{ "type": "bundle", "id": "bundle--bedadddf-1f90-4478-b580-4bc74befc712", "objects": [ { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--91e50646-d377-4904-8b8a-db58454fbbe2", "created_by_ref": "identity--64355a3c-25b3-4d52-aab2-cfe7a5b8b505", "created": "2022-07-01T16:24:14.439837Z", "modified": "2022-07-01T16:24:14.439837Z", "name": "Plan Strategy", "description": "Define the desired end state, i.e. the set of required conditions that defines achievement of all objectives.", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA01.md", "external_id": "TA01" } ], "object_marking_refs": [ "marking-definition--3dbaea82-d695-4310-a9be-17e0836d03f4" ], "x_mitre_shortname": "plan-strategy" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--bd30ac72-3528-4704-97fc-e7049ff50486", "created_by_ref": "identity--13164bba-0858-4d4b-b14e-753f0b68bf9c", "created": "2022-07-01T16:24:14.441002Z", "modified": "2022-07-01T16:24:14.441002Z", "name": "Plan Objectives", "description": "Set clearly defined, measurable, and achievable objectives. Achieving objectives ties execution of tactical tasks to reaching the desired end state. There are four primary considerations: \n- Each desired effect should link directly to one or more objectives \n- The effect should be measurable \n- The objective statement should not specify the way and means of accomplishment \n- The effect should be distinguishable from the objective it supports as a condition for success, not as another objective or task.", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA02.md", "external_id": "TA02" } ], "object_marking_refs": [ "marking-definition--af41d480-cf54-498c-b60f-e61833f35500" ], "x_mitre_shortname": "plan-objectives" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--39ba49b5-27ef-4919-ad0c-21cf5f6d5ea0", "created_by_ref": "identity--81cbf818-e943-45f2-997f-c9fc26f9d348", "created": "2022-07-01T16:24:14.44239Z", "modified": "2022-07-01T16:24:14.44239Z", "name": "Microtarget", "description": "Target very specific populations of people", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA05.md", "external_id": "TA05" } ], "object_marking_refs": [ "marking-definition--e9b47596-0f93-44d7-84a8-ca4fcb975938" ], "x_mitre_shortname": "microtarget" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--0c4cb5fb-80e0-4185-b007-683e55d444ea", "created_by_ref": "identity--feaab16e-9ae2-4182-9ff7-dabcdee056f6", "created": "2022-07-01T16:24:14.443761Z", "modified": "2022-07-01T16:24:14.443761Z", "name": "Develop Content", "description": "Create or acquire text, images, and other content", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA06.md", "external_id": "TA06" } ], "object_marking_refs": [ "marking-definition--9fa23518-a7a6-401b-88ef-b2e6de1e458e" ], "x_mitre_shortname": "develop-content" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--c7e154be-29c7-4ec9-b00b-15b271a53f4d", "created_by_ref": "identity--7f62f365-29df-4b1b-86fa-2b995a40608e", "created": "2022-07-01T16:24:14.444659Z", "modified": "2022-07-01T16:24:14.444659Z", "name": "Select Channels and Affordances", "description": "Selecting platforms and affordances assesses which online or offline platforms and their associated affordances maximize an influence operation\u2019s ability to reach its target audience. To select the most appropriate platform(s), an operation may assess the technological affordances including platform algorithms, terms of service, permitted content types, or other attributes that determine platform usability and accessibility. Selecting platforms includes both choosing platforms on which the operation will publish its own content and platforms on which the operation will attempt to restrict adversarial content.", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA07.md", "external_id": "TA07" } ], "object_marking_refs": [ "marking-definition--f3bf84d6-ecfd-48cd-9e95-06af4d596881" ], "x_mitre_shortname": "select-channels-and-affordances" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--dab5cc61-8a53-42a6-ad76-7725680f1376", "created_by_ref": "identity--dcf56245-d59e-437a-874f-4bcc0b059b09", "created": "2022-07-01T16:24:14.44589Z", "modified": "2022-07-01T16:24:14.44589Z", "name": "Conduct Pump Priming", "description": "Release content on a targetted small scale, prior to general release, including releasing seed. Used for preparation before broader release, and as message honing. Used for preparation before broader release, and as message honing. ", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA08.md", "external_id": "TA08" } ], "object_marking_refs": [ "marking-definition--5f2315c1-ea35-4420-adb7-34eb4b88a3be" ], "x_mitre_shortname": "conduct-pump-priming" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--95a8ea59-bcd3-45fb-88a2-e1ec86707eba", "created_by_ref": "identity--8533a529-7d9e-4544-9274-a6cbc3a637c9", "created": "2022-07-01T16:24:14.447006Z", "modified": "2022-07-01T16:24:14.447006Z", "name": "Deliver Content", "description": "Release content to general public or larger population", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA09.md", "external_id": "TA09" } ], "object_marking_refs": [ "marking-definition--990caa7c-649a-46e6-a90c-960ce4eb32a1" ], "x_mitre_shortname": "deliver-content" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--b946c4ec-838c-4328-8529-b1e0bbb9f958", "created_by_ref": "identity--59f7f1cc-b876-4272-ad4f-d6b8a71752e4", "created": "2022-07-01T16:24:14.44817Z", "modified": "2022-07-01T16:24:14.44817Z", "name": "Drive Offline Activity", "description": "Move incident/campaign from online to offline. Encouraging users to move from the platform on which they initially viewed operation content and engage in the physical information space or offline world. This may include operation-aligned rallies or protests, radio, newspaper, or billboards. An influence operation may drive to physical forums to diversify its information channels and facilitate spaces where the target audience can engage with both operation content and like-minded individuals offline. ", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA10.md", "external_id": "TA10" } ], "object_marking_refs": [ "marking-definition--f2592bf3-125a-46b2-8416-50725b38fe2b" ], "x_mitre_shortname": "drive-offline-activity" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--2cfa7033-a678-4aa0-bee5-bf48ce833e42", "created_by_ref": "identity--63341021-66cf-411c-99e7-40984d03e2a7", "created": "2022-07-01T16:24:14.449593Z", "modified": "2022-07-01T16:24:14.449593Z", "name": "Persist in the Information Environment", "description": "Persist in the Information Space refers to taking measures that allow an operation to maintain its presence and avoid takedown by an external entity. Techniques in Persist in the Information Space help campaigns operate without detection and appear legitimate to the target audience and platform monitoring services. Influence operations on social media often persist online by varying the type of information assets and platforms used throughout the campaign.", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA11.md", "external_id": "TA11" } ], "object_marking_refs": [ "marking-definition--f3a4ac37-2d87-49ef-af2f-e6ab749bb012" ], "x_mitre_shortname": "persist-in-the-information-environment" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--e6145745-2127-4a3e-8dda-23a2464a4f49", "created_by_ref": "identity--7922d877-dfe3-4b41-9870-6f55fd1adabe", "created": "2022-07-01T16:24:14.451171Z", "modified": "2022-07-01T16:24:14.451171Z", "name": "Assess Effectiveness", "description": "Assess effectiveness of action, for use in future plans ", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA12.md", "external_id": "TA12" } ], "object_marking_refs": [ "marking-definition--86ad2f9c-f10a-4a48-b80f-e36e2414394c" ], "x_mitre_shortname": "assess-effectiveness" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--19a9fbb5-f208-4d04-bc3d-cf4d9ab40472", "created_by_ref": "identity--71e97e7d-839d-461a-942c-1617627d04be", "created": "2022-07-01T16:24:14.452392Z", "modified": "2022-07-01T16:24:14.452392Z", "name": "Target Audience Analysis", "description": "Identifying and