mirror of
https://github.com/DISARMFoundation/DISARMframeworks.git
synced 2024-12-18 04:14:22 -05:00
3611 lines
142 KiB
JSON
3611 lines
142 KiB
JSON
{
|
|
"type": "bundle",
|
|
"id": "bundle--bedadddf-1f90-4478-b580-4bc74befc712",
|
|
"objects": [
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--91e50646-d377-4904-8b8a-db58454fbbe2",
|
|
"created_by_ref": "identity--64355a3c-25b3-4d52-aab2-cfe7a5b8b505",
|
|
"created": "2022-07-01T16:24:14.439837Z",
|
|
"modified": "2022-07-01T16:24:14.439837Z",
|
|
"name": "Plan Strategy",
|
|
"description": "Define the desired end state, i.e. the set of required conditions that defines achievement of all objectives.",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA01.md",
|
|
"external_id": "TA01"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--3dbaea82-d695-4310-a9be-17e0836d03f4"
|
|
],
|
|
"x_mitre_shortname": "plan-strategy"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--bd30ac72-3528-4704-97fc-e7049ff50486",
|
|
"created_by_ref": "identity--13164bba-0858-4d4b-b14e-753f0b68bf9c",
|
|
"created": "2022-07-01T16:24:14.441002Z",
|
|
"modified": "2022-07-01T16:24:14.441002Z",
|
|
"name": "Plan Objectives",
|
|
"description": "Set clearly defined, measurable, and achievable objectives. Achieving objectives ties execution of tactical tasks to reaching the desired end state. There are four primary considerations: \n- Each desired effect should link directly to one or more objectives \n- The effect should be measurable \n- The objective statement should not specify the way and means of accomplishment \n- The effect should be distinguishable from the objective it supports as a condition for success, not as another objective or task.",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA02.md",
|
|
"external_id": "TA02"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--af41d480-cf54-498c-b60f-e61833f35500"
|
|
],
|
|
"x_mitre_shortname": "plan-objectives"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--39ba49b5-27ef-4919-ad0c-21cf5f6d5ea0",
|
|
"created_by_ref": "identity--81cbf818-e943-45f2-997f-c9fc26f9d348",
|
|
"created": "2022-07-01T16:24:14.44239Z",
|
|
"modified": "2022-07-01T16:24:14.44239Z",
|
|
"name": "Microtarget",
|
|
"description": "Target very specific populations of people",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA05.md",
|
|
"external_id": "TA05"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--e9b47596-0f93-44d7-84a8-ca4fcb975938"
|
|
],
|
|
"x_mitre_shortname": "microtarget"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--0c4cb5fb-80e0-4185-b007-683e55d444ea",
|
|
"created_by_ref": "identity--feaab16e-9ae2-4182-9ff7-dabcdee056f6",
|
|
"created": "2022-07-01T16:24:14.443761Z",
|
|
"modified": "2022-07-01T16:24:14.443761Z",
|
|
"name": "Develop Content",
|
|
"description": "Create or acquire text, images, and other content",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA06.md",
|
|
"external_id": "TA06"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--9fa23518-a7a6-401b-88ef-b2e6de1e458e"
|
|
],
|
|
"x_mitre_shortname": "develop-content"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--c7e154be-29c7-4ec9-b00b-15b271a53f4d",
|
|
"created_by_ref": "identity--7f62f365-29df-4b1b-86fa-2b995a40608e",
|
|
"created": "2022-07-01T16:24:14.444659Z",
|
|
"modified": "2022-07-01T16:24:14.444659Z",
|
|
"name": "Select Channels and Affordances",
|
|
"description": "Selecting platforms and affordances assesses which online or offline platforms and their associated affordances maximize an influence operation\u2019s ability to reach its target audience. To select the most appropriate platform(s), an operation may assess the technological affordances including platform algorithms, terms of service, permitted content types, or other attributes that determine platform usability and accessibility. Selecting platforms includes both choosing platforms on which the operation will publish its own content and platforms on which the operation will attempt to restrict adversarial content.",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA07.md",
