{ "type": "bundle", "id": "bundle--11c21ea4-bb5b-4ab5-9905-8bd1788b8c5d", "objects": [ { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e27cf6aa-69bc-434b-ac68-b0164d0b3421", "created_by_ref": "identity--f1a0f560-2d9e-4c5d-bf47-7e96e805de82", "created": "2022-07-03T23:52:02.910636Z", "modified": "2022-07-03T23:52:02.910636Z", "name": "Appropriate Content", "description": "An influence operation may take content from other sources with proper attribution. This content may be either misinformation content shared by others without malicious intent but now leveraged by the campaign as disinformation or disinformation content from other sources. Examples include the appropriation of content from one inauthentic news site to another inauthentic news site or network in ways that align with the originators licensing or terms of service.", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "develop-content" } ], "external_references": [ { "source_name": "mitre-attack", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0084.004.md", "external_id": "T0084.004" } ], "object_marking_refs": [ "marking-definition--f79f25d2-8b96-4580-b169-eb7b613a7c31" ], "x_mitre_is_subtechnique": true, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "2.1" } ] }