analyzing the target audience examines target audience member locations, political affiliations, financial situations, and other attributes that an influence operation may incorporate into its messaging strategy. During this tactic, influence operations may also identify existing similarities and differences between target audience members to unite like groups and divide opposing groups. Identifying and analyzing target audience members allows influence operations to tailor operation strategy and content to their analysis. ", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA13.md", "external_id": "TA13" } ], "object_marking_refs": [ "marking-definition--745200c7-2af1-4c06-a7f0-08a9275a02ae" ], "x_mitre_shortname": "target-audience-analysis" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--ba67bdf7-9c5e-4c41-9233-42152146073e", "created_by_ref": "identity--c22d45e9-e434-48bb-abc7-dd6445c64cfe", "created": "2022-07-01T16:24:14.453795Z", "modified": "2022-07-01T16:24:14.453795Z", "name": "Develop Narratives", "description": "The promotion of beneficial master narratives is perhaps the most effective method for achieving long-term strategic narrative dominance. From a \"\"whole of society\"\" perspective the promotion of the society's core master narratives should occupy a central strategic role. From a misinformation campaign / cognitive security perpectve the tactics around master narratives center more precisely on the day-to-day promotion and reinforcement of this messaging. In other words, beneficial, high-coverage master narratives are a central strategic goal and their promotion constitutes an ongoing tactical struggle carried out at a whole-of-society level. Tactically, their promotion covers a broad spectrum of activities both on- and offline.", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA14.md", "external_id": "TA14" } ], "object_marking_refs": [ "marking-definition--0591e14d-04ac-4dfd-999c-eaa2b80b44a4" ], "x_mitre_shortname": "develop-narratives" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--415417fd-38b3-4e8e-81aa-2888e7d14948", "created_by_ref": "identity--e535e417-4fa5-42b2-aaab-0c6f4237bd49", "created": "2022-07-01T16:24:14.455081Z", "modified": "2022-07-01T16:24:14.455081Z", "name": "Establish Social Assets", "description": "Establishing information assets generates messaging tools, including social media accounts, operation personnel, and organizations, including directly and indirectly managed assets. For assets under their direct control, the operation can add, change, or remove these assets at will. \nEstablishing information assets allows an influence operation to promote messaging directly to the target audience without navigating through external entities. Many online influence operations create or compromise social media accounts as a primary vector of information dissemination.", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA15.md", "external_id": "TA15" } ], "object_marking_refs": [ "marking-definition--701428fc-dbb4-40ac-9aa5-a75c75178ab2" ], "x_mitre_shortname": "establish-social-assets" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--4c6114bf-663b-4da8-81fe-ef35653c2de4", "created_by_ref": "identity--b805f585-4ea3-4805-8329-71092f5be423", "created": "2022-07-01T16:24:14.456229Z", "modified": "2022-07-01T16:24:14.456229Z", "name": "Establish Legitimacy", "description": "Establish assets that create trust", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA16.md", "external_id": "TA16" } ], "object_marking_refs": [ "marking-definition--60597e0d-6de0-44ee-bc63-4c8814adb15b" ], "x_mitre_shortname": "establish-legitimacy" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--c37c514d-52b9-4ff2-83c5-0f65719439a0", "created_by_ref": "identity--9343b339-e89f-4940-925d-bc1922f816c5", "created": "2022-07-01T16:24:14.457356Z", "modified": "2022-07-01T16:24:14.457356Z", "name": "Maximize Exposure", "description": "Maximize exposure of the target audience to incident/campaign content via flooding, amplifying, and cross-posting.", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA17.md", "external_id": "TA17" } ], "object_marking_refs": [ "marking-definition--c1ffdf22-92b7-46b8-996d-372395922f8b" ], "x_mitre_shortname": "maximize-exposure" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--106f515b-06d4-42cb-839a-7fc272267917", "created_by_ref": "identity--4d433e64-2ef7-4c87-9268-1ac6d59453c0", "created": "2022-07-01T16:24:14.458478Z", "modified": "2022-07-01T16:24:14.458478Z", "name": "Drive Online Harms", "description": "Actions taken by an influence operation to harm their opponents in online spaces through harassment, suppression, releasing private information, and controlling the information space through offensive cyberspace operations. ", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA18.md", "external_id": "TA18" } ], "object_marking_refs": [ "marking-definition--b2694fc8-1125-4e80-b20d-bf2fe8514d2d" ], "x_mitre_shortname": "drive-online-harms" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5f08e62c-bab6-4bd1-9005-9d48fd82cbab", "created_by_ref": "identity--27307333-299b-481a-b7db-b666cf1879c6", "created": "2022-07-01T16:24:14.460274Z", "modified": "2022-07-01T16:24:14.460274Z", "name": "Determine Target Audiences", "description": "TA01", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "plan-strategy" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0073.md", "external_id": "T0073" } ], "object_marking_refs": [ "marking-definition--e4e789bf-173e-4bb0-9284-cd5b04835783" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--df4a8d44-11d1-43ea-b0d2-9aa152a293ed", "created_by_ref": "identity--5894e75b-bc5c-46f3-9371-acd18fa603ec", "created": "2022-07-01T16:24:14.461463Z", "modified": "2022-07-01T16:24:14.461463Z", "name": "Determine Strategic Ends", "description": "TA01", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "plan-strategy" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0074.md", "external_id": "T0074" } ], "object_marking_refs": [ "marking-definition--907e8170-1ba8-4270-9c89-5fae201cffea" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d79d165a-5122-4b7f-95e3-c20b98a2849e", "created_by_ref": "identity--a65c0253-4f25-4128-9615-7465157a9846", "created": "2022-07-01T16:24:14.462393Z", "modified": "2022-07-01T16:24:14.462393Z", "name": "Map Target Audience Information Environment", "description": "TA13", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "target-audience-analysis" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0080.md", "external_id": "T0080" } ], "object_marking_refs": [ "marking-definition--4e7952f9-5c32-4785-b2ab-a6d8bbb7cfd7" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--92fd7ece-b25d-43e4-9ab2-3a89aa7470df", "created_by_ref": "identity--3bb8a9ea-7b25-4a61-9aec-85d57c6eb084", "created": "2022-07-01T16:24:14.463337Z", "modified": "2022-07-01T16:24:14.463337Z", "name": "Identify Social and Technical Vulnerabilities", "description": "TA13", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "target-audience-analysis" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0081.md", "external_id": "T0081" } ], "object_marking_refs": [ "marking-definition--b2c49641-eb07-4f26-8061-240b458191ab" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--820d8a0a-d1c5-4169-972a-4a421c6628e1", "created_by_ref": "identity--068d67a1-8e32-49e3-9274-953360fb8c72", "created": "2022-07-01T16:24:14.464255Z", "modified": "2022-07-01T16:24:14.464255Z", "name": "Develop New Narratives", "description": "TA14", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-narratives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0082.md", "external_id": "T0082" } ], "object_marking_refs": [ "marking-definition--e6c66eeb-ea25-43b8-9940-7495e3da73e4" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c8b9088e-f0e0-4410-9d35-dce9aea109e3", "created_by_ref": "identity--ac595ca8-7df5-431b-808b-72c130c1b18e", "created": "2022-07-01T16:24:14.46517Z", "modified": "2022-07-01T16:24:14.46517Z", "name": "Integrate Target Audience Vulnerabilities into