|
|
"external_id": "TA07"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f3bf84d6-ecfd-48cd-9e95-06af4d596881"
|
|
],
|
|
"x_mitre_shortname": "select-channels-and-affordances"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--dab5cc61-8a53-42a6-ad76-7725680f1376",
|
|
"created_by_ref": "identity--dcf56245-d59e-437a-874f-4bcc0b059b09",
|
|
"created": "2022-07-01T16:24:14.44589Z",
|
|
"modified": "2022-07-01T16:24:14.44589Z",
|
|
"name": "Conduct Pump Priming",
|
|
"description": "Release content on a targetted small scale, prior to general release, including releasing seed. Used for preparation before broader release, and as message honing. Used for preparation before broader release, and as message honing. ",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA08.md",
|
|
"external_id": "TA08"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--5f2315c1-ea35-4420-adb7-34eb4b88a3be"
|
|
],
|
|
"x_mitre_shortname": "conduct-pump-priming"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--95a8ea59-bcd3-45fb-88a2-e1ec86707eba",
|
|
"created_by_ref": "identity--8533a529-7d9e-4544-9274-a6cbc3a637c9",
|
|
"created": "2022-07-01T16:24:14.447006Z",
|
|
"modified": "2022-07-01T16:24:14.447006Z",
|
|
"name": "Deliver Content",
|
|
"description": "Release content to general public or larger population",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA09.md",
|
|
"external_id": "TA09"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--990caa7c-649a-46e6-a90c-960ce4eb32a1"
|
|
],
|
|
"x_mitre_shortname": "deliver-content"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--b946c4ec-838c-4328-8529-b1e0bbb9f958",
|
|
"created_by_ref": "identity--59f7f1cc-b876-4272-ad4f-d6b8a71752e4",
|
|
"created": "2022-07-01T16:24:14.44817Z",
|
|
"modified": "2022-07-01T16:24:14.44817Z",
|
|
"name": "Drive Offline Activity",
|
|
"description": "Move incident/campaign from online to offline. Encouraging users to move from the platform on which they initially viewed operation content and engage in the physical information space or offline world. This may include operation-aligned rallies or protests, radio, newspaper, or billboards. An influence operation may drive to physical forums to diversify its information channels and facilitate spaces where the target audience can engage with both operation content and like-minded individuals offline. ",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA10.md",
|
|
"external_id": "TA10"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f2592bf3-125a-46b2-8416-50725b38fe2b"
|
|
],
|
|
"x_mitre_shortname": "drive-offline-activity"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--2cfa7033-a678-4aa0-bee5-bf48ce833e42",
|
|
"created_by_ref": "identity--63341021-66cf-411c-99e7-40984d03e2a7",
|
|
"created": "2022-07-01T16:24:14.449593Z",
|
|
"modified": "2022-07-01T16:24:14.449593Z",
|
|
"name": "Persist in the Information Environment",
|
|
"description": "Persist in the Information Space refers to taking measures that allow an operation to maintain its presence and avoid takedown by an external entity. Techniques in Persist in the Information Space help campaigns operate without detection and appear legitimate to the target audience and platform monitoring services. Influence operations on social media often persist online by varying the type of information assets and platforms used throughout the campaign.",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA11.md",
|
|
"external_id": "TA11"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f3a4ac37-2d87-49ef-af2f-e6ab749bb012"
|
|
],
|
|
"x_mitre_shortname": "persist-in-the-information-environment"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--e6145745-2127-4a3e-8dda-23a2464a4f49",
|
|
"created_by_ref": "identity--7922d877-dfe3-4b41-9870-6f55fd1adabe",
|
|
"created": "2022-07-01T16:24:14.451171Z",
|
|
"modified": "2022-07-01T16:24:14.451171Z",
