DISARMframeworks/generated_files/DISARM_STIX/attack-pattern/attack-pattern--ea762d7a-8852-4d91-b44f-4754aa079313.json

{
    "type": "bundle",
    "id": "bundle--90036e2f-d5b0-477f-b401-53a369ff8b3d",
    "objects": [
        {
            "type": "attack-pattern",
            "spec_version": "2.1",
            "id": "attack-pattern--ea762d7a-8852-4d91-b44f-4754aa079313",
            "created_by_ref": "identity--f1a0f560-2d9e-4c5d-bf47-7e96e805de82",
            "created": "2024-08-02T17:12:32.41687Z",
            "modified": "2024-08-02T17:12:32.41687Z",
            "name": "Remove Post Origins",
            "description": "Removing post origins refers to the elimination of evidence that indicates the initial source of operation content, often to complicate attribution. An influence operation may remove post origins by deleting watermarks, renaming files, or removing embedded links in its content.",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "mitre-attack",
                    "phase_name": "persist-in-the-information-environment"
                }
            ],
            "external_references": [
                {
                    "source_name": "mitre-attack",
                    "url": "https://github.com/DISARMFoundation/DISARMframeworks/blob/main/generated_pages/techniques/T0129.009.md",
                    "external_id": "T0129.009"
                }
            ],
            "object_marking_refs": [
                "marking-definition--f79f25d2-8b96-4580-b169-eb7b613a7c31"
            ],
            "x_mitre_is_subtechnique": true,
            "x_mitre_platforms": [
                "Windows",
                "Linux",
                "Mac"
            ],
            "x_mitre_version": "2.1"
        }
    ]
}