Narrative", "description": "TA14", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-narratives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0083.md", "external_id": "T0083" } ], "object_marking_refs": [ "marking-definition--3455c4b3-95fd-4abd-bdee-1c1441ce9b85" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e030dc3f-1b53-48d3-a9ef-23b494f24a87", "created_by_ref": "identity--1cd7a35a-e618-4266-8d04-470b5699d0cb", "created": "2022-07-01T16:24:14.466285Z", "modified": "2022-07-01T16:24:14.466285Z", "name": "Reuse Existing Content", "description": "TA06", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0084.md", "external_id": "T0084" } ], "object_marking_refs": [ "marking-definition--6d904313-21b2-4ad3-8616-e6458b1d5a2e" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--8de1d7ac-1b1d-4be1-bf4c-273d63bef236", "created_by_ref": "identity--a168776a-f449-41a5-a970-c38932c7c93c", "created": "2022-07-01T16:24:14.468029Z", "modified": "2022-07-01T16:24:14.468029Z", "name": "Develop Text-based Content", "description": "TA06", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0085.md", "external_id": "T0085" } ], "object_marking_refs": [ "marking-definition--12dfe230-9345-44e1-975e-1ea27a385ea5" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--6e5017af-f5de-428d-b421-3fff2c6f75ed", "created_by_ref": "identity--df32d6ed-6af3-4089-b25c-f0023282e2ea", "created": "2022-07-01T16:24:14.470187Z", "modified": "2022-07-01T16:24:14.470187Z", "name": "Develop Image-based Content", "description": "TA06", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0086.md", "external_id": "T0086" } ], "object_marking_refs": [ "marking-definition--cf929bb9-3578-41bf-99ac-a4f13b0bea43" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--2f4c39f6-d4af-4e11-a997-9ef48c362e17", "created_by_ref": "identity--eadbd218-6f53-4dfb-bf17-f7988e8fac92", "created": "2022-07-01T16:24:14.471436Z", "modified": "2022-07-01T16:24:14.471436Z", "name": "Develop Video-based Content", "description": "TA06", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0087.md", "external_id": "T0087" } ], "object_marking_refs": [ "marking-definition--078c35f3-4cff-4e4c-ad57-ef0666658a26" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--af9cd469-0123-4a2a-a77d-000d01b1c4c5", "created_by_ref": "identity--48a5b24b-b2de-4ad3-8ce5-bb4d36949790", "created": "2022-07-01T16:24:14.472427Z", "modified": "2022-07-01T16:24:14.472427Z", "name": "Develop Audio-based Content", "description": "TA06", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0088.md", "external_id": "T0088" } ], "object_marking_refs": [ "marking-definition--c62fcd7e-5c3a-456b-8c32-dfa81c8a1129" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c6616434-8111-4342-b825-b1007900a9db", "created_by_ref": "identity--cbfd24f7-ef88-405d-a3ff-c59b7e296b5e", "created": "2022-07-01T16:24:14.473415Z", "modified": "2022-07-01T16:24:14.473415Z", "name": "Obtain Private Documents", "description": "TA06", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0089.md", "external_id": "T0089" } ], "object_marking_refs": [ "marking-definition--c40d92b2-9b6d-422e-8fdb-b7deed9fb807" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b2413c39-7f40-48b0-b22e-f8591bbd40e6", "created_by_ref": "identity--3e623f11-ecf5-43cc-b425-aad3f116e9e9", "created": "2022-07-01T16:24:14.474416Z", "modified": "2022-07-01T16:24:14.474416Z", "name": "Create Inauthentic Accounts", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0090.md", "external_id": "T0090" } ], "object_marking_refs": [ "marking-definition--f60a407c-4d9f-406a-980d-8de7519fe897" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--4f89cab1-bff8-427e-926d-b941863553ec", "created_by_ref": "identity--e8c42977-1372-435d-929c-b04bfa2db7dd", "created": "2022-07-01T16:24:14.475564Z", "modified": "2022-07-01T16:24:14.475564Z", "name": "Recruit bad actors", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0091.md", "external_id": "T0091" } ], "object_marking_refs": [ "marking-definition--b81d5e29-9475-4528-a6e7-93d6680b1d45" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--1ff91dc0-b242-4772-bd06-be4b6f61494b", "created_by_ref": "identity--255a5cc4-4aff-4b40-9c7a-81db68736898", "created": "2022-07-01T16:24:14.476685Z", "modified": "2022-07-01T16:24:14.476685Z", "name": "Build Network", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0092.md", "external_id": "T0092" } ], "object_marking_refs": [ "marking-definition--a63852a9-3bd3-4485-84b0-0b83176143c5" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d86144e8-a1c6-4cb9-b9fb-7c374bc7d0b3", "created_by_ref": "identity--cd487c42-b790-48c2-843d-732f59b2e225", "created": "2022-07-01T16:24:14.477696Z", "modified": "2022-07-01T16:24:14.477696Z", "name": "Acquire/ recruit Network", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0093.md", "external_id": "T0093" } ], "object_marking_refs": [ "marking-definition--a217ace8-6a0c-48e2-b597-081a5a112158" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--0f24fc67-a682-4a06-8f34-8fe6f3c6532d", "created_by_ref": "identity--33146be0-d03a-45f9-b8bb-95b536c40ed5", "created": "2022-07-01T16:24:14.478801Z", "modified": "2022-07-01T16:24:14.478801Z", "name": "Infiltrate Existing Networks", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0094.md", "external_id": "T0094" } ], "object_marking_refs": [ "marking-definition--dfc2461f-1a29-42cc-a758-1cb1d1c3f86f" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c0ca6d1c-6be5-49d6-8d80-b7325bd57512", "created_by_ref": "identity--da0851c8-6dec-4ae9-ba5e-00cd033fa985", "created": "2022-07-01T16:24:14.479813Z", "modified": "2022-07-01T16:24:14.479813Z", "name": "Develop Owned Media Assets", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0095.md", "external_id": "T0095" } ], "object_marking_refs": [ "marking-definition--2a25897b-44b6-4cf4-8f1d-e099f5d76ef7" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--537fc870-dd6e-4c78-a85e-d2675cb85272", "created_by_ref": "identity--e12bbda8-3427-4bb1-a3a5-f22ee394a02f", "created": "2022-07-01T16:24:14.480871Z", "modified": "2022-07-01T16:24:14.480871Z", "name": "Leverage Content Farm", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0096.md", "external_id": "T0096" } ], "object_marking_refs": [ "marking-definition--59a99022-a19d-4d3e-8490-227017b97e8c" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--7f8a7619-22c1-4a7a-85cd-5124f9f4b7d2", "created_by_ref": "identity--7a6a5107-0b80-4663-ba46-51a1069f8ca8", "created": "2022-07-01T16:24:14.481994Z", "modified": "2022-07-01T16:24:14.481994Z", "name": "Create personas", "description": "TA16", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-legitimacy" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0097.md", "external_id": "T0097" } ], "object_marking_refs": [ "marking-definition--2d85e55e-1bd3-4055-8d05-2c9cf5ed9809" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--11312b5a-8e17-48d1-b38b-5166f2b1a0f4", "created_by_ref": "identity--9b5ec443-0df3-445f-99bf-949a271b742c", "created": "2022-07-01T16:24:14.483453Z", "modified": "2022-07-01T16:24:14.483453Z", "name": "Establish Inauthentic News Sites", "description": "TA16", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-legitimacy" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0098.md", "external_id": "T0098" } ], "object_marking_refs": [ "marking-definition--fedb8cd3-f4b6-4bc2-b972-f95859c5db0a" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--1b12ec34-04cf-4bd1-b0ef-65ec98369792", "created_by_ref": "identity--4c9f2af1-dc6d-4054-9a31-d58aaf0d23fc", "created": "2022-07-01T16:24:14.484756Z", "modified": "2022-07-01T16:24:14.484756Z", "name": "Prepare Assets Impersonating Legitimate Entities", "description": "TA16", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-legitimacy" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0099.md", "external_id": "T0099" } ], "object_marking_refs": [ "marking-definition--3dcb1243-22ca-43ea-87ba-aa1cc807eaff" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--0cc5f7d7-f316-407a-9e15-fb2434c99c3b", "created_by_ref": "identity--f2fde7e7-1933-427a-a583-e0b59b31a3e1", "created": "2022-07-01T16:24:14.485847Z", "modified": "2022-07-01T16:24:14.485847Z", "name": "Co-opt Trusted