{ "type": "bundle", "id": "bundle--72f0cf92-0ac6-4673-aa14-82f1684e4de3", "objects": [ { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--ca848c76-3e2e-4059-a61f-dce4180b4710", "created_by_ref": "identity--579368bd-8440-4f8e-96c2-ad508b73a5e9", "created": "2022-07-01T03:29:17.091145Z", "modified": "2022-07-01T03:29:17.091145Z", "name": "Plan Strategy", "description": "Define the desired end state, i.e. the set of required conditions that defines achievement of all objectives.", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA01.md", "external_id": "TA01" } ], "object_marking_refs": [ "marking-definition--d12db0e6-fa29-41c5-b43e-a46d0618d61c" ], "x_mitre_shortname": "plan-strategy" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--eec7c49a-35c0-4ed2-9161-f7dba316a609", "created_by_ref": "identity--7b955472-f8e6-4b82-8c31-300defa2ff1d", "created": "2022-07-01T03:29:17.091699Z", "modified": "2022-07-01T03:29:17.091699Z", "name": "Plan Objectives", "description": "Set clearly defined, measurable, and achievable objectives. Achieving objectives ties execution of tactical tasks to reaching the desired end state. There are four primary considerations: \n- Each desired effect should link directly to one or more objectives \n- The effect should be measurable \n- The objective statement should not specify the way and means of accomplishment \n- The effect should be distinguishable from the objective it supports as a condition for success, not as another objective or task.", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA02.md", "external_id": "TA02" } ], "object_marking_refs": [ "marking-definition--efbc7fb0-9eca-4e7c-b2e7-c22aea404a22" ], "x_mitre_shortname": "plan-objectives" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--e749a24c-8362-4fed-ba26-51e56b37b439", "created_by_ref": "identity--a8a35a10-0c6d-48ab-9642-0d968a0e6579", "created": "2022-07-01T03:29:17.092239Z", "modified": "2022-07-01T03:29:17.092239Z", "name": "Microtarget", "description": "Target very specific populations of people", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA05.md", "external_id": "TA05" } ], "object_marking_refs": [ "marking-definition--9e9c4039-2734-451e-9eae-14bfee5150c5" ], "x_mitre_shortname": "microtarget" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--4348a49d-d21a-4915-a512-ba1accaa8cd9", "created_by_ref": "identity--ebae25a4-b31b-40c4-b26f-c603911318b6", "created": "2022-07-01T03:29:17.092712Z", "modified": "2022-07-01T03:29:17.092712Z", "name": "Develop Content", "description": "TBD", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA06.md", "external_id": "TA06" } ], "object_marking_refs": [ "marking-definition--f6a72729-0ae7-401c-b0c0-8f97fa40e86e" ], "x_mitre_shortname": "develop-content" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--7c9b3fa5-50f8-4fab-acc3-f984b7290cd7", "created_by_ref": "identity--68919beb-b367-4f0d-b473-7c1ef2f7cc41", "created": "2022-07-01T03:29:17.093161Z", "modified": "2022-07-01T03:29:17.093161Z", "name": "Select Channels and Affordances", "description": "Selecting platforms and affordances assesses which online or offline platforms and their associated affordances maximize an influence operation\u2019s ability to reach its target audience. To select the most appropriate platform(s), an operation may assess the technological affordances including platform algorithms, terms of service, permitted content types, or other attributes that determine platform usability and accessibility. Selecting platforms includes both choosing platforms on which the operation will publish its own content and platforms on which the operation will attempt to restrict adversarial content.", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA07.md", "external_id": "TA07" } ], "object_marking_refs": [ "marking-definition--a3ba48a6-8927-4416-8923-070e7b66d99b" ], "x_mitre_shortname": "select-channels-and-affordances" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--f59414c8-2d4d-4d9e-8d88-fe8a339270d1", "created_by_ref": "identity--957e8ee3-66c0-4c39-81ab-bc8f197dc060", "created": "2022-07-01T03:29:17.093615Z", "modified": "2022-07-01T03:29:17.093615Z", "name": "Conduct Pump Priming", "description": "Release content on a targetted small scale, prior to general release, including releasing seed. Used for preparation before broader release, and as message honing. Used for preparation before broader release, and as message honing. ", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA08.md", "external_id": "TA08" } ], "object_marking_refs": [ "marking-definition--8f98688d-973b-4d80-a055-eef509cafa92" ], "x_mitre_shortname": "conduct-pump-priming" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--717ccb01-df67-48a8-b6ec-9551272a4ff4", "created_by_ref": "identity--89b633d0-6026-4f5a-b937-96c110081e4b", "created": "2022-07-01T03:29:17.094056Z", "modified": "2022-07-01T03:29:17.094056Z", "name": "Deliver Content", "description": "Release content to general public or larger population", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA09.md", "external_id": "TA09" } ], "object_marking_refs": [ "marking-definition--7b7d7a4a-d135-432c-b8e8-d758ec6aaabe" ], "x_mitre_shortname": "deliver-content" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--b2ad03fa-b162-4161-b864-344f9cb69ad3", "created_by_ref": "identity--ef082dc6-c5d4-4f34-839a-afb81676681d", "created": "2022-07-01T03:29:17.094502Z", "modified": "2022-07-01T03:29:17.094502Z", "name": "Drive Offline Activity", "description": "Move incident/campaign from online to offline. Encouraging users to move from the platform on which they initially viewed operation content and engage in the physical information space or offline world. This may include operation-aligned rallies or protests, radio, newspaper, or billboards. An influence operation may drive to physical forums to diversify its information channels and facilitate spaces where the target audience can engage with both operation content and like-minded individuals offline. ", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA10.md", "external_id": "TA10" } ], "object_marking_refs": [ "marking-definition--6c20ec26-a68f-4ea4-87e7-0f4c3d1dc466" ], "x_mitre_shortname": "drive-offline-activity" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--efddae0c-df65-48be-a7a4-067237d8a528", "created_by_ref": "identity--2d057bc4-00f4-42ed-b56d-f441f58c0224", "created": "2022-07-01T03:29:17.0951Z", "modified": "2022-07-01T03:29:17.0951Z", "name": "Persist in the Information Environment", "description": "Persist in the Information Space refers to taking measures that allow an operation to maintain its presence and avoid takedown by an external entity. Techniques in Persist in the Information Space help campaigns operate without detection and appear legitimate to the target audience and platform monitoring services. Influence operations on social media often persist online by varying the type of information assets and platforms used throughout the campaign.", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA11.md", "external_id": "TA11" } ], "object_marking_refs": [ "marking-definition--7e8d9bd0-001f-45d2-aa7f-a57b18f3df70" ], "x_mitre_shortname": "persist-in-the-information-environment" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--96ec7676-22a8-40f8-91f9-2b770fec3a78", "created_by_ref": "identity--2390bb84-1e20-4e06-beb8-f61631529f6f", "created": "2022-07-01T03:29:17.095552Z", "modified": "2022-07-01T03:29:17.095552Z", "name": "Assess Effectiveness", "description": "Assess effectiveness of action, for use in future plans ", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA12.md", "external_id": "TA12" } ], "object_marking_refs": [ "marking-definition--8b21940e-5b88-4d9f-9708-d69f7b827cf4" ], "x_mitre_shortname": "assess-effectiveness" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--10b904db-7568-4a50-bf6f-9541f3b01924", "created_by_ref": "identity--2a9898a9-5d27-4f77-90d6-81cb400c7dc0", "created": "2022-07-01T03:29:17.096002Z", "modified": "2022-07-01T03:29:17.096002Z", "name": "Target Audience Analysis", "description": "Identifying and analyzing the target audience examines target audience member