|
|
"name": "Assess Effectiveness",
|
|
"description": "Assess effectiveness of action, for use in future plans ",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA12.md",
|
|
"external_id": "TA12"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--86ad2f9c-f10a-4a48-b80f-e36e2414394c"
|
|
],
|
|
"x_mitre_shortname": "assess-effectiveness"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--19a9fbb5-f208-4d04-bc3d-cf4d9ab40472",
|
|
"created_by_ref": "identity--71e97e7d-839d-461a-942c-1617627d04be",
|
|
"created": "2022-07-01T16:24:14.452392Z",
|
|
"modified": "2022-07-01T16:24:14.452392Z",
|
|
"name": "Target Audience Analysis",
|
|
"description": "Identifying and analyzing the target audience examines target audience member locations, political affiliations, financial situations, and other attributes that an influence operation may incorporate into its messaging strategy. During this tactic, influence operations may also identify existing similarities and differences between target audience members to unite like groups and divide opposing groups. Identifying and analyzing target audience members allows influence operations to tailor operation strategy and content to their analysis. ",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA13.md",
|
|
"external_id": "TA13"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--745200c7-2af1-4c06-a7f0-08a9275a02ae"
|
|
],
|
|
"x_mitre_shortname": "target-audience-analysis"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--ba67bdf7-9c5e-4c41-9233-42152146073e",
|
|
"created_by_ref": "identity--c22d45e9-e434-48bb-abc7-dd6445c64cfe",
|
|
"created": "2022-07-01T16:24:14.453795Z",
|
|
"modified": "2022-07-01T16:24:14.453795Z",
|
|
"name": "Develop Narratives",
|
|
"description": "The promotion of beneficial master narratives is perhaps the most effective method for achieving long-term strategic narrative dominance. From a \"\"whole of society\"\" perspective the promotion of the society's core master narratives should occupy a central strategic role. From a misinformation campaign / cognitive security perpectve the tactics around master narratives center more precisely on the day-to-day promotion and reinforcement of this messaging. In other words, beneficial, high-coverage master narratives are a central strategic goal and their promotion constitutes an ongoing tactical struggle carried out at a whole-of-society level. Tactically, their promotion covers a broad spectrum of activities both on- and offline.",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA14.md",
|
|
"external_id": "TA14"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--0591e14d-04ac-4dfd-999c-eaa2b80b44a4"
|
|
],
|
|
"x_mitre_shortname": "develop-narratives"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--415417fd-38b3-4e8e-81aa-2888e7d14948",
|
|
"created_by_ref": "identity--e535e417-4fa5-42b2-aaab-0c6f4237bd49",
|
|
"created": "2022-07-01T16:24:14.455081Z",
|
|
"modified": "2022-07-01T16:24:14.455081Z",
|
|
"name": "Establish Social Assets",
|
|
"description": "Establishing information assets generates messaging tools, including social media accounts, operation personnel, and organizations, including directly and indirectly managed assets. For assets under their direct control, the operation can add, change, or remove these assets at will. \nEstablishing information assets allows an influence operation to promote messaging directly to the target audience without navigating through external entities. Many online influence operations create or compromise social media accounts as a primary vector of information dissemination.",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA15.md",
|
|
"external_id": "TA15"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--701428fc-dbb4-40ac-9aa5-a75c75178ab2"
|
|
],
|
|
"x_mitre_shortname": "establish-social-assets"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--4c6114bf-663b-4da8-81fe-ef35653c2de4",
|
|
"created_by_ref": "identity--b805f585-4ea3-4805-8329-71092f5be423",