Sources", "description": "TA16", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-legitimacy" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0100.md", "external_id": "T0100" } ], "object_marking_refs": [ "marking-definition--cc52949e-a6c8-4022-8842-b21b3329c46d" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--99db72ab-99a2-434d-be3e-fcdd7456e6da", "created_by_ref": "identity--ea479f5a-151e-476e-aa27-92fdc16e9c23", "created": "2022-07-01T16:24:14.486882Z", "modified": "2022-07-01T16:24:14.486882Z", "name": "Create Localized Content", "description": "TA05", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "microtarget" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0101.md", "external_id": "T0101" } ], "object_marking_refs": [ "marking-definition--654187d5-7333-4e0a-b727-a3fcc7133b90" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--2cb6e264-c3cf-47ab-85e7-09ed366fd0b4", "created_by_ref": "identity--50e8492f-5f86-4e58-9bd7-fa65357526bb", "created": "2022-07-01T16:24:14.487868Z", "modified": "2022-07-01T16:24:14.487868Z", "name": "Leverage Echo Chambers/Filter Bubbles", "description": "TA05", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "microtarget" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0102.md", "external_id": "T0102" } ], "object_marking_refs": [ "marking-definition--7066cf1d-f2a0-4903-92d4-7dc26e08a6f7" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--06c9119a-435f-40b8-b418-91e8c877efe2", "created_by_ref": "identity--4a37e7dd-f3dc-4b57-a5c9-75f8e0936278", "created": "2022-07-01T16:24:14.48885Z", "modified": "2022-07-01T16:24:14.48885Z", "name": "Livestream", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0103.md", "external_id": "T0103" } ], "object_marking_refs": [ "marking-definition--fb60102d-acd3-42c3-8aea-af75d6e48a6a" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--168e5294-e0d4-4e93-abb1-9b9749ae06bf", "created_by_ref": "identity--ddadf64e-29fb-46d0-9107-0add7e0654d1", "created": "2022-07-01T16:24:14.489933Z", "modified": "2022-07-01T16:24:14.489933Z", "name": "Social Networks", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0104.md", "external_id": "T0104" } ], "object_marking_refs": [ "marking-definition--42f820b8-98f0-4c53-b78c-c4e585d1d064" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--3f63b868-f5f3-4491-b156-8d023a9cece8", "created_by_ref": "identity--ec311699-8074-43ff-a976-cdde5695c655", "created": "2022-07-01T16:24:14.49091Z", "modified": "2022-07-01T16:24:14.49091Z", "name": "Media Sharing Networks", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0105.md", "external_id": "T0105" } ], "object_marking_refs": [ "marking-definition--2e75e344-d447-4897-ba23-48af01b85b42" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--de608f3a-af0c-4117-a6ce-78080a2122d8", "created_by_ref": "identity--97c59fa2-d9a9-43bc-a9ea-a842ed6f27ed", "created": "2022-07-01T16:24:14.491884Z", "modified": "2022-07-01T16:24:14.491884Z", "name": "Discussion Forums", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0106.md", "external_id": "T0106" } ], "object_marking_refs": [ "marking-definition--31d2654f-43b0-4ba9-8aac-c5e64a4a39ac" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--051a61da-3aad-4f2f-9370-bc293f732d17", "created_by_ref": "identity--215a8b86-a5fc-4743-831f-414c2f2f62fc", "created": "2022-07-01T16:24:14.492857Z", "modified": "2022-07-01T16:24:14.492857Z", "name": "Bookmarking and Content Curation", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0107.md", "external_id": "T0107" } ], "object_marking_refs": [ "marking-definition--f48bbd9a-ab6f-4dbe-b230-42297747aca2" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--3de8dc56-6ecf-40e9-bb5c-fe9332ba0228", "created_by_ref": "identity--58943fbc-2fee-4765-9374-cacf8d71cae1", "created": "2022-07-01T16:24:14.49383Z", "modified": "2022-07-01T16:24:14.49383Z", "name": "Blogging and Publishing Networks", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0108.md", "external_id": "T0108" } ], "object_marking_refs": [ "marking-definition--44b4b8c1-33b5-4cfa-9f6e-2f4b2462d3d3" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--33fa0f18-22c5-46e6-a2de-422b63dc1fad", "created_by_ref": "identity--ea7c9ee7-84bf-4818-a6ba-8e160c64c1be", "created": "2022-07-01T16:24:14.494801Z", "modified": "2022-07-01T16:24:14.494801Z", "name": "Consumer Review Networks", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0109.md", "external_id": "T0109" } ], "object_marking_refs": [ "marking-definition--07428d13-3562-40c5-ace4-5c50089fb547" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--36cb20fd-e682-49ce-be89-311b4f42357b", "created_by_ref": "identity--ebb675d2-bb0c-455e-a501-0d6cb6557246", "created": "2022-07-01T16:24:14.495788Z", "modified": "2022-07-01T16:24:14.495788Z", "name": "Formal Diplomatic Channels", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0110.md", "external_id": "T0110" } ], "object_marking_refs": [ "marking-definition--0b44c0b5-cd03-4211-a388-fdc5cfce37db" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--3f646f9a-2c2d-45a8-a9a0-2e9ff7426c3c", "created_by_ref": "identity--7ee43c4e-6abc-4acb-aeb1-415ff3fae83d", "created": "2022-07-01T16:24:14.496768Z", "modified": "2022-07-01T16:24:14.496768Z", "name": "Traditional Media", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0111.md", "external_id": "T0111" } ], "object_marking_refs": [ "marking-definition--34137ead-d4b9-4b1d-8c88-49ec8ef0e030" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--00bbca3b-174b-4ec4-996e-435ed6234c54", "created_by_ref": "identity--95ce798f-15c9-4353-b2d9-53b17ad302b3", "created": "2022-07-01T16:24:14.497869Z", "modified": "2022-07-01T16:24:14.497869Z", "name": "Email", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0112.md", "external_id": "T0112" } ], "object_marking_refs": [ "marking-definition--8d54974d-5f97-41b5-b51c-b58abc326af7" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--452f8735-84e8-49f0-a364-c610c56a139d", "created_by_ref": "identity--60a17762-ba9b-4965-be21-e38eccee29ac", "created": "2022-07-01T16:24:14.498884Z", "modified": "2022-07-01T16:24:14.498884Z", "name": "Employ Commercial Analytic Firms", "description": "TA08", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "conduct-pump-priming" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0113.md", "external_id": "T0113" } ], "object_marking_refs": [ "marking-definition--931227da-5a37-4951-93ff-c1e7f61e599c" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--80db4685-548d-486f-bfaf-a77de967f07b", "created_by_ref": "identity--977b77e2-058c-4ad0-94ec-62a9be3441e9", "created": "2022-07-01T16:24:14.500488Z", "modified": "2022-07-01T16:24:14.500488Z", "name": "Deliver Ads", "description": "TA09", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "deliver-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0114.md", "external_id": "T0114" } ], "object_marking_refs": [ "marking-definition--a093ac3f-1f0c-414f-b36a-dda4371b01ac" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--713ed012-14e4-429d-aa83-23ac6a1cc9f8", "created_by_ref": "identity--84f48ff2-36ba-4057-8841-f2f9cd74d488", "created": "2022-07-01T16:24:14.501903Z", "modified": "2022-07-01T16:24:14.501903Z", "name": "Post Content", "description": "TA09", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "deliver-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0115.md", "external_id": "T0115" } ], "object_marking_refs": [ "marking-definition--525c8f1b-ca5c-47e1-85f0-e54d2e6833bc" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--131e344a-a72a-4a8d-8d4f-3981f51d3131", "created_by_ref": "identity--ae7af8f0-a6af-4e14-84c5-ea5e3db4e82c", "created": "2022-07-01T16:24:14.502924Z", "modified": "2022-07-01T16:24:14.502924Z", "name": "Comment or Reply on Content", "description": "TA09", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "deliver-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0116.md", "external_id": "T0116" } ], "object_marking_refs": [ "marking-definition--1ab0274a-2f0a-43b2-b39c-40e99b6ef113" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c8806650-d868-4a42-ad6e-6b709a20196e", "created_by_ref": "identity--dcb60397-c6ee-454d-88ad-b0c3352ada54", "created": "2022-07-01T16:24:14.50396Z", "modified": "2022-07-01T16:24:14.50396Z", "name": "Attract