition--a88bad65-8116-4021-97a0-b4b4024232c0"
],
"x_mitre_shortname": "assess-effectiveness"
}
diff --git a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--39b5a167-e580-4f91-9139-b329c0a47632.json b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--f43e51ee-3870-4daa-95e0-14cf49ddaca9.json
similarity index 77%
rename from generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--39b5a167-e580-4f91-9139-b329c0a47632.json
rename to generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--f43e51ee-3870-4daa-95e0-14cf49ddaca9.json
index 9f58c1e..45c3a04 100644
--- a/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--39b5a167-e580-4f91-9139-b329c0a47632.json
+++ b/generated_files/DISARM_STIX/x-mitre-tactic/x-mitre-tactic--f43e51ee-3870-4daa-95e0-14cf49ddaca9.json
@@ -1,14 +1,14 @@
{
"type": "bundle",
- "id": "bundle--fd951015-3b62-4a28-bc0d-1e6e2ee51877",
+ "id": "bundle--9bb3eaf4-a928-4215-89ef-48872b5b85b5",
"objects": [
{
"type": "x-mitre-tactic",
"spec_version": "2.1",
- "id": "x-mitre-tactic--39b5a167-e580-4f91-9139-b329c0a47632",
- "created_by_ref": "identity--58ebf78e-aefa-4ab8-9a67-270d6b35cebb",
- "created": "2022-07-02T17:28:36.931255Z",
- "modified": "2022-07-02T17:28:36.931255Z",
+ "id": "x-mitre-tactic--f43e51ee-3870-4daa-95e0-14cf49ddaca9",
+ "created_by_ref": "identity--ec1a5a3d-03da-41b8-bd20-9af2bf5f3eb5",
+ "created": "2022-07-02T19:59:12.616267Z",
+ "modified": "2022-07-02T19:59:12.616267Z",
"name": "Develop Narratives",
"description": "The promotion of beneficial master narratives is perhaps the most effective method for achieving long-term strategic narrative dominance. From a \"\"whole of society\"\" perspective the promotion of the society's core master narratives should occupy a central strategic role. From a misinformation campaign / cognitive security perpectve the tactics around master narratives center more precisely on the day-to-day promotion and reinforcement of this messaging. In other words, beneficial, high-coverage master narratives are a central strategic goal and their promotion constitutes an ongoing tactical struggle carried out at a whole-of-society level. Tactically, their promotion covers a broad spectrum of activities both on- and offline.",
"external_references": [
@@ -19,7 +19,7 @@
}
],
"object_marking_refs": [
- "marking-definition--b2d84f4b-b4a5-423a-ba06-dd539c64f189"
+ "marking-definition--903b71b8-f237-4ca3-a1b5-1d30c8f51340"
],
"x_mitre_shortname": "develop-narratives"
}
diff --git a/generated_files/disarm_red_framework_clickable.html b/generated_files/disarm_red_framework_clickable.html
index b7e8878..240b669 100644
--- a/generated_files/disarm_red_framework_clickable.html
+++ b/generated_files/disarm_red_framework_clickable.html
@@ -125,7 +125,7 @@ function handleTechniqueClick(box) {
| T0128.001 Use Pseudonyms |
T0132.003 View Focused |
T0072.003 Economic Segmentation |
-T0022.001 Amplify Existing Conspiracy Theory Narrative |
+T0022.001 Amplify Existing Conspiracy Theory Narratives |
T0014 Prepare fundraising campaigns |
T0097 Create personas |
T0049.003 Bots Amplify via Automated Forwarding and Reposting |
@@ -144,7 +144,7 @@ function handleTechniqueClick(box) {
T0133 Measure Effectiveness |
T0072.004 Psychographic Segmentation |
T0022.002 Develop Original Conspiracy Theory Narratives |