locations, political affiliations, financial situations, and other attributes that an influence operation may incorporate into its messaging strategy. During this tactic, influence operations may also identify existing similarities and differences between target audience members to unite like groups and divide opposing groups. Identifying and analyzing target audience members allows influence operations to tailor operation strategy and content to their analysis. ", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA13.md", "external_id": "TA13" } ], "object_marking_refs": [ "marking-definition--32769669-4b13-4c4b-89c6-e877a011fa61" ], "x_mitre_shortname": "target-audience-analysis" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--977b0d14-c42a-4f3e-badb-fdabb9781544", "created_by_ref": "identity--4fdd4e7b-3b3e-425e-847f-dc5f200fb7cf", "created": "2022-07-01T03:29:17.096467Z", "modified": "2022-07-01T03:29:17.096467Z", "name": "Develop Narratives", "description": "The promotion of beneficial master narratives is perhaps the most effective method for achieving long-term strategic narrative dominance. From a \"\"whole of society\"\" perspective the promotion of the society's core master narratives should occupy a central strategic role. From a misinformation campaign / cognitive security perpectve the tactics around master narratives center more precisely on the day-to-day promotion and reinforcement of this messaging. In other words, beneficial, high-coverage master narratives are a central strategic goal and their promotion constitutes an ongoing tactical struggle carried out at a whole-of-society level. Tactically, their promotion covers a broad spectrum of activities both on- and offline.", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA14.md", "external_id": "TA14" } ], "object_marking_refs": [ "marking-definition--369927eb-a5a4-4672-a0d0-88d758feed9d" ], "x_mitre_shortname": "develop-narratives" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--5d068e30-413a-4465-b51b-8e9fc1e18b1e", "created_by_ref": "identity--e6b10b3f-81f4-4f5d-a61b-6ba6d32a927c", "created": "2022-07-01T03:29:17.096916Z", "modified": "2022-07-01T03:29:17.096916Z", "name": "Establish Social Assets", "description": "Establishing information assets generates messaging tools, including social media accounts, operation personnel, and organizations, including directly and indirectly managed assets. For assets under their direct control, the operation can add, change, or remove these assets at will. \nEstablishing information assets allows an influence operation to promote messaging directly to the target audience without navigating through external entities. Many online influence operations create or compromise social media accounts as a primary vector of information dissemination.", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA15.md", "external_id": "TA15" } ], "object_marking_refs": [ "marking-definition--67f09a98-95d6-47d0-87b8-7499972e7685" ], "x_mitre_shortname": "establish-social-assets" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--60087ffe-9390-4baf-8e93-20b3f075da8e", "created_by_ref": "identity--3c5779ae-e3d8-4248-abd3-fd7bf16fe311", "created": "2022-07-01T03:29:17.097362Z", "modified": "2022-07-01T03:29:17.097362Z", "name": "Establish Legitimacy", "description": "TBD", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA16.md", "external_id": "TA16" } ], "object_marking_refs": [ "marking-definition--8309d1c8-87a1-4323-967b-7216161d998d" ], "x_mitre_shortname": "establish-legitimacy" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--c4e65fa5-4f02-4075-b26f-07c0d07badaa", "created_by_ref": "identity--9ce26eb7-7607-4333-b84b-6b0e2cd074a3", "created": "2022-07-01T03:29:17.097809Z", "modified": "2022-07-01T03:29:17.097809Z", "name": "Maximize Exposure", "description": "Maximize exposure of the target audience to incident/campaign content via flooding, amplifying, and cross-posting.", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA17.md", "external_id": "TA17" } ], "object_marking_refs": [ "marking-definition--75ce5799-1b91-4be6-8427-d41dc3c3b8b2" ], "x_mitre_shortname": "maximize-exposure" }, { "type": "x-mitre-tactic", "spec_version": "2.1", "id": "x-mitre-tactic--2fad8829-108a-4d6a-8135-6bc3bf74a770", "created_by_ref": "identity--62fae23f-94ca-47ca-a703-4e203716b2f5", "created": "2022-07-01T03:29:17.098423Z", "modified": "2022-07-01T03:29:17.098423Z", "name": "Drive Online Harms", "description": "Actions taken by an influence operation to harm their opponents in online spaces through harassment, suppression, releasing private information, and controlling the information space through offensive cyberspace operations. ", "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA18.md", "external_id": "TA18" } ], "object_marking_refs": [ "marking-definition--885c611a-01f1-4456-9415-81dacb2de148" ], "x_mitre_shortname": "drive-online-harms" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--83124e9f-4981-445c-aa20-b7a3990c18ab", "created_by_ref": "identity--e5631f8e-4441-44b0-98de-44cef0359a06", "created": "2022-07-01T03:29:17.099228Z", "modified": "2022-07-01T03:29:17.099228Z", "name": "Facilitate State Propaganda", "description": "TA02", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "plan-objectives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0002.md", "external_id": "T0002" } ], "object_marking_refs": [ "marking-definition--27285727-7410-4083-a6b1-94d53ac3486a" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--9164934b-19e2-4516-a792-5d5f08b06d34", "created_by_ref": "identity--396f6b80-8694-4493-9336-c4037a980f18", "created": "2022-07-01T03:29:17.099805Z", "modified": "2022-07-01T03:29:17.099805Z", "name": "Leverage Existing Narratives", "description": "TA14", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-narratives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0003.md", "external_id": "T0003" } ], "object_marking_refs": [ "marking-definition--745557fb-5156-4f7d-bfe4-184c9c076280" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--fd260e6a-7b36-4c30-9a12-29745ec85672", "created_by_ref": "identity--19e9d8d8-0dd2-42aa-a34e-17adc2be525f", "created": "2022-07-01T03:29:17.100339Z", "modified": "2022-07-01T03:29:17.100339Z", "name": "Develop Competing Narratives", "description": "TA14", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-narratives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0004.md", "external_id": "T0004" } ], "object_marking_refs": [ "marking-definition--4ea9cf26-90ed-4b44-8a0d-43af22149baa" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--10d0a71b-b7b0-4b59-812b-6a9f859094b1", "created_by_ref": "identity--949ff029-9578-4d91-8428-1f38178d59b2", "created": "2022-07-01T03:29:17.100806Z", "modified": "2022-07-01T03:29:17.100806Z", "name": "Create Inauthentic Social Media Pages and Groups", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0007.md", "external_id": "T0007" } ], "object_marking_refs": [ "marking-definition--d545e516-526f-47bc-a99e-3aa1cac2287a" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--4e5ff619-85fd-4d36-a3c4-9a400c8cbfe5", "created_by_ref": "identity--53e04b17-377e-45d2-b176-3294849546cc", "created": "2022-07-01T03:29:17.101267Z", "modified": "2022-07-01T03:29:17.101267Z", "name": "Create fake experts", "description": "TA16", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-legitimacy" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0009.md", "external_id": "T0009" } ], "object_marking_refs": [ "marking-definition--b0ce9dfe-3859-4529-b404-babf37771f31" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e3011cc8-6ecc-4cbd-8827-15feef09bfc5", "created_by_ref": "identity--e2679b1b-d851-427f-8c2b-0c8269f6156e", "created": "2022-07-01T03:29:17.101731Z", "modified": "2022-07-01T03:29:17.101731Z", "name": "Cultivate ignorant agents", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0010.md", "external_id": "T0010" } ], "object_marking_refs": [ "marking-definition--65e1b90e-5ed8-45b5-8831-99b8a6f56cfa" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ce2ffeb8-df39-425b-992e-57d0b11174ca", "created_by_ref": "identity--2a6fb1d5-2fd2-46be-bf0a-2b7735791652", "created": "2022-07-01T03:29:17.102189Z", "modified": "2022-07-01T03:29:17.102189Z", "name": "Compromise