Traditional Media", "description": "TA09", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "deliver-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0117.md", "external_id": "T0117" } ], "object_marking_refs": [ "marking-definition--a1484ae9-f94d-4c7d-a878-aac74dfa438d" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--406a8bcd-a174-4ad0-8d85-078d9214583e", "created_by_ref": "identity--b7099c34-b712-470a-8848-1f5fc0b95f10", "created": "2022-07-01T16:24:14.504933Z", "modified": "2022-07-01T16:24:14.504933Z", "name": "Amplify Existing Narrative", "description": "TA17", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "maximize-exposure" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0118.md", "external_id": "T0118" } ], "object_marking_refs": [ "marking-definition--d9cf036c-8c82-45b4-9b43-a57dddcb4451" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--37628bcc-2d27-4206-91bc-3e1932d82c24", "created_by_ref": "identity--45aac078-8e2f-4253-a149-dbf293323e24", "created": "2022-07-01T16:24:14.505908Z", "modified": "2022-07-01T16:24:14.505908Z", "name": "Cross-Posting", "description": "TA17", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "maximize-exposure" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0119.md", "external_id": "T0119" } ], "object_marking_refs": [ "marking-definition--df0f38da-a10a-4f1e-aaee-2bfb485bb3c7" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e48d695c-2d13-447e-8ceb-443170af5c0b", "created_by_ref": "identity--397aadf4-5ac2-42de-a4db-3164f0e0da3a", "created": "2022-07-01T16:24:14.506857Z", "modified": "2022-07-01T16:24:14.506857Z", "name": "Incentivize Sharing", "description": "TA17", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "maximize-exposure" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0120.md", "external_id": "T0120" } ], "object_marking_refs": [ "marking-definition--cf84ff8b-0b37-4ef8-b974-10f672b45b7c" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--1dbe26f2-3d32-4874-a8be-857b9ce82484", "created_by_ref": "identity--5db4b618-b7a5-48eb-a0a5-1977fd858e4c", "created": "2022-07-01T16:24:14.507818Z", "modified": "2022-07-01T16:24:14.507818Z", "name": "Manipulate Platform Algorithm", "description": "TA17", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "maximize-exposure" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0121.md", "external_id": "T0121" } ], "object_marking_refs": [ "marking-definition--b673392e-a037-4f80-a59f-5262a1107006" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--a12da42d-6843-4b8c-b231-a9437ef602ca", "created_by_ref": "identity--95490c8c-36e1-42e2-ab99-403fabaca957", "created": "2022-07-01T16:24:14.50877Z", "modified": "2022-07-01T16:24:14.50877Z", "name": "Direct Users to Alternative Platforms", "description": "TA17", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "maximize-exposure" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0122.md", "external_id": "T0122" } ], "object_marking_refs": [ "marking-definition--3300dfbf-efc1-4276-9e5f-2bb065c968bd" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--14242459-09b5-49fd-a9d4-8bef7d08b44b", "created_by_ref": "identity--c765b10b-6c95-43cc-b3a0-16204cb67813", "created": "2022-07-01T16:24:14.509722Z", "modified": "2022-07-01T16:24:14.509722Z", "name": "Control Information Environment through Offensive Cyberspace Operations", "description": "TA18", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-online-harms" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0123.md", "external_id": "T0123" } ], "object_marking_refs": [ "marking-definition--51903a54-9405-4b44-94bb-afd007b56cf1" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--9fc957a5-1521-4812-9a9b-3586c3221d0b", "created_by_ref": "identity--5e8ce124-c570-4587-92b2-bddc4ecc556a", "created": "2022-07-01T16:24:14.510675Z", "modified": "2022-07-01T16:24:14.510675Z", "name": "Suppress Opposition", "description": "TA18", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-online-harms" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0124.md", "external_id": "T0124" } ], "object_marking_refs": [ "marking-definition--01b6f196-971b-4b82-b654-ff210c62b3dc" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--292fe986-f817-488c-ac94-eb48177d0db1", "created_by_ref": "identity--4a47880a-4ac1-47ba-af79-6e75948d6bd0", "created": "2022-07-01T16:24:14.51163Z", "modified": "2022-07-01T16:24:14.51163Z", "name": "Platform Filtering", "description": "TA18", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-online-harms" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0125.md", "external_id": "T0125" } ], "object_marking_refs": [ "marking-definition--bebf4c01-217b-4c58-8696-8ce2f273fc27" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--3b07ad39-bdef-48e4-80a5-586f11b7c468", "created_by_ref": "identity--df5a5eaf-8e3f-4e72-91df-e9849c38b3f7", "created": "2022-07-01T16:24:14.512595Z", "modified": "2022-07-01T16:24:14.512595Z", "name": "Encourage Attendance at Events", "description": "TA10", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-offline-activity" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0126.md", "external_id": "T0126" } ], "object_marking_refs": [ "marking-definition--67209065-11b9-45ac-9ec8-9ee7585ea7a6" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--0f1aa09f-b4a4-4359-b59e-f3ecceed1a9f", "created_by_ref": "identity--cea57038-c3ef-4fad-8216-86803b766001", "created": "2022-07-01T16:24:14.513508Z", "modified": "2022-07-01T16:24:14.513508Z", "name": "Physical Violence", "description": "TA10", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-offline-activity" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0127.md", "external_id": "T0127" } ], "object_marking_refs": [ "marking-definition--40d6dfca-f7d3-4e75-80df-67e1f49e25df" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--db1568df-528a-44e2-8e39-4431a36fd76a", "created_by_ref": "identity--2918b165-ff87-4fc2-beff-accbc9024b01", "created": "2022-07-01T16:24:14.514608Z", "modified": "2022-07-01T16:24:14.514608Z", "name": "Exploit TOS/Content Moderation", "description": "TA11", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "persist-in-the-information-environment" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0131.md", "external_id": "T0131" } ], "object_marking_refs": [ "marking-definition--c7f478e2-15fb-4acf-8c16-e09381852ec5" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--40ca8d02-c504-4a4d-99ed-b16241eda8f8", "created_by_ref": "identity--abab508a-fcc2-4315-b542-e8d563153f66", "created": "2022-07-01T16:24:14.515603Z", "modified": "2022-07-01T16:24:14.515603Z", "name": "Measure Performance", "description": "TA12", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "assess-effectiveness" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0132.md", "external_id": "T0132" } ], "object_marking_refs": [ "marking-definition--57f5ed0d-e05f-48a9-abda-2c173503905e" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--bc787e0e-dc73-4b37-bb15-6cad8bf69346", "created_by_ref": "identity--1f5bd77c-c66f-4ba1-90e0-91461551cb47", "created": "2022-07-01T16:24:14.516778Z", "modified": "2022-07-01T16:24:14.516778Z", "name": "Measure Effectiveness", "description": "TA12", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "assess-effectiveness" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0133.md", "external_id": "T0133" } ], "object_marking_refs": [ "marking-definition--d1c2bd31-7592-4c46-8c1b-026accd15caf" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--2bdfc4db-af0d-443b-8e95-ed7b14180404", "created_by_ref": "identity--31557bcc-8002-44d5-86e7-60143178d055", "created": "2022-07-01T16:24:14.518656Z", "modified": "2022-07-01T16:24:14.518656Z", "name": "Measure Effectiveness Indicators (or KPIs)", "description": "TA12", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "assess-effectiveness" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0134.md", "external_id": "T0134" } ], "object_marking_refs": [ "marking-definition--c0f3fe6e-0629-48d2-83ca-c889f932fda5" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e12f7624-95c7-44a5-8c63-8492c61334b7", "created_by_ref": "identity--ce66cb37-7003-422b-bffd-0671b529b982", "created": "2022-07-01T16:24:14.519906Z", "modified": "2022-07-01T16:24:14.519906Z", "name": "Facilitate State Propaganda", "description": "TA02", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "plan-objectives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0002.md", "external_id": "T0002" } ], "object_marking_refs": [ "marking-definition--b276dc95-02d4-4038-9ec9-6d72dae9cec6" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--af057f72-44ae-4fd3-a3b1-838d8de9f29f", "created_by_ref": "identity--03ac84b3-2e27-4a1a-96ef-4d9dae84de1f", "created": "2022-07-01T16:24:14.521068Z", "modified": "2022-07-01T16:24:14.521068Z", "name": "Leverage Existing Narratives", "description": "TA14", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-narratives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0003.md", "external_id": "T0003" } ], "object_marking_refs": [ "marking-definition--fa98d4d2-cc00-45b9-9ff9-b946e0657a2c" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--36f3bb49-d150-4ea3-8279-6596a4a19370", "created_by_ref": "identity--27245209-d724-4438-afd5-42455b23e7f8", "created": "2022-07-01T16:24:14.522073Z", "modified": "2022-07-01T16:24:14.522073Z", "name": "Develop Competing Narratives", "description": "TA14", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-narratives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0004.md", "external_id": "T0004" } ], "object_marking_refs": [ "marking-definition--69eb42e3-de4e-4724-878c-d0833c4d1e46" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e67f9807-13c7-458a-a0ab-36b3fbb53ad0", "created_by_ref": "identity--78916569-acc4-4828-b118-3870af8b9b02", "created": "2022-07-01T16:24:14.523084Z", "modified": "2022-07-01T16:24:14.523084Z", "name": "Create Inauthentic Social Media Pages and Groups", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0007.md", "external_id": "T0007" } ], "object_marking_refs": [ "marking-definition--e68e6cd5-98a0-4b2c-97b4-95d5e0b6a0af" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--66aebd3c-e983-4fa8-9b1f-8665bb061324", "created_by_ref": "identity--93555985-272a-4ce1-947d-11bbf36a61c7", "created": "2022-07-01T16:24:14.524077Z", "modified": "2022-07-01T16:24:14.524077Z", "name": "Create fake experts", "description": "TA16", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-legitimacy" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0009.md", "external_id": "T0009" } ], "object_marking_refs": [ "marking-definition--18b8d32b-3139-4c46-bff4-80e6066e3297" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e66bad5d-6d6d-46ab-b8e1-8748d828ae57", "created_by_ref": "identity--4c505540-eb21-4c3d-a862-193e033e55d8", "created": "2022-07-01T16:24:14.525052Z", "modified": "2022-07-01T16:24:14.525052Z", "name": "Cultivate ignorant agents", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0010.md", "external_id": "T0010" } ], "object_marking_refs": [ "marking-definition--342a8a59-42f2-468b-a6a1-dd4f1f698754" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ee39f971-738b-433b-8f5a-d8f1366d667a", "created_by_ref": "identity--6cabed65-d774-40e5-952f-11983e074ca2", "created": "2022-07-01T16:24:14.526023Z", "modified": "2022-07-01T16:24:14.526023Z", "name": "Compromise legitimate accounts", "description": "TA16", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-legitimacy" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0011.md", "external_id": "T0011" } ], "object_marking_refs": [ "marking-definition--e8bf456e-2012-490c-9f77-968072db1199" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c84590e4-f502-4868-8808-cf97e96a0987", "created_by_ref": "identity--86572e6b-f8f6-4b0c-9863-97ab988e7505", "created": "2022-07-01T16:24:14.527022Z", "modified": "2022-07-01T16:24:14.527022Z", "name": "Create inauthentic websites", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0013.md", "external_id": "T0013" } ], "object_marking_refs": [ "marking-definition--f06a143a-e314-40f8-91f3-e5e9f56d0892" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--408d45af-4dc6-4720-b700-6381176927c0", "created_by_ref": "identity--a9695c30-f4e2-4926-a8c9-687378347281", "created": "2022-07-01T16:24:14.528005Z", "modified": "2022-07-01T16:24:14.528005Z", "name": "Prepare fundraising campaigns", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0014.md", "external_id": "T0014" } ], "object_marking_refs": [ "marking-definition--65755537-9562-48e6-a509-7801af9c2bb7" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--dff9e0f0-08dd-42ec-bdaa-056154240101", "created_by_ref": "identity--4ec39702-c9ea-4a8c-8e0a-6b36ae38d287", "created": "2022-07-01T16:24:14.528978Z", "modified": "2022-07-01T16:24:14.528978Z", "name": "Create hashtags and search artifacts", "description": "TA06", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0015.md", "external_id": "T0015" } ], "object_marking_refs": [ "marking-definition--a5bfd20b-920b-46bb-a747-c35dac032c19" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--be6ed16c-6649-4bcf-bcaf-e9b32f1137b1", "created_by_ref": "identity--8301272d-8d1b-46de-ad05-cf5c88f0fd7b", "created": "2022-07-01T16:24:14.529935Z", "modified": "2022-07-01T16:24:14.529935Z", "name": "Create Clickbait", "description": "TA05", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "microtarget" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0016.md", "external_id": "T0016" } ], "object_marking_refs": [ "marking-definition--dfe29dd7-f590-4069-ad69-8692ff740fff" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--22648a45-4950-4730-9dc8-22cec9e8dbbd", "created_by_ref": "identity--7c382789-c188-4a0a-85d4-11479e860784", "created": "2022-07-01T16:24:14.530877Z", "modified": "2022-07-01T16:24:14.530877Z", "name": "Conduct fundraising", "description": "TA10", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-offline-activity" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0017.md", "external_id": "T0017" } ], "object_marking_refs": [ "marking-definition--13b1183f-8816-48a2-b26c-2e2ed75f5a01" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--daf9ac8f-04b3-4fb7-a4cd-1442649c32f4", "created_by_ref": "identity--ee4d34f4-c4a8-4b4e-a06e-da64264a16c3", "created": "2022-07-01T16:24:14.531915Z", "modified": "2022-07-01T16:24:14.531915Z", "name": "Purchase Targeted Advertisements", "description": "TA05", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "microtarget" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0018.md", "external_id": "T0018" } ], "object_marking_refs": [ "marking-definition--750b68be-6f7f-48c3-b443-4d3233b41de3" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--98e44372-510d-44b2-9b03-ef79bf76ed6a", "created_by_ref": "identity--7351fa66-6b73-45b3-9196-18e905bcb8e2", "created": "2022-07-01T16:24:14.532864Z", "modified": "2022-07-01T16:24:14.532864Z", "name": "Generate information pollution", "description": "TA06", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0019.md", "external_id": "T0019" } ], "object_marking_refs": [ "marking-definition--ad14a770-200d-4b00-b913-718e1b0e530f" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--2e2d4635-1651-49bc-b542-6aa85af1d91f", "created_by_ref": "identity--30be0f6f-5832-4df3-9692-8606e7125a61", "created": "2022-07-01T16:24:14.534067Z", "modified": "2022-07-01T16:24:14.534067Z", "name": "Trial content", "description": "TA08", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "conduct-pump-priming" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0020.md", "external_id": "T0020" } ], "object_marking_refs": [ "marking-definition--eec430a2-a6a5-4408-8acf-3d9529fd430e" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c57174c2-c238-4641-9bf7-ea688942a84f", "created_by_ref": "identity--19884075-4712-4d05-894e-c332f40b808a", "created": "2022-07-01T16:24:14.535111Z", "modified": "2022-07-01T16:24:14.535111Z", "name": "Leverage Conspiracy Theory Narratives", "description": "TA14", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-narratives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0022.md", "external_id": "T0022" } ], "object_marking_refs": [ "marking-definition--2045a4ca-f615-477d-a7a0-1f9f4efaf043" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--79e50463-07e2-4d2f-96da-a1b6ebd7c86c", "created_by_ref": "identity--d195d36a-1178-4b6a-b42b-b725d05ac422", "created": "2022-07-01T16:24:14.536135Z", "modified": "2022-07-01T16:24:14.536135Z", "name": "Distort facts", "description": "TA06", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0023.md", "external_id": "T0023" } ], "object_marking_refs": [ "marking-definition--7176ab9e-b2fa-4d30-bd2e-19dd22c44402" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--bae20020-b607-4c62-9892-e26a1d436b47", "created_by_ref": "identity--083b1be6-5a03-4cbf-8e15-73c3afa35105", "created": "2022-07-01T16:24:14.537501Z", "modified": "2022-07-01T16:24:14.537501Z", "name": "Online polls", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0029.md", "external_id": "T0029" } ], "object_marking_refs": [ "marking-definition--d92cc05d-9e5f-4e18-88fb-a5ab0a8d9f79" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f69a1d16-a69a-4087-a0aa-bbc8603a7e1e", "created_by_ref": "identity--952731c3-9d6e-4d1c-a3fd-b4f9d87fe69e", "created": "2022-07-01T16:24:14.538523Z", "modified": "2022-07-01T16:24:14.538523Z", "name": "Bait legitimate influencers", "description": "TA08", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "conduct-pump-priming" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0039 .md", "external_id": "T0039 " } ], "object_marking_refs": [ "marking-definition--7d2c28fc-c45b-408e-bfa6-b8417f055016" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c618f1d0-ad8e-4c32-aca0-867a542f98a0", "created_by_ref": "identity--58ac5406-c3c0-41e2-b834-b2ccf3b777b9", "created": "2022-07-01T16:24:14.539517Z", "modified": "2022-07-01T16:24:14.539517Z", "name": "Demand insurmountable proof", "description": "TA14", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-narratives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0040.md", "external_id": "T0040" } ], "object_marking_refs": [ "marking-definition--b903a0dd-59e4-4372-87ff-f98b7b848c29" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5f9c3638-814a-4886-ad75-ee868a9c337c", "created_by_ref": "identity--1b79f87b-9c29-42b9-ab80-ea44b5bbc25c", "created": "2022-07-01T16:24:14.540522Z", "modified": "2022-07-01T16:24:14.540522Z", "name": "Seed Kernel of truth", "description": "TA08", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "conduct-pump-priming" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0042.md", "external_id": "T0042" } ], "object_marking_refs": [ "marking-definition--f5fd9ee6-da4c-4b9c-bc17-a388f4ed50b0" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--19f9ad83-fd72-4a6c-aa5f-87c33393e83f", "created_by_ref": "identity--58272284-438b-49d1-a013-0b5f1e2f404c", "created": "2022-07-01T16:24:14.5415Z", "modified": "2022-07-01T16:24:14.5415Z", "name": "Chat apps", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0043.md", "external_id": "T0043" } ], "object_marking_refs": [ "marking-definition--38816591-45a8-4358-a51a-0f428202acb7" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d4199f15-fca8-4d58-ac99-ac4298890ec6", "created_by_ref": "identity--3d454db9-21b6-4f7b-bafa-3b2680e68214", "created": "2022-07-01T16:24:14.542473Z", "modified": "2022-07-01T16:24:14.542473Z", "name": "Seed distortions", "description": "TA08", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "conduct-pump-priming" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0044.md", "external_id": "T0044" } ], "object_marking_refs": [ "marking-definition--73180b64-89d7-4ac4-8d8f-6fbec63eedbf" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--7543b8ab-71e3-4fb6-a7ce-41451873e152", "created_by_ref": "identity--9ee8fbd4-2428-462a-bd40-1cb18461348c", "created": "2022-07-01T16:24:14.543441Z", "modified": "2022-07-01T16:24:14.543441Z", "name": "Use fake experts", "description": "TA08", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "conduct-pump-priming" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0045.md", "external_id": "T0045" } ], "object_marking_refs": [ "marking-definition--b633aa91-b4ed-4cbf-b3d5-5d26a99483c5" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--50209d12-7a2f-458d-897b-71328a99b1db", "created_by_ref": "identity--303b2742-95a6-4100-ba4d-9c914fcebaf1", "created": "2022-07-01T16:24:14.544406Z", "modified": "2022-07-01T16:24:14.544406Z", "name": "Use Search Engine Optimization", "description": "TA08", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "conduct-pump-priming" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0046.md", "external_id": "T0046" } ], "object_marking_refs": [ "marking-definition--1fe23767-cd01-4798-8e90-f2019d6c79c4" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--716f1465-686d-427a-a942-fc1a068ac01e", "created_by_ref": "identity--ed0b4063-bece-4edd-a4d7-a6b75b102bad", "created": "2022-07-01T16:24:14.545343Z", "modified": "2022-07-01T16:24:14.545343Z", "name": "Censor social media as a political force", "description": "TA18", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-online-harms" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0047.md", "external_id": "T0047" } ], "object_marking_refs": [ "marking-definition--2ed5e009-7619-4f66-b241-13201d052008" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--6f46288d-a2f5-439e-8bd1-6e2522a6c53d", "created_by_ref": "identity--caa94a95-6536-4202-b3b6-e4b36f569cdb", "created": "2022-07-01T16:24:14.546511Z", "modified": "2022-07-01T16:24:14.546511Z", "name": "Harass", "description": "TA18", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-online-harms" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0048.md", "external_id": "T0048" } ], "object_marking_refs": [ "marking-definition--71cb0869-f22c-46dc-86bd-c75187cf98f9" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--cc45f60b-ccd1-407e-a3d3-de5aa48b9ed1", "created_by_ref": "identity--2f9487bf-bb13-49ed-ba90-c386ee28db03", "created": "2022-07-01T16:24:14.547473Z", "modified": "2022-07-01T16:24:14.547473Z", "name": "Flooding the Information Space", "description": "TA17", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "maximize-exposure" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0049.md", "external_id": "T0049" } ], "object_marking_refs": [ "marking-definition--f3625817-a4b1-4285-89be-e87ab3c674d5" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--66273919-128e-4461-b058-2e47e59d627f", "created_by_ref": "identity--6a5e6bd9-898e-4345-9e39-0de7244d222c", "created": "2022-07-01T16:24:14.548402Z", "modified": "2022-07-01T16:24:14.548402Z", "name": "Organize Events", "description": "TA10", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-offline-activity" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0057.md", "external_id": "T0057" } ], "object_marking_refs": [ "marking-definition--8ea1eb4f-aaaa-4115-b4c1-918bce69a20b" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--662fda0b-f2d1-44c2-8d28-0b93073686e5", "created_by_ref": "identity--42a68f8f-f0f4-4b31-a013-3c843bc54345", "created": "2022-07-01T16:24:14.549343Z", "modified": "2022-07-01T16:24:14.549343Z", "name": "Play the long game", "description": "TA11", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "persist-in-the-information-environment" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0059.md", "external_id": "T0059" } ], "object_marking_refs": [ "marking-definition--16c00a52-58ad-41c4-9875-2076b212f4ca" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--9a97b8b6-4939-4e58-9f83-f85be0b35cf8", "created_by_ref": "identity--16c7b9a7-a6bf-485b-9ffd-477a360f90f6", "created": "2022-07-01T16:24:14.550781Z", "modified": "2022-07-01T16:24:14.550781Z", "name": "Continue to Amplify", "description": "TA11", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "persist-in-the-information-environment" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0060.md", "external_id": "T0060" } ], "object_marking_refs": [ "marking-definition--1648fbee-84ee-4b5d-bf8e-0a57f9e04b9a" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--fc132df1-a06d-4cde-b845-58a67818d030", "created_by_ref": "identity--41dd436e-9a24-4ae6-8747-ab24c6bac0f6", "created": "2022-07-01T16:24:14.551914Z", "modified": "2022-07-01T16:24:14.551914Z", "name": "Sell