-T0014.001 From bad actors |
+T0014.001 Raise funds from malign actors |
T0097.001 Backstop personas |
T0049.004 Utilize Spamoflauge |
T0048.003 Threaten to Dox |
@@ -162,7 +162,7 @@ function handleTechniqueClick(box) {
T0133.001 Behavior changes |
T0072.005 Political Segmentation |
T0040 Demand insurmountable proof |
-T0014.002 From ignorant agents |
+T0014.002 Raise funds from ignorant agents |
T0098 Establish Inauthentic News Sites |
T0049.005 Conduct Swarming |
T0048.004 Dox |
@@ -288,7 +288,7 @@ function handleTechniqueClick(box) {
T0134.002 Social media engagement |
T0081 Identify Social and Technical Vulnerabilities |
|
-T0091 Recruit bad actors |
+T0091 Recruit malign actors |
T0100.001 Co-Opt Trusted Individuals |
T0119.003 Post Across Disciplines |
T0124.001 Report Non-Violative Opposing Content |
@@ -302,7 +302,7 @@ function handleTechniqueClick(box) {
|
|
|
-T0129.005 Coordinate on encrypted/ closed networks |
+T0129.005 Coordinate on encrypted/closed networks |
|
T0081.001 Find Echo Chambers |
|
@@ -396,7 +396,7 @@ function handleTechniqueClick(box) {
|
T0081.006 Identify Wedge Issues |
|
-T0092.002 Follow Trains |
+T0092.002 Use Follow Trains |
|
T0122 Direct Users to Alternative Platforms |
|
@@ -405,7 +405,7 @@ function handleTechniqueClick(box) {
|
|
|
-T0086.003 Deceptively Edit Image (Cheap fakes) |
+T0086.003 Deceptively Edit Images (Cheap fakes) |
T0106.001 Anonymous Message Boards |
|
|
@@ -432,7 +432,7 @@ function handleTechniqueClick(box) {
|
T0081.008 Identify Media System Vulnerabilities |
|
-T0093 Acquire/ recruit Network |
+T0093 Acquire/Recruit Network |
|
|
|
@@ -468,7 +468,7 @@ function handleTechniqueClick(box) {
|
|
|
-T0093.002 Botnets |
+T0093.002 Acquire Botnets |
|
|
|
@@ -522,7 +522,7 @@ function handleTechniqueClick(box) {
|
|
|
-T0094.002 Utilize Butterfly Attack |
+T0094.002 Utilize Butterfly Attacks |
|
|
|
@@ -558,7 +558,7 @@ function handleTechniqueClick(box) {
|
|
|
-T0096 Leverage Content Farm |
+T0096 Leverage Content Farms |
|
|
|
@@ -567,7 +567,7 @@ function handleTechniqueClick(box) {
|
|
|
-T0089.001 Leak Authentic Documents |
+T0089.001 Obtain Authentic Documents |
T0112 Email |
|
|
@@ -576,7 +576,7 @@ function handleTechniqueClick(box) {
|
|
|
-T0096.001 Create a Content Farm |
+T0096.001 Create Content Farms |
|
|
|
@@ -585,7 +585,7 @@ function handleTechniqueClick(box) {
|
|
|
-T0089.002 Leak False Documents |
+T0089.002 Create Inauthentic Documents |
|
|
|
@@ -603,7 +603,7 @@ function handleTechniqueClick(box) {
|
|
|
-T0089.003 Leak Altered Documents |
+T0089.003 Alter Authentic Documents |
|
|
|
@@ -679,7 +679,7 @@ function handleTechniqueClick(box) {
T0128.001: Use Pseudonyms
T0132.003: View Focused
T0072.003: Economic Segmentation
-T0022.001: Amplify Existing Conspiracy Theory Narrative
+T0022.001: Amplify Existing Conspiracy Theory Narratives
T0014: Prepare fundraising campaigns
T0097: Create personas
T0049.003: Bots Amplify via Automated Forwarding and Reposting
@@ -695,7 +695,7 @@ function handleTechniqueClick(box) {
T0133: Measure Effectiveness
T0072.004: Psychographic Segmentation
T0022.002: Develop Original Conspiracy Theory Narratives
-T0014.001: From bad actors
+T0014.001: Raise funds from malign actors
T0097.001: Backstop personas