|
|
"created": "2022-07-01T16:24:14.456229Z",
|
|
"modified": "2022-07-01T16:24:14.456229Z",
|
|
"name": "Establish Legitimacy",
|
|
"description": "Establish assets that create trust",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA16.md",
|
|
"external_id": "TA16"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--60597e0d-6de0-44ee-bc63-4c8814adb15b"
|
|
],
|
|
"x_mitre_shortname": "establish-legitimacy"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--c37c514d-52b9-4ff2-83c5-0f65719439a0",
|
|
"created_by_ref": "identity--9343b339-e89f-4940-925d-bc1922f816c5",
|
|
"created": "2022-07-01T16:24:14.457356Z",
|
|
"modified": "2022-07-01T16:24:14.457356Z",
|
|
"name": "Maximize Exposure",
|
|
"description": "Maximize exposure of the target audience to incident/campaign content via flooding, amplifying, and cross-posting.",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA17.md",
|
|
"external_id": "TA17"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c1ffdf22-92b7-46b8-996d-372395922f8b"
|
|
],
|
|
"x_mitre_shortname": "maximize-exposure"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--106f515b-06d4-42cb-839a-7fc272267917",
|
|
"created_by_ref": "identity--4d433e64-2ef7-4c87-9268-1ac6d59453c0",
|
|
"created": "2022-07-01T16:24:14.458478Z",
|
|
"modified": "2022-07-01T16:24:14.458478Z",
|
|
"name": "Drive Online Harms",
|
|
"description": "Actions taken by an influence operation to harm their opponents in online spaces through harassment, suppression, releasing private information, and controlling the information space through offensive cyberspace operations. ",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA18.md",
|
|
"external_id": "TA18"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--b2694fc8-1125-4e80-b20d-bf2fe8514d2d"
|
|
],
|
|
"x_mitre_shortname": "drive-online-harms"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--5f08e62c-bab6-4bd1-9005-9d48fd82cbab",
|
|
"created_by_ref": "identity--27307333-299b-481a-b7db-b666cf1879c6",
|
|
"created": "2022-07-01T16:24:14.460274Z",
|
|
"modified": "2022-07-01T16:24:14.460274Z",
|
|
"name": "Determine Target Audiences",
|
|
"description": "TA01",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "plan-strategy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0073.md",
|
|
"external_id": "T0073"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--e4e789bf-173e-4bb0-9284-cd5b04835783"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--df4a8d44-11d1-43ea-b0d2-9aa152a293ed",
|
|
"created_by_ref": "identity--5894e75b-bc5c-46f3-9371-acd18fa603ec",
|
|
"created": "2022-07-01T16:24:14.461463Z",
|
|
"modified": "2022-07-01T16:24:14.461463Z",
|
|
"name": "Determine Strategic Ends",
|
|
"description": "TA01",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "plan-strategy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0074.md",
|
|
"external_id": "T0074"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--907e8170-1ba8-4270-9c89-5fae201cffea"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--d79d165a-5122-4b7f-95e3-c20b98a2849e",
|
|
"created_by_ref": "identity--a65c0253-4f25-4128-9615-7465157a9846",
|
|
"created": "2022-07-01T16:24:14.462393Z",
|
|
"modified": "2022-07-01T16:24:14.462393Z",
|
|
"name": "Map Target Audience Information Environment",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0080.md",
|
|
"external_id": "T0080"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--4e7952f9-5c32-4785-b2ab-a6d8bbb7cfd7"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--92fd7ece-b25d-43e4-9ab2-3a89aa7470df",
|
|
"created_by_ref": "identity--3bb8a9ea-7b25-4a61-9aec-85d57c6eb084",
|
|
"created": "2022-07-01T16:24:14.463337Z",
|
|
"modified": "2022-07-01T16:24:14.463337Z",
|
|
"name": "Identify Social and Technical Vulnerabilities",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0081.md",
|
|
"external_id": "T0081"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--b2c49641-eb07-4f26-8061-240b458191ab"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--820d8a0a-d1c5-4169-972a-4a421c6628e1",