legitimate accounts", "description": "TA16", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-legitimacy" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0011.md", "external_id": "T0011" } ], "object_marking_refs": [ "marking-definition--c64ec293-b524-48c2-8e90-1359a1052d21" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--1397f207-ad1b-4398-9d06-ed36393d53fa", "created_by_ref": "identity--e7a9ac1f-d1b0-4a3f-af61-e546ca3ae445", "created": "2022-07-01T03:29:17.102645Z", "modified": "2022-07-01T03:29:17.102645Z", "name": "Create inauthentic websites", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0013.md", "external_id": "T0013" } ], "object_marking_refs": [ "marking-definition--c91f7963-b220-47db-8707-c034998735ce" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--8ca19a73-b5e2-4715-bb61-7f27777e14b1", "created_by_ref": "identity--efb531aa-da43-4bd3-b767-47d2fdfb3c3f", "created": "2022-07-01T03:29:17.10311Z", "modified": "2022-07-01T03:29:17.10311Z", "name": "Prepare fundraising campaigns", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0014.md", "external_id": "T0014" } ], "object_marking_refs": [ "marking-definition--5e84c2ef-d66e-4d32-b59b-524af19cdcce" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--0f8410d6-0ede-4e4f-8b70-d8a6821d25b0", "created_by_ref": "identity--ba81db1f-626f-46c3-bb99-f88a11819af7", "created": "2022-07-01T03:29:17.103569Z", "modified": "2022-07-01T03:29:17.103569Z", "name": "Create hashtags and search artifacts", "description": "TA06", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0015.md", "external_id": "T0015" } ], "object_marking_refs": [ "marking-definition--e25c36d4-b84a-48e3-9d85-8cd8b333f755" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--77789dad-9435-4866-a083-4dbc0a456727", "created_by_ref": "identity--6dbc3bb6-bfb1-4814-a642-e84b19de7b32", "created": "2022-07-01T03:29:17.104029Z", "modified": "2022-07-01T03:29:17.104029Z", "name": "Create Clickbait", "description": "TA05", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "microtarget" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0016.md", "external_id": "T0016" } ], "object_marking_refs": [ "marking-definition--9df75d1a-d0a1-4531-b34d-f16b54d677be" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--86e913cc-f722-4f2e-a2df-150ade9d0726", "created_by_ref": "identity--778425bc-e2fc-4e82-9f10-74e98082be43", "created": "2022-07-01T03:29:17.104489Z", "modified": "2022-07-01T03:29:17.104489Z", "name": "Conduct fundraising", "description": "TA10", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-offline-activity" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0017.md", "external_id": "T0017" } ], "object_marking_refs": [ "marking-definition--6e5bb1e1-f5ac-42b6-b078-fe3292fa9eb1" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e46945d5-536e-4d6f-9a46-0f9b6007112d", "created_by_ref": "identity--2b797c80-0029-4570-8ec4-d8968e972294", "created": "2022-07-01T03:29:17.104944Z", "modified": "2022-07-01T03:29:17.104944Z", "name": "Purchase Targeted Advertisements", "description": "TA05", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "microtarget" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0018.md", "external_id": "T0018" } ], "object_marking_refs": [ "marking-definition--1cc4f334-81f1-4aa5-94a5-cc8ecdecb207" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--33acdd6d-93eb-4aaf-9e00-4691814bcc88", "created_by_ref": "identity--c67ea4eb-798d-43ad-b13e-b10aedfd81a2", "created": "2022-07-01T03:29:17.105397Z", "modified": "2022-07-01T03:29:17.105397Z", "name": "Generate information pollution", "description": "TA06", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0019.md", "external_id": "T0019" } ], "object_marking_refs": [ "marking-definition--c157d07b-43b6-4b2f-aee8-a335fef9a052" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--adee13dd-8bd5-4738-91b1-3997cf7bd994", "created_by_ref": "identity--6edc8264-41c1-46ae-8a0e-6090e4211029", "created": "2022-07-01T03:29:17.10585Z", "modified": "2022-07-01T03:29:17.10585Z", "name": "Trial content", "description": "TA08", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "conduct-pump-priming" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0020.md", "external_id": "T0020" } ], "object_marking_refs": [ "marking-definition--f4cdda6a-56d0-45ea-84b2-3fc6aa953f27" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b725fa2e-779d-44e5-a0f4-4724d14b6deb", "created_by_ref": "identity--ec724bf6-a7e7-4496-8a1e-fa9e4cf5c8a4", "created": "2022-07-01T03:29:17.106312Z", "modified": "2022-07-01T03:29:17.106312Z", "name": "Leverage Conspiracy Theory Narratives", "description": "TA14", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-narratives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0022.md", "external_id": "T0022" } ], "object_marking_refs": [ "marking-definition--8d89ab9d-c93f-4f24-9f64-c117bbc52cf0" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--66064bf0-d00b-490e-b6f2-3e07baf1a830", "created_by_ref": "identity--b33bfbf5-ecf8-4423-bbb2-4b53d30975e9", "created": "2022-07-01T03:29:17.106773Z", "modified": "2022-07-01T03:29:17.106773Z", "name": "Distort facts", "description": "TA06", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0023.md", "external_id": "T0023" } ], "object_marking_refs": [ "marking-definition--e34375e0-40a4-44ad-8528-8ad89576aa4f" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5cc3ca96-5655-4238-8d76-9e212bbae9ec", "created_by_ref": "identity--58d52260-ef12-4246-ad63-ad69b0360e98", "created": "2022-07-01T03:29:17.107233Z", "modified": "2022-07-01T03:29:17.107233Z", "name": "Online polls", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0029.md", "external_id": "T0029" } ], "object_marking_refs": [ "marking-definition--3da6cf9d-1ce4-4f2e-b6d4-1923b709345d" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--eb6d2cf6-e0cd-446b-a1f3-2cd7b8f20162", "created_by_ref": "identity--10d05fd9-175e-477e-b416-1e4d9cbab465", "created": "2022-07-01T03:29:17.107697Z", "modified": "2022-07-01T03:29:17.107697Z", "name": "Bait legitimate influencers", "description": "TA08", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "conduct-pump-priming" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0039 .md", "external_id": "T0039 " } ], "object_marking_refs": [ "marking-definition--24c4802c-ba22-42ec-8d8b-007d95cafea0" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--be4cb928-74dd-4243-bae4-c1bb10540fcc", "created_by_ref": "identity--0f426ba3-e76e-45e4-8e42-3fca3f75d09a", "created": "2022-07-01T03:29:17.10816Z", "modified": "2022-07-01T03:29:17.10816Z", "name": "Demand insurmountable proof", "description": "TA14", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-narratives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0040.md", "external_id": "T0040" } ], "object_marking_refs": [ "marking-definition--813c3ad8-34c8-488c-b3f7-7cf05abb3f41" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--670a229b-d2b3-40ae-8684-32ed5253fa30", "created_by_ref": "identity--7fc9ce06-d085-4bbc-98eb-7c160b29c799", "created": "2022-07-01T03:29:17.108618Z", "modified": "2022-07-01T03:29:17.108618Z", "name": "Seed Kernel of truth", "description": "TA08", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "conduct-pump-priming" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0042.md", "external_id": "T0042" } ], "object_marking_refs": [ "marking-definition--f0fdf08b-0e76-4424-abc5-18a83861904d" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--474442df-9662-4d6a-8936-1bf7a71f4118", "created_by_ref": "identity--3d6ad857-87da-4328-b5bb-734f0be9f047", "created": "2022-07-01T03:29:17.109075Z", "modified": "2022-07-01T03:29:17.109075Z", "name": "Chat apps", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0043.md", "external_id": "T0043" } ], "object_marking_refs": [ "marking-definition--f00e21f3-820b-458d-a385-e8cb7cec337c" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--976326b8-9bb8-4762-bf85-2e463a534f80", "created_by_ref": "identity--72e1d4d3-1b4f-40cb-8486-7fa17d59d4fe", "created": "2022-07-01T03:29:17.109537Z", "modified": "2022-07-01T03:29:17.109537Z", "name": "Seed