DISARM

P01 Plan P01 Plan P02 Prepare P02 Prepare P02 Prepare P03 Execute P03 Execute P03 Execute P03 Execute P04 Assess P01 Plan P02 Prepare P02 Prepare P02 Prepare P03 Execute P03 Execute
TA01 Plan Strategy TA02 Plan Objectives TA05 Microtarget TA06 Develop Content TA07 Select Channels and Affordances TA08 Conduct Pump Priming TA09 Deliver Content TA10 Drive Offline Activity TA11 Persist in the Information Environment TA12 Assess Effectiveness TA13 Target Audience Analysis TA14 Develop Narratives TA15 Establish Assets TA16 Establish Legitimacy TA17 Maximise Exposure TA18 Drive Online Harms
T0073 Determine Target Audiences T0002 Facilitate State Propaganda T0016 Create Clickbait T0015 Create Hashtags and Search Artefacts T0029 Online Polls T0020 Trial Content T0114 Deliver Ads T0017 Conduct Fundraising T0059 Play the Long Game T0132 Measure Performance T0072 Segment Audiences T0003 Leverage Existing Narratives T0010 Cultivate Ignorant Agents T0097 Present Persona T0039 Bait Influencer T0047 Censor Social Media as a Political Force
T0074 Determine Strategic Ends T0066 Degrade Adversary T0018 Purchase Targeted Advertisements T0015.001 Use Existing Hashtag T0107 Bookmarking and Content Curation T0042 Seed Kernel of Truth T0114.001 Social Media T0017.001 Conduct Crowdfunding Campaigns T0060 Continue to Amplify T0132.001 People Focused T0072.001 Geographic Segmentation T0004 Develop Competing Narratives T0014 Prepare Fundraising Campaigns T0097.100 Individual Persona T0049 Flood Information Space T0048 Harass
T0074.001 Geopolitical Advantage T0075 Dismiss T0101 Create Localised Content T0015.002 Create New Hashtag T0109 Consumer Review Networks T0044 Seed Distortions T0114.002 Traditional Media T0057 Organise Events T0128 Conceal Information Assets T0132.002 Content Focused T0072.002 Demographic Segmentation T0022 Leverage Conspiracy Theory Narratives T0014.001 Raise Funds from Malign Actors T0097.101 Local Persona T0049.001 Trolls Amplify and Manipulate T0048.001 Boycott/"Cancel" Opponents
T0074.002 Domestic Political Advantage T0075.001 Discredit Credible Sources T0102 Leverage Echo Chambers/Filter Bubbles T0023 Distort Facts T0110 Formal Diplomatic Channels T0045 Use Fake Experts T0115 Post Content T0057.001 Pay for Physical Action T0128.001 Use Pseudonyms T0132.003 View Focused T0072.003 Economic Segmentation T0022.001 Amplify Existing Conspiracy Theory Narratives T0014.002 Raise Funds from Ignorant Agents T0097.102 Journalist Persona T0049.002 Flood Existing Hashtag T0048.002 Harass People Based on Identities
T0074.003 Economic Advantage T0076 Distort T0102.001 Use Existing Echo Chambers/Filter Bubbles T0023.001 Reframe Context T0111 Traditional Media T0046 Use Search Engine Optimisation T0115.001 Share Memes T0057.002 Conduct Symbolic Action T0128.002 Conceal Network Identity T0133 Measure Effectiveness T0072.004 Psychographic Segmentation T0022.002 Develop Original Conspiracy Theory Narratives T0065 Prepare Physical Broadcast Capabilities T0097.103 Activist Persona T0049.003 Bots Amplify via Automated Forwarding and Reposting T0048.003 Threaten to Dox
T0074.004 Ideological Advantage T0077 Distract T0102.002 Create Echo Chambers/Filter Bubbles T0023.002 Edit Open-Source Content T0111.001 TV T0115.002 Post Violative Content to Provoke Takedown and Backlash T0061 Sell Merchandise T0128.003 Distance Reputable Individuals from Operation T0133.001 Behaviour Changes T0072.005 Political Segmentation T0040 Demand Insurmountable Proof T0091 Recruit Malign Actors T0097.104 Hacktivist Persona T0049.004 Utilise Spamoflauge T0048.004 Dox
T0078 Dismay T0102.003 Exploit Data Voids T0084 Reuse Existing Content T0111.002 Newspaper T0115.003 One-Way Direct Posting T0126 Encourage Attendance at Events T0128.004 Launder Information Assets T0133.002 Content T0080 Map Target Audience Information Environment T0068 Respond to Breaking News Event or Active Crisis T0091.001 Recruit Contractors T0097.105 Military Personnel Persona T0049.005 Conduct Swarming T0123 Control Information Environment through Offensive Cyberspace Operations
T0079 Divide T0084.001 Use Copypasta T0111.003 Radio T0116 Comment or Reply on Content T0126.001 Call to Action to Attend T0128.005 Change Names of Information Assets T0133.003 Awareness T0080.001 Monitor Social Media Analytics T0082 Develop New Narratives T0091.002 Recruit Partisans T0097.106 Recruiter Persona T0049.006 Conduct Keyword Squatting T0123.001 Delete Opposing Content