Merchandise", "description": "TA10", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-offline-activity" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0061.md", "external_id": "T0061" } ], "object_marking_refs": [ "marking-definition--fd5ef2c4-6781-46e0-8536-0f30e37422f2" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--39409269-cf42-484b-88f0-e7686b9514f0", "created_by_ref": "identity--d5a00e16-fd8e-4611-a3a3-d86c9853f942", "created": "2022-07-01T16:24:14.552971Z", "modified": "2022-07-01T16:24:14.552971Z", "name": "Prepare Physical Broadcast Capabilities", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0065.md", "external_id": "T0065" } ], "object_marking_refs": [ "marking-definition--5dd47089-beb3-44fa-88cc-48c1fe203466" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--7aad7eaa-b651-4479-bb65-e629a2d8ba9f", "created_by_ref": "identity--25529100-11e4-4842-94eb-7ce4f05dbaae", "created": "2022-07-01T16:24:14.554088Z", "modified": "2022-07-01T16:24:14.554088Z", "name": "Degrade Adversary", "description": "TA02", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "plan-objectives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0066.md", "external_id": "T0066" } ], "object_marking_refs": [ "marking-definition--fc31880b-de51-4b80-8e78-57bc2a3860f5" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--1b9da518-3d4d-4371-a8b4-8519ed504ad6", "created_by_ref": "identity--f9afb581-1c82-49d8-a9ce-c0b4f0027892", "created": "2022-07-01T16:24:14.555092Z", "modified": "2022-07-01T16:24:14.555092Z", "name": "Respond to Breaking News Event or Active Crisis", "description": "TA14", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-narratives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0068.md", "external_id": "T0068" } ], "object_marking_refs": [ "marking-definition--0b77a2ee-6b63-4d87-bb5c-abd61843e9c1" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--3da81b25-d20a-4d70-a7f2-305d0652fa49", "created_by_ref": "identity--a7f99786-8e33-4a3d-9c07-7c138733771c", "created": "2022-07-01T16:24:14.556091Z", "modified": "2022-07-01T16:24:14.556091Z", "name": "Segment Audiences", "description": "TA13", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "target-audience-analysis" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0072.md", "external_id": "T0072" } ], "object_marking_refs": [ "marking-definition--e59d1c37-7d61-4eae-b91d-5797e478dcba" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--cb856749-7154-4f90-85f6-64a5cb0483a3", "created_by_ref": "identity--e2c04c3c-6480-4eca-a4e8-be0db43b197e", "created": "2022-07-01T16:24:14.557089Z", "modified": "2022-07-01T16:24:14.557089Z", "name": "Dismiss", "description": "TA02", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "plan-objectives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0075.md", "external_id": "T0075" } ], "object_marking_refs": [ "marking-definition--ccc0fbe7-2a40-4024-b645-25e1080539e0" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--6e9f5654-a9ad-4e9d-afb4-09a9ae0c626a", "created_by_ref": "identity--e93ba744-ca58-4c9b-802d-4af68ff0e4dd", "created": "2022-07-01T16:24:14.558058Z", "modified": "2022-07-01T16:24:14.558058Z", "name": "Distort", "description": "TA02", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "plan-objectives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0076.md", "external_id": "T0076" } ], "object_marking_refs": [ "marking-definition--f4436e0d-ca85-476e-982f-8d02dd8a0112" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--177e35f3-a68b-4ab7-a88e-007527e828ee", "created_by_ref": "identity--e13e8bb7-b450-4e1a-b2b3-c6999dcf393f", "created": "2022-07-01T16:24:14.559034Z", "modified": "2022-07-01T16:24:14.559034Z", "name": "Distract", "description": "TA02", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "plan-objectives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0077.md", "external_id": "T0077" } ], "object_marking_refs": [ "marking-definition--dceab928-4b50-4250-a766-2647af92f7e2" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--64568475-7f70-407e-82d5-c613563cd2e0", "created_by_ref": "identity--56faff19-d33d-484f-9e40-7edab8ccc745", "created": "2022-07-01T16:24:14.560Z", "modified": "2022-07-01T16:24:14.560Z", "name": "Dismay", "description": "TA02", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "plan-objectives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0078.md", "external_id": "T0078" } ], "object_marking_refs": [ "marking-definition--8d2f78ba-6c39-4b62-b309-51bbfad84629" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--96824d66-d1f2-4fc6-8947-d8d84f2af4ce", "created_by_ref": "identity--17f46857-6d75-4014-a1ec-ba644453bd99", "created": "2022-07-01T16:24:14.560968Z", "modified": "2022-07-01T16:24:14.560968Z", "name": "Divide", "description": "TA02", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "plan-objectives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0079.md", "external_id": "T0079" } ], "object_marking_refs": [ "marking-definition--d43a47f0-11dc-4ebd-a088-756406a850c1" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--1a7417b5-34f6-463d-88db-74dd19672e4c", "created_by_ref": "identity--ea61cff6-4c09-455c-8398-022ed472126d", "created": "2022-07-01T16:24:14.561915Z", "modified": "2022-07-01T16:24:14.561915Z", "name": "Conceal People", "description": "TA11", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "persist-in-the-information-environment" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0128.md", "external_id": "T0128" } ], "object_marking_refs": [ "marking-definition--c0beec50-ca37-40d9-8464-bdd796a6389a" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--987869af-0a82-40e8-879b-eb9b8a02d419", "created_by_ref": "identity--7e02ef50-340b-4ce8-ae3d-d38c82f9cdc3", "created": "2022-07-01T16:24:14.562845Z", "modified": "2022-07-01T16:24:14.562845Z", "name": "Conceal Operational Activity", "description": "TA11", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "persist-in-the-information-environment" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0129.md", "external_id": "T0129" } ], "object_marking_refs": [ "marking-definition--35503f87-7236-4947-a71e-51646873485f" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5bf28faa-96e7-4a15-b932-3fabe6e709d1", "created_by_ref": "identity--b6c9b478-b178-44fd-b8b3-76af429a8152", "created": "2022-07-01T16:24:14.56377Z", "modified": "2022-07-01T16:24:14.56377Z", "name": "Conceal Infrastructure", "description": "TA11", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "persist-in-the-information-environment" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0130.md", "external_id": "T0130" } ], "object_marking_refs": [ "marking-definition--345b9bdd-0b1c-4ea1-90de-b2136f9ea7c0" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "x-mitre-matrix", "spec_version": "2.1", "id": "x-mitre-matrix--cb904eb2-b753-466f-83f8-c6e19f39a631", "created": "2022-07-01T16:24:14.564182Z", "modified": "2022-07-01T16:24:14.564182Z", "name": "DISARM Framework", "description": "DISARM is a framework designed for describing and understanding disinformation incidents.", "tactic_refs": [ "x-mitre-tactic--91e50646-d377-4904-8b8a-db58454fbbe2", "x-mitre-tactic--bd30ac72-3528-4704-97fc-e7049ff50486", "x-mitre-tactic--39ba49b5-27ef-4919-ad0c-21cf5f6d5ea0", "x-mitre-tactic--0c4cb5fb-80e0-4185-b007-683e55d444ea", "x-mitre-tactic--c7e154be-29c7-4ec9-b00b-15b271a53f4d", "x-mitre-tactic--dab5cc61-8a53-42a6-ad76-7725680f1376", "x-mitre-tactic--95a8ea59-bcd3-45fb-88a2-e1ec86707eba", "x-mitre-tactic--b946c4ec-838c-4328-8529-b1e0bbb9f958", "x-mitre-tactic--2cfa7033-a678-4aa0-bee5-bf48ce833e42", "x-mitre-tactic--e6145745-2127-4a3e-8dda-23a2464a4f49", "x-mitre-tactic--19a9fbb5-f208-4d04-bc3d-cf4d9ab40472", "x-mitre-tactic--ba67bdf7-9c5e-4c41-9233-42152146073e", "x-mitre-tactic--415417fd-38b3-4e8e-81aa-2888e7d14948", "x-mitre-tactic--4c6114bf-663b-4da8-81fe-ef35653c2de4", "x-mitre-tactic--c37c514d-52b9-4ff2-83c5-0f65719439a0", "x-mitre-tactic--106f515b-06d4-42cb-839a-7fc272267917" ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation", "external_id": "DISARM" } ] } ] }