distortions", "description": "TA08", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "conduct-pump-priming" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0044.md", "external_id": "T0044" } ], "object_marking_refs": [ "marking-definition--8aee4ccb-7e2e-462f-8ae7-41f424c8c8f4" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--7ae144a2-3b79-4740-b651-2d24c2c1a4b1", "created_by_ref": "identity--649e1891-37f6-459c-87d9-bc02129f0023", "created": "2022-07-01T03:29:17.109986Z", "modified": "2022-07-01T03:29:17.109986Z", "name": "Use fake experts", "description": "TA08", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "conduct-pump-priming" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0045.md", "external_id": "T0045" } ], "object_marking_refs": [ "marking-definition--a086a228-95e2-4a73-8f45-73bc6df77063" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--6427ef0d-29ee-4b97-a3c6-db7595938187", "created_by_ref": "identity--52aa5c8b-baa0-4b4b-81dc-3b0337180f85", "created": "2022-07-01T03:29:17.11044Z", "modified": "2022-07-01T03:29:17.11044Z", "name": "Use Search Engine Optimization", "description": "TA08", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "conduct-pump-priming" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0046.md", "external_id": "T0046" } ], "object_marking_refs": [ "marking-definition--e1cbfcdc-3d0b-4a0f-8924-0b60f6e7db54" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--8e05e3e1-beaa-49b9-a2f1-7200d363a900", "created_by_ref": "identity--cd267b72-9ade-4cb3-816d-db8785ecbccd", "created": "2022-07-01T03:29:17.110895Z", "modified": "2022-07-01T03:29:17.110895Z", "name": "Censor social media as a political force", "description": "TA18", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-online-harms" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0047.md", "external_id": "T0047" } ], "object_marking_refs": [ "marking-definition--054e01ae-7378-415b-85cc-7f3751559c03" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d053b450-19a8-44c7-a847-6fd11ba6f69a", "created_by_ref": "identity--54dddb49-ea23-4b28-959d-d68f3ffe6964", "created": "2022-07-01T03:29:17.111351Z", "modified": "2022-07-01T03:29:17.111351Z", "name": "Harass", "description": "TA18", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-online-harms" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0048.md", "external_id": "T0048" } ], "object_marking_refs": [ "marking-definition--53bfe890-fcbd-4e0a-a085-76874996797a" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--68bcc375-48d3-4efe-aa6b-dc94b2c9be3b", "created_by_ref": "identity--c12463fb-d446-4d46-86d8-187a9ccd523e", "created": "2022-07-01T03:29:17.111805Z", "modified": "2022-07-01T03:29:17.111805Z", "name": "Flooding the Information Space", "description": "TA17", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "maximize-exposure" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0049.md", "external_id": "T0049" } ], "object_marking_refs": [ "marking-definition--ce5228d1-307d-4b48-99bd-dc5f8baf0157" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5ced2330-8d58-4417-8ae3-ce66cabb513c", "created_by_ref": "identity--6edd4070-0d58-4fcb-a92c-1cd606b1e372", "created": "2022-07-01T03:29:17.112292Z", "modified": "2022-07-01T03:29:17.112292Z", "name": "Organize Events", "description": "TA10", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-offline-activity" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0057.md", "external_id": "T0057" } ], "object_marking_refs": [ "marking-definition--b4a225e6-c764-4dc7-907a-91c3b332d65d" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--08850f6c-e006-4c4f-886b-c904d8fb77f5", "created_by_ref": "identity--2f19463e-0d5e-4578-a45f-ecef828a771b", "created": "2022-07-01T03:29:17.11275Z", "modified": "2022-07-01T03:29:17.11275Z", "name": "Play the long game", "description": "TA11", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "persist-in-the-information-environment" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0059.md", "external_id": "T0059" } ], "object_marking_refs": [ "marking-definition--02d2bd8f-5650-473c-b7b8-7c42a13c9820" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b499ae71-92f2-41b4-94f1-a3c061a96871", "created_by_ref": "identity--7c5a1256-d940-4fd2-ab27-0072959a20bd", "created": "2022-07-01T03:29:17.113212Z", "modified": "2022-07-01T03:29:17.113212Z", "name": "Continue to Amplify", "description": "TA11", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "persist-in-the-information-environment" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0060.md", "external_id": "T0060" } ], "object_marking_refs": [ "marking-definition--31e37208-2a7d-43c4-b831-7e3462c2b2ee" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--0590dab3-9ceb-4b71-9187-8847ed98f0c5", "created_by_ref": "identity--81fccebf-8fd2-4369-b6d8-eb7bc5a94dc4", "created": "2022-07-01T03:29:17.113675Z", "modified": "2022-07-01T03:29:17.113675Z", "name": "Sell Merchandise", "description": "TA10", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-offline-activity" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0061.md", "external_id": "T0061" } ], "object_marking_refs": [ "marking-definition--ef2c3e54-f8ba-4edc-8460-be63c6cfc8c7" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c50c3595-ae68-4e13-8b76-40359cd0846a", "created_by_ref": "identity--24f42049-ba0d-4bc3-8a8a-1121fb44228c", "created": "2022-07-01T03:29:17.114138Z", "modified": "2022-07-01T03:29:17.114138Z", "name": "Prepare Physical Broadcast Capabilities", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0065.md", "external_id": "T0065" } ], "object_marking_refs": [ "marking-definition--66721b32-473e-4f07-b524-25780f47c326" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--8311c92c-61a1-4277-afca-5c4a43e18c06", "created_by_ref": "identity--cfb5f6df-5c4d-4a9a-823e-337fa893c6b7", "created": "2022-07-01T03:29:17.114594Z", "modified": "2022-07-01T03:29:17.114594Z", "name": "Degrade Adversary", "description": "TA02", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "plan-objectives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0066.md", "external_id": "T0066" } ], "object_marking_refs": [ "marking-definition--b04ba37c-7f96-4ce1-b762-dee94ae0bd38" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--82df414a-473f-4d78-9bb0-ee9efd58965c", "created_by_ref": "identity--9be00094-7bf8-4112-8695-c3f7debcfc07", "created": "2022-07-01T03:29:17.115059Z", "modified": "2022-07-01T03:29:17.115059Z", "name": "Respond to Breaking News Event or Active Crisis", "description": "TA14", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-narratives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0068.md", "external_id": "T0068" } ], "object_marking_refs": [ "marking-definition--879a346f-3cc6-4e3a-accd-2d0ae5b6f2f2" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--21c051ac-c395-4ac0-a064-f97aff09639b", "created_by_ref": "identity--66aa20b5-b271-42ea-b341-498721a297b4", "created": "2022-07-01T03:29:17.115517Z", "modified": "2022-07-01T03:29:17.115517Z", "name": "Segment Audiences", "description": "TA13", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "target-audience-analysis" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0072.md", "external_id": "T0072" } ], "object_marking_refs": [ "marking-definition--fbb99453-572c-48a8-a6f6-b7d63530c287" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5a63d85c-fe2a-4932-8db2-f5efaabdfff5", "created_by_ref": "identity--b6bd7a37-8032-46e7-bda4-0605831594c3", "created": "2022-07-01T03:29:17.115975Z", "modified": "2022-07-01T03:29:17.115975Z", "name": "Determine Target Audiences", "description": "TA01", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "plan-strategy" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0073.md", "external_id": "T0073" } ], "object_marking_refs": [ "marking-definition--7c733617-4276-4f98-94a3-c8b7ad2e371e" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d9e11aed-9dd8-4475-8ae5-8712ff59f586", "created_by_ref": "identity--d1019309-43a3-4678-9e95-0dcc6adf34db", "created": "2022-07-01T03:29:17.116426Z", "modified": "2022-07-01T03:29:17.116426Z", "name": "Determine