T0135 Undermine T0084.002 Plagiarise Content T0151 Digital Community Hosting Asset T0116.001 Post Inauthentic Social Media Comment T0126.002 Facilitate Logistics or Support for Attendance T0129 Conceal Operational Activity T0133.004 Knowledge T0080.002 Evaluate Media Surveys T0083 Integrate Target Audience Vulnerabilities into Narrative T0091.003 Enlist Troll Accounts T0097.107 Researcher Persona T0049.007 Inauthentic Sites Amplify News and Narratives T0123.002 Block Content
T0135.001 Smear T0084.003 Deceptively Labelled or Translated T0151.001 Social Media Platform T0117 Attract Traditional Media T0127 Physical Violence T0129.001 Conceal Network Identity T0133.005 Action/Attitude T0080.003 Identify Trending Topics/Hashtags T0092 Build Network T0097.108 Expert Persona T0049.008 Generate Information Pollution T0123.003 Destroy Information Generation Capabilities
T0135.002 Thwart T0084.004 Appropriate Content T0151.002 Online Community Group T0127.001 Conduct Physical Violence T0129.002 Generate Content Unrelated to Narrative T0134 Measure Effectiveness Indicators (or KPIs) T0080.004 Conduct Web Traffic Analysis T0092.001 Create Organisations T0097.109 Romantic Suitor Persona T0118 Amplify Existing Narrative T0123.004 Conduct Server Redirect
T0135.003 Subvert T0085 Develop Text-Based Content T0151.003 Online Community Page T0127.002 Encourage Physical Violence T0129.003 Break Association with Content T0134.001 Message Reach T0080.005 Assess Degree/Type of Media Access T0092.002 Use Follow Trains T0097.110 Party Official Persona T0119 Cross-Posting T0124 Suppress Opposition
T0135.004 Polarise T0085.001 Develop AI-Generated Text T0151.004 Chat Platform T0129.004 Delete URLs T0134.002 Social Media Engagement T0081 Identify Social and Technical Vulnerabilities T0092.003 Create Community or Sub-Group T0097.111 Government Official Persona T0119.001 Post across Groups T0124.001 Report Non-Violative Opposing Content
T0136 Cultivate Support T0085.003 Develop Inauthentic News Articles T0151.005 Chat Community Server T0129.005 Coordinate on Encrypted/Closed Networks T0081.001 Find Echo Chambers T0093 Acquire/Recruit Network T0097.112 Government Employee Persona T0119.002 Post across Platform T0124.002 Goad People into Harmful Action (Stop Hitting Yourself)
T0136.001 Defend Reputaton T0085.004 Develop Document T0151.006 Chat Room T0129.006 Deny Involvement T0081.002 Identify Data Voids T0093.001 Fund Proxies T0097.200 Institutional Persona T0119.003 Post across Disciplines T0124.003 Exploit Platform TOS/Content Moderation
T0136.002 Justify Action T0085.005 Develop Book T0151.007 Chat Broadcast Group T0129.007 Delete Accounts/Account Activity T0081.003 Identify Existing Prejudices T0093.002 Acquire Botnets T0097.201 Local Institution Persona T0120 Incentivize Sharing T0125 Platform Filtering
T0136.003 Energise Supporters T0085.006 Develop Opinion Article T0151.008 Microblogging Platform T0129.009 Remove Post Origins T0081.004 Identify Existing Fissures T0094 Infiltrate Existing Networks T0097.202 News Outlet Persona T0120.001 Use Affiliate Marketing Programmes
T0136.004 Boost Reputation T0085.007 Create Fake Research T0151.009 Legacy Online Forum Platform T0129.010 Misattribute Activity T0081.005 Identify Existing Conspiracy Narratives/Suspicions T0094.001 Identify Susceptible Targets in Networks T0097.203 Fact Checking Organisation Persona T0120.002 Use Contests and Prizes
T0136.005 Cultvate Support for Initiative T0085.008 Machine Translated Text T0151.010 Community Forum Platform T0130 Conceal Infrastructure T0081.006 Identify Wedge Issues T0094.002 Utilise Butterfly Attacks T0097.204 Think Tank Persona T0121 Manipulate Platform Algorithm
T0136.006 Cultivate Support for Ally T0086 Develop Image-Based Content T0151.011 Community Sub-Forum T0130.001 Conceal Sponsorship T0081.007 Identify Target Audience Adversaries T0095 Develop Owned Media Assets T0097.205 Business Persona T0121.001 Bypass Content Blocking
T0136.007 Recruit Members T0086.001 Develop Memes T0151.012 Image Board Platform T0130.002 Utilise Bulletproof Hosting T0081.008 Identify Media System Vulnerabilities T0096 Leverage Content Farms T0097.206 Government Institution Persona T0122 Direct Users to Alternative Platforms