T0049.004: Utilize Spamoflauge
T0048.003: Threaten to Dox
@@ -710,7 +710,7 @@ function handleTechniqueClick(box) {
T0133.001: Behavior changes
T0072.005: Political Segmentation
T0040: Demand insurmountable proof
-T0014.002: From ignorant agents
+T0014.002: Raise funds from ignorant agents
T0098: Establish Inauthentic News Sites
T0049.005: Conduct Swarming
T0048.004: Dox
@@ -791,13 +791,13 @@ function handleTechniqueClick(box) {
T0129.004: Delete URLs
T0134.002: Social media engagement
T0081: Identify Social and Technical Vulnerabilities
-T0091: Recruit bad actors
+T0091: Recruit malign actors
T0100.001: Co-Opt Trusted Individuals
T0119.003: Post Across Disciplines
T0124.001: Report Non-Violative Opposing Content
T0085.001: Develop AI-Generated Text
T0104.006: Create dedicated hashtag
-T0129.005: Coordinate on encrypted/ closed networks
+T0129.005: Coordinate on encrypted/closed networks
T0081.001: Find Echo Chambers
T0091.001: Recruit Contractors
T0100.002: Co-Opt Grassroots Groups
@@ -834,9 +834,9 @@ function handleTechniqueClick(box) {
T0106: Discussion Forums
T0129.010: Misattribute Activity
T0081.006: Identify Wedge Issues
-T0092.002: Follow Trains
+T0092.002: Use Follow Trains
T0122: Direct Users to Alternative Platforms
-T0086.003: Deceptively Edit Image (Cheap fakes)
+T0086.003: Deceptively Edit Images (Cheap fakes)
T0106.001: Anonymous Message Boards
T0130: Conceal Infrastructure
T0081.007: Identify Target Audience Adversaries
@@ -845,7 +845,7 @@ function handleTechniqueClick(box) {
T0107: Bookmarking and Content Curation
T0130.001: Conceal Sponsorship
T0081.008: Identify Media System Vulnerabilities
-T0093: Acquire/ recruit Network
+T0093: Acquire/Recruit Network
T0087: Develop Video-based Content
T0108: Blogging and Publishing Networks
T0130.002: Utilize Bulletproof Hosting
@@ -853,7 +853,7 @@ function handleTechniqueClick(box) {
T0087.001: Develop AI-Generated Videos (Deepfakes)
T0109: Consumer Review Networks
T0130.003: Use Shell Organizations
-T0093.002: Botnets
+T0093.002: Acquire Botnets
T0087.002: Deceptively Edit Video (Cheap fakes)
T0110: Formal Diplomatic Channels
T0130.004: Use Cryptocurrency
@@ -865,7 +865,7 @@ function handleTechniqueClick(box) {
T0088.001: Develop AI-Generated Audio (Deepfakes)
T0111.001: TV
T0131: Exploit TOS/Content Moderation
-T0094.002: Utilize Butterfly Attack
+T0094.002: Utilize Butterfly Attacks
T0088.002: Deceptively Edit Audio (Cheap fakes)
T0111.002: Newspaper
T0131.001: Legacy web content
@@ -873,13 +873,13 @@ function handleTechniqueClick(box) {
T0089: Obtain Private Documents
T0111.003: Radio
T0131.002: Post Borderline Content
-T0096: Leverage Content Farm
-T0089.001: Leak Authentic Documents
+T0096: Leverage Content Farms
+T0089.001: Obtain Authentic Documents
T0112: Email
-T0096.001: Create a Content Farm
-T0089.002: Leak False Documents
+T0096.001: Create Content Farms
+T0089.002: Create Inauthentic Documents
T0096.002: Outsource Content Creation to External Organizations
-T0089.003: Leak Altered Documents
+T0089.003: Alter Authentic Documents
diff --git a/generated_pages/disarm_red_framework.md b/generated_pages/disarm_red_framework.md
index 2f7f88b..9eab4af 100644
--- a/generated_pages/disarm_red_framework.md
+++ b/generated_pages/disarm_red_framework.md
@@ -86,7 +86,7 @@