Strategic Ends", "description": "TA01", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "plan-strategy" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0074.md", "external_id": "T0074" } ], "object_marking_refs": [ "marking-definition--7c51b002-f10f-4d6a-822d-4222b2b6bc2b" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--fe45dbba-bd39-40a4-b62a-befd4cd7a11f", "created_by_ref": "identity--ce3227cb-dbca-431c-9508-bd9b38c37f02", "created": "2022-07-01T03:29:17.116887Z", "modified": "2022-07-01T03:29:17.116887Z", "name": "Dismiss", "description": "TA02", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "plan-objectives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0075.md", "external_id": "T0075" } ], "object_marking_refs": [ "marking-definition--a58597d6-33a8-492d-a437-fb7b94fdb267" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--36f2f883-c35e-49e4-8908-7002029f200a", "created_by_ref": "identity--435d8bae-f490-434e-ae08-a769da31c9ff", "created": "2022-07-01T03:29:17.117339Z", "modified": "2022-07-01T03:29:17.117339Z", "name": "Distort", "description": "TA02", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "plan-objectives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0076.md", "external_id": "T0076" } ], "object_marking_refs": [ "marking-definition--436a148e-4689-48bf-bfee-44345ad7b74d" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ad9ae97c-340b-4e33-96fe-ee0ad1407eb0", "created_by_ref": "identity--533564df-a233-45cc-a4bd-67dde9b464a3", "created": "2022-07-01T03:29:17.117798Z", "modified": "2022-07-01T03:29:17.117798Z", "name": "Distract", "description": "TA02", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "plan-objectives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0077.md", "external_id": "T0077" } ], "object_marking_refs": [ "marking-definition--08870f86-287a-418d-aec3-1e5ccf8543b7" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--156bbbf4-8f8a-44f3-9533-af5118313265", "created_by_ref": "identity--0fbb6aa3-5a2c-4965-bad7-e1a009a30414", "created": "2022-07-01T03:29:17.118259Z", "modified": "2022-07-01T03:29:17.118259Z", "name": "Dismay", "description": "TA02", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "plan-objectives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0078.md", "external_id": "T0078" } ], "object_marking_refs": [ "marking-definition--0745cf80-2737-42fc-8f9d-816fb5e54dfd" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--571a7838-129d-4251-b809-3309b9e8aa5f", "created_by_ref": "identity--406cf1bb-fe17-4550-b474-c0199f3e6e7c", "created": "2022-07-01T03:29:17.11871Z", "modified": "2022-07-01T03:29:17.11871Z", "name": "Divide", "description": "TA02", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "plan-objectives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0079.md", "external_id": "T0079" } ], "object_marking_refs": [ "marking-definition--f0f06852-d69f-4922-a268-3cca81dfe969" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d538394c-6e96-4019-851d-f16db761bfb9", "created_by_ref": "identity--83f9262b-4bd1-4abd-b280-723cda0c0770", "created": "2022-07-01T03:29:17.119171Z", "modified": "2022-07-01T03:29:17.119171Z", "name": "Map Target Audience Information Environment", "description": "TA13", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "target-audience-analysis" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0080.md", "external_id": "T0080" } ], "object_marking_refs": [ "marking-definition--b57d8117-50dc-4f53-992c-e1dd829298cc" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--06e0e6e4-1c50-4813-9ff3-f49592514ab8", "created_by_ref": "identity--1436a742-18aa-4755-a263-57093176e4e9", "created": "2022-07-01T03:29:17.119621Z", "modified": "2022-07-01T03:29:17.119621Z", "name": "Identify Social and Technical Vulnerabilities", "description": "TA13", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "target-audience-analysis" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0081.md", "external_id": "T0081" } ], "object_marking_refs": [ "marking-definition--897d9914-1f35-4b99-8192-8bc918077f22" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--aa45be8a-db0f-422f-96d0-9959091d70b6", "created_by_ref": "identity--a9de2212-e29b-40c5-a5f2-96262b6ab411", "created": "2022-07-01T03:29:17.120074Z", "modified": "2022-07-01T03:29:17.120074Z", "name": "Develop New Narratives", "description": "TA14", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-narratives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0082.md", "external_id": "T0082" } ], "object_marking_refs": [ "marking-definition--5395b9fe-bc52-4781-a8d7-b2e89efffb7d" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--17f077e3-6308-4266-9f63-06d69db6fb45", "created_by_ref": "identity--2c304336-3c15-47fb-929a-26b00f4d0b65", "created": "2022-07-01T03:29:17.120528Z", "modified": "2022-07-01T03:29:17.120528Z", "name": "Integrate Target Audience Vulnerabilities into Narrative", "description": "TA14", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-narratives" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0083.md", "external_id": "T0083" } ], "object_marking_refs": [ "marking-definition--273d5ee8-e85f-451f-9fa3-466df09eae72" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e5a96616-8465-4184-ac6f-09b46bdb5e1f", "created_by_ref": "identity--b091aac5-cc47-4c38-a077-15d5acb0564c", "created": "2022-07-01T03:29:17.120982Z", "modified": "2022-07-01T03:29:17.120982Z", "name": "Reuse Existing Content", "description": "TA06", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0084.md", "external_id": "T0084" } ], "object_marking_refs": [ "marking-definition--af398d8c-ff47-4d4c-b671-e73af7df50f4" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--9988cf65-495c-4880-95c1-f660858e7939", "created_by_ref": "identity--c48b52b0-b82d-4bda-98c7-01a8f94a99ba", "created": "2022-07-01T03:29:17.121437Z", "modified": "2022-07-01T03:29:17.121437Z", "name": "Develop Text-based Content", "description": "TA06", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0085.md", "external_id": "T0085" } ], "object_marking_refs": [ "marking-definition--728e63f8-bd2b-4daa-a1cc-bd368c32ed74" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--58c939d8-05bb-45ca-b12d-dcd9cc8df2dc", "created_by_ref": "identity--e46499c8-aed1-4aeb-80ff-a73482840b99", "created": "2022-07-01T03:29:17.121892Z", "modified": "2022-07-01T03:29:17.121892Z", "name": "Develop Image-based Content", "description": "TA06", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0086.md", "external_id": "T0086" } ], "object_marking_refs": [ "marking-definition--8f90dd1e-493a-45f6-afd6-160a43d5980f" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--41cd20d5-2365-446a-bd9d-5756ff5f5986", "created_by_ref": "identity--a8bb5ff1-6d2f-4d1f-901d-77eb1c1cd8d8", "created": "2022-07-01T03:29:17.122352Z", "modified": "2022-07-01T03:29:17.122352Z", "name": "Develop Video-based Content", "description": "TA06", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0087.md", "external_id": "T0087" } ], "object_marking_refs": [ "marking-definition--59edea27-8e32-4551-81f0-7406355eb952" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b25838c1-95b5-4c31-a1bc-f4b5e4994854", "created_by_ref": "identity--a5fd4261-af1c-4f01-8c80-548a054a1235", "created": "2022-07-01T03:29:17.122823Z", "modified": "2022-07-01T03:29:17.122823Z", "name": "Develop Audio-based Content", "description": "TA06", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0088.md", "external_id": "T0088" } ], "object_marking_refs": [ "marking-definition--3fb5f453-07e4-433f-8e63-158bc202fec8" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--82022c93-6e94-4842-99b6-93a783657a12", "created_by_ref": "identity--6f3df079-f7df-473f-8e69-65e4867052e6", "created": "2022-07-01T03:29:17.123282Z", "modified": "2022-07-01T03:29:17.123282Z", "name": "Obtain Private Documents", "description": "TA06", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0089.md", "external_id": "T0089" } ], "object_marking_refs": [ "marking-definition--73f8f675-6ecb-4d1b-bc52-8b52558d8493" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--8702511a-d1e3-4ca5-97a3-0a8b33bbdf53", "created_by_ref": "identity--a26fa083-3fc8-4278-8ed5-77a44b571648", "created": "2022-07-01T03:29:17.123743Z", "modified": "2022-07-01T03:29:17.123743Z", "name": "Create