T0136.008 Increase Prestige T0086.002 Develop AI-Generated Images (Deepfakes) T0151.013 Question and Answer Platform T0130.003 Use Shell Organisations T0096.001 Create Content Farms T0097.207 NGO Persona
T0137 Make Money T0086.003 Deceptively Edit Images (Cheap Fakes) T0151.014 Comments Section T0130.004 Use Cryptocurrency T0096.002 Outsource Content Creation to External Organisations T0097.208 Social Cause Persona
T0137.001 Generate Ad Revenue T0086.004 Aggregate Information into Evidence Collages T0151.015 Online Game Platform T0130.005 Obfuscate Payment T0113 Employ Commercial Analytic Firms T0098 Establish Inauthentic News Sites
T0137.002 Scam T0087 Develop Video-Based Content T0151.016 Online Game Session T0131 Exploit TOS/Content Moderation T0145 Establish Account Imagery T0098.001 Create Inauthentic News Sites
T0137.003 Raise Funds T0087.001 Develop AI-Generated Videos (Deepfakes) T0151.017 Dating Platform T0131.001 Legacy Web Content T0145.001 Copy Account Imagery T0098.002 Leverage Existing Inauthentic News Sites
T0137.004 Sell Items under False Pretences T0087.002 Deceptively Edit Video (Cheap Fakes) T0152 Digital Content Hosting Asset T0131.002 Post Borderline Content T0145.002 AI-Generated Account Imagery T0100 Co-Opt Trusted Sources
T0137.005 Extort T0088 Develop Audio-Based Content T0152.001 Blogging Platform T0145.003 Animal Account Imagery T0100.001 Co-Opt Trusted Individuals
T0137.006 Manipulate Stocks T0088.001 Develop AI-Generated Audio (Deepfakes) T0152.002 Blog Asset T0145.004 Scenery Account Imagery T0100.002 Co-Opt Grassroots Groups
T0138 Motivate to Act T0088.002 Deceptively Edit Audio (Cheap Fakes) T0152.003 Website Hosting Platform T0145.005 Illustrated Character Account Imagery T0100.003 Co-Opt Influencers
T0138.001 Encourage T0089 Obtain Private Documents T0152.004 Website Asset T0145.006 Attractive Person Account Imagery T0143 Persona Legitimacy
T0138.002 Provoke T0089.001 Obtain Authentic Documents T0152.005 Paste Platform T0145.007 Stock Image Account Imagery T0143.001 Authentic Persona
T0138.003 Compel T0089.003 Alter Authentic Documents T0152.006 Video Platform T0146 Account Asset T0143.002 Fabricated Persona
T0139 Dissuade from Acting T0152.007 Audio Platform T0146.001 Free Account Asset T0143.003 Impersonated Persona
T0139.001 Discourage T0152.008 Live Streaming Platform T0146.002 Paid Account Asset T0143.004 Parody Persona
T0139.002 Silence T0152.009 Software Delivery Platform T0146.003 Verified Account Asset T0144 Persona Legitimacy Evidence
T0139.003 Deter T0152.010 File Hosting Platform T0146.004 Administrator Account Asset T0144.001 Present Persona across Platforms
T0140 Cause Harm T0152.011 Wiki Platform T0146.005 Lookalike Account ID T0144.002 Persona Template
T0140.001 Defame T0152.012 Subscription Service Platform T0146.006 Open Access Platform
T0140.002 Intimidate T0153 Digital Content Delivery Asset T0146.007 Automated Account Asset
T0140.003 Spread Hate T0153.001 Email Platform T0147 Software Asset
T0153.002 Link Shortening Platform T0147.001 Game Asset
T0153.003 Shortened Link Asset T0147.002 Game Mod Asset
T0153.004 QR Code Asset T0147.003 Malware Asset
T0153.005 Online Advertising Platform T0147.004 Mobile App Asset
T0153.006 Content Recommendation Algorithm T0148 Financial Instrument
T0153.007 Direct Messaging T0148.001 Online Banking Platform
T0154 Digital Content Creation Asset T0148.002 Bank Account Asset
T0154.001 AI LLM Platform T0148.003 Payment Processing Platform
T0154.002 AI Media Platform T0148.004 Payment Processing Capability
T0155 Gated Asset T0148.005 Subscription Processing Capability
T0155.001 Password Gated Asset T0148.006 Crowdfunding Platform
T0155.002 Invite Gated Asset T0148.007 eCommerce Platform
T0155.003 Approval Gated Asset T0148.008 Cryptocurrency Exchange Platform
T0155.004 Geoblocked Asset T0148.009 Cryptocurrency Wallet
T0155.005 Paid Access Asset T0149 Online Infrastructure
T0155.006 Subscription Access Asset T0149.001 Domain Asset
T0155.007 Encrypted Communication Channel T0149.002 Email Domain Asset
T0149.003 Lookalike Domain
T0149.004 Redirecting Domain Asset
T0149.005 Server Asset
T0149.006 IP Address Asset
T0149.007 VPN Asset
T0149.008 Proxy IP Address Asset
T0149.009 Internet Connected Physical Asset
T0150 Asset Origin
T0150.001 Newly Created Asset
T0150.002 Dormant Asset
T0150.003 Pre-Existing Asset
T0150.004 Repurposed Asset
T0150.005 Compromised Asset
T0150.006 Purchased Asset
T0150.007 Rented Asset
T0150.008 Bulk Created Asset