Inauthentic Accounts", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0090.md", "external_id": "T0090" } ], "object_marking_refs": [ "marking-definition--c15c1264-bd1f-40d1-b0a2-bb3f67de3659" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--eea82e81-08cd-42f7-9c3f-32d296341fee", "created_by_ref": "identity--05400086-dfff-4980-bb7d-ec94e33ae378", "created": "2022-07-01T03:29:17.124198Z", "modified": "2022-07-01T03:29:17.124198Z", "name": "Recruit bad actors", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0091.md", "external_id": "T0091" } ], "object_marking_refs": [ "marking-definition--860df523-d43d-4b94-a3e7-33382331c6d5" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--378c1a19-24f1-466d-a5f8-93457ca0b89c", "created_by_ref": "identity--a13afd19-3282-4cee-9704-a69dae1249b8", "created": "2022-07-01T03:29:17.124689Z", "modified": "2022-07-01T03:29:17.124689Z", "name": "Build Network", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0092.md", "external_id": "T0092" } ], "object_marking_refs": [ "marking-definition--249a4868-99f9-4e0b-be59-7925d3d061b9" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--86b561d4-5a64-4dbb-bc52-2c68bdec854a", "created_by_ref": "identity--be1c3972-948e-444a-8bce-61c3b8643de9", "created": "2022-07-01T03:29:17.125148Z", "modified": "2022-07-01T03:29:17.125148Z", "name": "Acquire/ recruit Network", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0093.md", "external_id": "T0093" } ], "object_marking_refs": [ "marking-definition--6ff5c683-050b-4fa1-a54f-49cb8d1d3df2" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--4ccec7a7-945f-40c2-8b51-a5701ae8aa14", "created_by_ref": "identity--799d635e-d062-4488-aaa4-ab32cd1763da", "created": "2022-07-01T03:29:17.125607Z", "modified": "2022-07-01T03:29:17.125607Z", "name": "Infiltrate Existing Networks", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0094.md", "external_id": "T0094" } ], "object_marking_refs": [ "marking-definition--7200a735-ad5b-4c08-ad3e-07d725a7faac" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ab0f7411-ff09-4897-b55c-301fdd6276b8", "created_by_ref": "identity--3b10ff39-a4f1-461b-9b82-26e85d98d99d", "created": "2022-07-01T03:29:17.126065Z", "modified": "2022-07-01T03:29:17.126065Z", "name": "Develop Owned Media Assets", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0095.md", "external_id": "T0095" } ], "object_marking_refs": [ "marking-definition--2c194b27-329e-41fb-98ed-df4f06db3141" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5db1d9a2-52a4-4b43-bca4-cdb387335a3b", "created_by_ref": "identity--5f39833d-3706-4af3-b5db-9f00bdc5e02c", "created": "2022-07-01T03:29:17.126517Z", "modified": "2022-07-01T03:29:17.126517Z", "name": "Leverage Content Farm", "description": "TA15", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-social-assets" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0096.md", "external_id": "T0096" } ], "object_marking_refs": [ "marking-definition--f7ea534a-bb6f-4ea3-a4f2-24a05bcc6a32" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e00abc7f-5f53-487a-8562-e3ba4c6ca0b6", "created_by_ref": "identity--7a62d925-cec9-4cde-a5b4-e4eb5ee97b73", "created": "2022-07-01T03:29:17.126973Z", "modified": "2022-07-01T03:29:17.126973Z", "name": "Create personas", "description": "TA16", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-legitimacy" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0097.md", "external_id": "T0097" } ], "object_marking_refs": [ "marking-definition--aa05a95c-e43f-490a-ac96-f7f0c5fe3fef" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ecfdb2b2-5841-4c61-ae57-1bfa1dd50a87", "created_by_ref": "identity--22a4d897-ac44-41d7-9761-d1c23a31ce28", "created": "2022-07-01T03:29:17.127428Z", "modified": "2022-07-01T03:29:17.127428Z", "name": "Establish Inauthentic News Sites", "description": "TA16", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-legitimacy" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0098.md", "external_id": "T0098" } ], "object_marking_refs": [ "marking-definition--d684d1f9-7edd-412e-a730-e5cf08509bbf" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--69e703e0-990f-45cf-a4eb-9eb2193ee58d", "created_by_ref": "identity--81d31ff3-891e-4a34-b094-297d877e070a", "created": "2022-07-01T03:29:17.12789Z", "modified": "2022-07-01T03:29:17.12789Z", "name": "Prepare Assets Impersonating Legitimate Entities", "description": "TA16", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-legitimacy" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0099.md", "external_id": "T0099" } ], "object_marking_refs": [ "marking-definition--7238cf38-fabd-46b9-a27d-325688c423fe" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ed11f144-9907-4dda-8d51-f9084227b41c", "created_by_ref": "identity--1fdd359e-d9eb-42ef-851f-e8f7e907a990", "created": "2022-07-01T03:29:17.128344Z", "modified": "2022-07-01T03:29:17.128344Z", "name": "Co-opt Trusted Sources", "description": "TA16", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "establish-legitimacy" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0100.md", "external_id": "T0100" } ], "object_marking_refs": [ "marking-definition--06d3e445-3c4b-4a34-8641-98f8469a880c" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--7283861d-801a-40d3-8e63-fb2d9951fee6", "created_by_ref": "identity--6d431156-2568-4a98-a905-75b4dc2ec0b8", "created": "2022-07-01T03:29:17.12891Z", "modified": "2022-07-01T03:29:17.12891Z", "name": "Create Localized Content", "description": "TA05", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "microtarget" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0101.md", "external_id": "T0101" } ], "object_marking_refs": [ "marking-definition--4e4ef88f-e70b-4a42-99b7-9d6114c92124" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--fef87440-2f0d-4623-b952-04f8f6712938", "created_by_ref": "identity--5c1d10e0-6bff-4f50-8d47-2ef9197c061c", "created": "2022-07-01T03:29:17.129378Z", "modified": "2022-07-01T03:29:17.129378Z", "name": "Leverage Echo Chambers/Filter Bubbles", "description": "TA05", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "microtarget" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0102.md", "external_id": "T0102" } ], "object_marking_refs": [ "marking-definition--7996c25b-9633-4fa2-b7c0-1afd4aa59123" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f7eb387d-dc29-4961-9aa5-2ef707ef4d4e", "created_by_ref": "identity--02600a7a-9c21-4d6a-91bd-65d45451d843", "created": "2022-07-01T03:29:17.129843Z", "modified": "2022-07-01T03:29:17.129843Z", "name": "Livestream", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0103.md", "external_id": "T0103" } ], "object_marking_refs": [ "marking-definition--bf0180fb-de93-494f-805a-f3fceab6d48f" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--966328aa-86fd-4f90-85da-0685b146c1ac", "created_by_ref": "identity--d103d1d9-e3c8-4796-903e-067a5d929aff", "created": "2022-07-01T03:29:17.130301Z", "modified": "2022-07-01T03:29:17.130301Z", "name": "Social Networks", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0104.md", "external_id": "T0104" } ], "object_marking_refs": [ "marking-definition--ad51d9d0-5a1c-4bd2-8bac-ccc2d5f01161" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--df56db91-8883-40b5-88d3-a144c2093f27", "created_by_ref": "identity--350a4915-af5e-4bd0-a737-a79d6d5d527f", "created": "2022-07-01T03:29:17.130762Z", "modified": "2022-07-01T03:29:17.130762Z", "name": "Media Sharing Networks", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0105.md", "external_id": "T0105" } ], "object_marking_refs": [ "marking-definition--ad61e09c-a1f4-40b5-877c-2c9933937e24" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--fdd2573d-3ad7-4ae0-a0ff-7542978aa448", "created_by_ref": "identity--86080875-4c7c-4777-bda0-b3493e0c2d02", "created": "2022-07-01T03:29:17.13122Z", "modified": "2022-07-01T03:29:17.13122Z", "name": "Discussion Forums", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0106.md", "external_id": "T0106" } ], "object_marking_refs": [ "marking-definition--c4cd66f6-9714-4a00-9007-5f5b13e547e2" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--99eb03c9-985f-4c62-9c07-d20939f7beb6", "created_by_ref": "identity--c98c629f-8200-4d6c-bd09-efb9809fafd9", "created": "2022-07-01T03:29:17.131683Z", "modified": "2022-07-01T03:29:17.131683Z", "name": "Bookmarking and Content Curation", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0107.md", "external_id": "T0107" } ], "object_marking_refs": [ "marking-definition--b2249aa7-99b9-4ff6-8491-e806868349e5" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--06cfef07-9214-4df2-a401-84c040d3e062", "created_by_ref": "identity--635e6fde-dc4a-4c1e-8423-251d86d1716e", "created": "2022-07-01T03:29:17.132138Z", "modified": "2022-07-01T03:29:17.132138Z", "name": "Blogging and Publishing Networks", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0108.md", "external_id": "T0108" } ], "object_marking_refs": [ "marking-definition--331b217d-fcf4-4a64-b4af-eb0f06c33825" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--970f3833-768b-4789-b6f3-8158c240e6c1", "created_by_ref": "identity--4cae941b-6bdd-41bd-8c00-1231cf53eaef", "created": "2022-07-01T03:29:17.132595Z", "modified": "2022-07-01T03:29:17.132595Z", "name": "Consumer Review Networks", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0109.md", "external_id": "T0109" } ], "object_marking_refs": [ "marking-definition--19909584-6abf-42d1-985b-231aa5609359" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--89c58eaa-2973-4ce4-81b2-bc644d8dff02", "created_by_ref": "identity--771e28f4-3218-4abb-b6bb-a27c787bdbfa", "created": "2022-07-01T03:29:17.133055Z", "modified": "2022-07-01T03:29:17.133055Z", "name": "Formal Diplomatic Channels", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0110.md", "external_id": "T0110" } ], "object_marking_refs": [ "marking-definition--871acae2-78f0-4ead-8a9e-b10689e07906" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--470a1d29-5132-4744-b5ed-fa2ab50973a3", "created_by_ref": "identity--da0bc2f8-12e6-4ec3-9794-58ce6c5d2550", "created": "2022-07-01T03:29:17.133515Z", "modified": "2022-07-01T03:29:17.133515Z", "name": "Traditional Media", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0111.md", "external_id": "T0111" } ], "object_marking_refs": [ "marking-definition--4db91436-2db3-4a1e-89c6-80b0be3fcadb" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--2f468380-3519-45f0-b377-050df5af0316", "created_by_ref": "identity--68496637-a6d4-4740-a8c6-4d9b0b688ad0", "created": "2022-07-01T03:29:17.13397Z", "modified": "2022-07-01T03:29:17.13397Z", "name": "Email", "description": "TA07", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "select-channels-and-affordances" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0112.md", "external_id": "T0112" } ], "object_marking_refs": [ "marking-definition--048a31b3-4103-4c59-b29e-26adf227909c" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5b44f922-66c0-4241-b933-4781edcbd457", "created_by_ref": "identity--24d24d03-1356-4aee-a3da-4653eb081889", "created": "2022-07-01T03:29:17.134421Z", "modified": "2022-07-01T03:29:17.134421Z", "name": "Employ Commercial Analytic Firms", "description": "TA08", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "conduct-pump-priming" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0113.md", "external_id": "T0113" } ], "object_marking_refs": [ "marking-definition--7cd3c8f4-122d-4262-9f63-a6e646f96fb5" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--501730c4-a597-4dfe-8487-688befb42b10", "created_by_ref": "identity--e785f97d-e66a-4e3b-9d3d-dcb75ab307d8", "created": "2022-07-01T03:29:17.134957Z", "modified": "2022-07-01T03:29:17.134957Z", "name": "Deliver Ads", "description": "TA09", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "deliver-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0114.md", "external_id": "T0114" } ], "object_marking_refs": [ "marking-definition--6206fbd9-5b7d-4101-9869-4a031afbe4df" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--bc6b823b-8a40-4ba3-99ab-0092341f2cc6", "created_by_ref": "identity--147a00a2-3f5b-49ce-9d1e-78a6780d7d81", "created": "2022-07-01T03:29:17.135439Z", "modified": "2022-07-01T03:29:17.135439Z", "name": "Post Content", "description": "TA09", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "deliver-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0115.md", "external_id": "T0115" } ], "object_marking_refs": [ "marking-definition--87fb19be-2eab-4cb0-92c0-950b415b07d2" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--55e306db-023f-4634-8e7a-d9f1753f1403", "created_by_ref": "identity--4e65dc6d-3f43-4ea2-a633-6ea513b65471", "created": "2022-07-01T03:29:17.1359Z", "modified": "2022-07-01T03:29:17.1359Z", "name": "Comment or Reply on Content", "description": "TA09", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "deliver-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0116.md", "external_id": "T0116" } ], "object_marking_refs": [ "marking-definition--1d1032b7-2302-4980-b4fa-0ddaca3c1fe8" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c9156db4-b6b2-485b-bac1-a31516bea444", "created_by_ref": "identity--2bef3f55-6ce0-44da-acde-3a7855a38291", "created": "2022-07-01T03:29:17.136363Z", "modified": "2022-07-01T03:29:17.136363Z", "name": "Attract Traditional Media", "description": "TA09", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "deliver-content" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0117.md", "external_id": "T0117" } ], "object_marking_refs": [ "marking-definition--96aa2ed8-9c51-4307-88fc-441d79e72b72" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--37aed67a-9d72-4f4f-a44b-3dfb06995535", "created_by_ref": "identity--00a115b8-decc-4ece-a2b4-752003ba4683", "created": "2022-07-01T03:29:17.136819Z", "modified": "2022-07-01T03:29:17.136819Z", "name": "Amplify Existing Narrative", "description": "TA17", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "maximize-exposure" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0118.md", "external_id": "T0118" } ], "object_marking_refs": [ "marking-definition--00bcdef4-19d7-4556-ad99-237f7161a01f" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--0ab43e92-4882-457c-8ca6-c354ac48b294", "created_by_ref": "identity--e6d8a95b-9b10-48ca-b8e1-b077500ec588", "created": "2022-07-01T03:29:17.137316Z", "modified": "2022-07-01T03:29:17.137316Z", "name": "Cross-Posting", "description": "TA17", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "maximize-exposure" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0119.md", "external_id": "T0119" } ], "object_marking_refs": [ "marking-definition--16a6d36f-a149-4ed5-b05e-63ac6aaa928a" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--fb0fe94e-7214-4aed-a3b8-d8e21fe0f934", "created_by_ref": "identity--9a50eaed-346d-429b-ab68-36d9d1883d71", "created": "2022-07-01T03:29:17.137779Z", "modified": "2022-07-01T03:29:17.137779Z", "name": "Incentivize Sharing", "description": "TA17", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "maximize-exposure" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0120.md", "external_id": "T0120" } ], "object_marking_refs": [ "marking-definition--aac40058-3121-4869-9029-566b754482ea" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--0281663e-716f-41b1-be93-08f7bad1ddef", "created_by_ref": "identity--c520075b-a92a-4f85-96fe-b724de95492a", "created": "2022-07-01T03:29:17.138235Z", "modified": "2022-07-01T03:29:17.138235Z", "name": "Manipulate Platform Algorithm", "description": "TA17", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "maximize-exposure" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0121.md", "external_id": "T0121" } ], "object_marking_refs": [ "marking-definition--7a0da991-8525-4cd7-9707-546159b1d1c3" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--fb56da5b-2a04-4d5d-8399-97b7ac04525f", "created_by_ref": "identity--01935b3a-243c-4232-8366-767df5ba5d9d", "created": "2022-07-01T03:29:17.138696Z", "modified": "2022-07-01T03:29:17.138696Z", "name": "Direct Users to Alternative Platforms", "description": "TA17", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "maximize-exposure" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0122.md", "external_id": "T0122" } ], "object_marking_refs": [ "marking-definition--98150158-c209-40ef-8f67-8b0e068283dd" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--bd436c13-0ab4-4b4b-a845-ae87918a04e8", "created_by_ref": "identity--dd4a264b-4dc5-4e7f-9cb1-41d62ff84fe4", "created": "2022-07-01T03:29:17.139152Z", "modified": "2022-07-01T03:29:17.139152Z", "name": "Control Information Environment through Offensive Cyberspace Operations", "description": "TA18", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-online-harms" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0123.md", "external_id": "T0123" } ], "object_marking_refs": [ "marking-definition--7ad306b6-8013-4090-b62a-ddad48b77c66" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--93c39fc5-412f-44b7-a1a1-badc8a1bca3a", "created_by_ref": "identity--ff3177e1-cb74-49f6-92d9-9760994d1245", "created": "2022-07-01T03:29:17.139611Z", "modified": "2022-07-01T03:29:17.139611Z", "name": "Suppress Opposition", "description": "TA18", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-online-harms" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0124.md", "external_id": "T0124" } ], "object_marking_refs": [ "marking-definition--374994be-2311-4e29-91b4-8e46d3a733d6" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--eedcc7f8-edec-4edb-9b08-a890cf55c907", "created_by_ref": "identity--7f51c314-3c76-4bb9-b1e9-c43a441088a9", "created": "2022-07-01T03:29:17.140068Z", "modified": "2022-07-01T03:29:17.140068Z", "name": "Platform Filtering", "description": "TA18", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-online-harms" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0125.md", "external_id": "T0125" } ], "object_marking_refs": [ "marking-definition--aec46781-a9af-4956-ac97-90805bdd57a2" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5f3b98bc-bb23-495b-bb5f-d374cb552333", "created_by_ref": "identity--04a2369c-c174-45ec-8f6c-bd86d4615e94", "created": "2022-07-01T03:29:17.140525Z", "modified": "2022-07-01T03:29:17.140525Z", "name": "Encourage Attendance at Events", "description": "TA10", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-offline-activity" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0126.md", "external_id": "T0126" } ], "object_marking_refs": [ "marking-definition--75b6f15e-0ebc-4023-8401-c77c43cad473" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d529115b-3c95-42c2-bd2c-ca9f33aac00c", "created_by_ref": "identity--b75c115a-736d-4f7e-b16e-2c77681d4355", "created": "2022-07-01T03:29:17.140979Z", "modified": "2022-07-01T03:29:17.140979Z", "name": "Physical Violence", "description": "TA10", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "drive-offline-activity" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0127.md", "external_id": "T0127" } ], "object_marking_refs": [ "marking-definition--93c68e3b-9c3d-4734-8bc3-f5f15d277b97" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--055b0bf8-8474-488f-8e3d-52d947132649", "created_by_ref": "identity--6754c7de-f65b-4c7a-ab0e-2f6898e78b9b", "created": "2022-07-01T03:29:17.141434Z", "modified": "2022-07-01T03:29:17.141434Z", "name": "Conceal People", "description": "TA11", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "persist-in-the-information-environment" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0128.md", "external_id": "T0128" } ], "object_marking_refs": [ "marking-definition--ce3102d0-e888-457e-978c-080e0d170683" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--61f9d9e8-83c8-4eaa-b7c2-b7bba16b948b", "created_by_ref": "identity--bddd29bc-196d-40b4-8c68-be85f2f68e35", "created": "2022-07-01T03:29:17.14189Z", "modified": "2022-07-01T03:29:17.14189Z", "name": "Conceal Operational Activity", "description": "TA11", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "persist-in-the-information-environment" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0129.md", "external_id": "T0129" } ], "object_marking_refs": [ "marking-definition--4bfa250f-3859-47a6-b2aa-0a0feab550b8" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e5ca8c74-3a97-449f-b2fd-a6c68001022e", "created_by_ref": "identity--74764361-a0ca-4a61-b7c3-07f5589c908c", "created": "2022-07-01T03:29:17.142343Z", "modified": "2022-07-01T03:29:17.142343Z", "name": "Conceal Infrastructure", "description": "TA11", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "persist-in-the-information-environment" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0130.md", "external_id": "T0130" } ], "object_marking_refs": [ "marking-definition--0732f928-a6d2-46c4-983f-f385a18d9c30" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f8c2e933-a4ba-410a-8689-d6882b92e28c", "created_by_ref": "identity--6d8fd8d9-aa56-4ae4-80fc-4a0ca136f567", "created": "2022-07-01T03:29:17.1428Z", "modified": "2022-07-01T03:29:17.1428Z", "name": "Exploit TOS/Content Moderation", "description": "TA11", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "persist-in-the-information-environment" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0131.md", "external_id": "T0131" } ], "object_marking_refs": [ "marking-definition--3e99c627-a96e-4eef-9a2e-ce23c1e3895f" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--a0c6c1cb-b4b6-4f91-ba68-489a7fcf2b9b", "created_by_ref": "identity--5bf5359f-d86d-462a-9231-ec13db821278", "created": "2022-07-01T03:29:17.143249Z", "modified": "2022-07-01T03:29:17.143249Z", "name": "Measure Performance", "description": "TA12", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "assess-effectiveness" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0132.md", "external_id": "T0132" } ], "object_marking_refs": [ "marking-definition--7006fd01-2469-4378-8f80-02f3b2632f4d" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--0503f142-a258-45ee-8c51-4ec589ec4d26", "created_by_ref": "identity--f26d6354-06a8-49af-a6ab-35b84e3aaafa", "created": "2022-07-01T03:29:17.143701Z", "modified": "2022-07-01T03:29:17.143701Z", "name": "Measure Effectiveness", "description": "TA12", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "assess-effectiveness" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0133.md", "external_id": "T0133" } ], "object_marking_refs": [ "marking-definition--9a5ed9b1-4394-4791-be2a-8ee409828b58" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--7cb970a6-d4bb-43be-ac7f-92a1b3eb24ef", "created_by_ref": "identity--34d1bc62-7da2-4c56-b1c5-320c7cd9f44f", "created": "2022-07-01T03:29:17.144152Z", "modified": "2022-07-01T03:29:17.144152Z", "name": "Measure Effectiveness Indicators (or KPIs)", "description": "TA12", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "assess-effectiveness" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0134.md", "external_id": "T0134" } ], "object_marking_refs": [ "marking-definition--4f5f5cd0-90a6-4338-beaf-441168ca9303" ], "x_mitre_is_subtechnique": false, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1,0" }, { "type": "x-mitre-matrix", "spec_version": "2.1", "id": "x-mitre-matrix--4592a0a9-b821-47ad-b0c6-5ce63c628719", "created": "2022-07-01T03:29:17.144346Z", "modified": "2022-07-01T03:29:17.144346Z", "name": "DISARM Framework", "description": "DISARM is a framework designed for describing and understanding disinformation incidents.", "tactic_refs": [ "x-mitre-tactic--ca848c76-3e2e-4059-a61f-dce4180b4710", "x-mitre-tactic--eec7c49a-35c0-4ed2-9161-f7dba316a609", "x-mitre-tactic--e749a24c-8362-4fed-ba26-51e56b37b439", "x-mitre-tactic--4348a49d-d21a-4915-a512-ba1accaa8cd9", "x-mitre-tactic--7c9b3fa5-50f8-4fab-acc3-f984b7290cd7", "x-mitre-tactic--f59414c8-2d4d-4d9e-8d88-fe8a339270d1", "x-mitre-tactic--717ccb01-df67-48a8-b6ec-9551272a4ff4", "x-mitre-tactic--b2ad03fa-b162-4161-b864-344f9cb69ad3", "x-mitre-tactic--efddae0c-df65-48be-a7a4-067237d8a528", "x-mitre-tactic--96ec7676-22a8-40f8-91f9-2b770fec3a78", "x-mitre-tactic--10b904db-7568-4a50-bf6f-9541f3b01924", "x-mitre-tactic--977b0d14-c42a-4f3e-badb-fdabb9781544", "x-mitre-tactic--5d068e30-413a-4465-b51b-8e9fc1e18b1e", "x-mitre-tactic--60087ffe-9390-4baf-8e93-20b3f075da8e", "x-mitre-tactic--c4e65fa5-4f02-4075-b26f-07c0d07badaa", "x-mitre-tactic--2fad8829-108a-4d6a-8135-6bc3bf74a770" ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation", "external_id": "DISARM" } ] } ] }