|
|
"created_by_ref": "identity--068d67a1-8e32-49e3-9274-953360fb8c72",
|
|
"created": "2022-07-01T16:24:14.464255Z",
|
|
"modified": "2022-07-01T16:24:14.464255Z",
|
|
"name": "Develop New Narratives",
|
|
"description": "TA14",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-narratives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0082.md",
|
|
"external_id": "T0082"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--e6c66eeb-ea25-43b8-9940-7495e3da73e4"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--c8b9088e-f0e0-4410-9d35-dce9aea109e3",
|
|
"created_by_ref": "identity--ac595ca8-7df5-431b-808b-72c130c1b18e",
|
|
"created": "2022-07-01T16:24:14.46517Z",
|
|
"modified": "2022-07-01T16:24:14.46517Z",
|
|
"name": "Integrate Target Audience Vulnerabilities into Narrative",
|
|
"description": "TA14",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-narratives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0083.md",
|
|
"external_id": "T0083"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--3455c4b3-95fd-4abd-bdee-1c1441ce9b85"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--e030dc3f-1b53-48d3-a9ef-23b494f24a87",
|
|
"created_by_ref": "identity--1cd7a35a-e618-4266-8d04-470b5699d0cb",
|
|
"created": "2022-07-01T16:24:14.466285Z",
|
|
"modified": "2022-07-01T16:24:14.466285Z",
|
|
"name": "Reuse Existing Content",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0084.md",
|
|
"external_id": "T0084"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--6d904313-21b2-4ad3-8616-e6458b1d5a2e"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--8de1d7ac-1b1d-4be1-bf4c-273d63bef236",
|
|
"created_by_ref": "identity--a168776a-f449-41a5-a970-c38932c7c93c",
|
|
"created": "2022-07-01T16:24:14.468029Z",
|
|
"modified": "2022-07-01T16:24:14.468029Z",
|
|
"name": "Develop Text-based Content",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0085.md",
|
|
"external_id": "T0085"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--12dfe230-9345-44e1-975e-1ea27a385ea5"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--6e5017af-f5de-428d-b421-3fff2c6f75ed",
|
|
"created_by_ref": "identity--df32d6ed-6af3-4089-b25c-f0023282e2ea",
|
|
"created": "2022-07-01T16:24:14.470187Z",
|
|
"modified": "2022-07-01T16:24:14.470187Z",
|
|
"name": "Develop Image-based Content",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0086.md",
|
|
"external_id": "T0086"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--cf929bb9-3578-41bf-99ac-a4f13b0bea43"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--2f4c39f6-d4af-4e11-a997-9ef48c362e17",
|
|
"created_by_ref": "identity--eadbd218-6f53-4dfb-bf17-f7988e8fac92",
|
|
"created": "2022-07-01T16:24:14.471436Z",
|
|
"modified": "2022-07-01T16:24:14.471436Z",
|
|
"name": "Develop Video-based Content",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0087.md",
|
|
"external_id": "T0087"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--078c35f3-4cff-4e4c-ad57-ef0666658a26"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--af9cd469-0123-4a2a-a77d-000d01b1c4c5",
|
|
"created_by_ref": "identity--48a5b24b-b2de-4ad3-8ce5-bb4d36949790",
|
|
"created": "2022-07-01T16:24:14.472427Z",
|
|
"modified": "2022-07-01T16:24:14.472427Z",
|
|
"name": "Develop Audio-based Content",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0088.md",
|
|
"external_id": "T0088"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c62fcd7e-5c3a-456b-8c32-dfa81c8a1129"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--c6616434-8111-4342-b825-b1007900a9db",
|
|
"created_by_ref": "identity--cbfd24f7-ef88-405d-a3ff-c59b7e296b5e",
|
|
"created": "2022-07-01T16:24:14.473415Z",
|
|
"modified": "2022-07-01T16:24:14.473415Z",
|
|
"name": "Obtain Private Documents",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0089.md",
|
|
"external_id": "T0089"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c40d92b2-9b6d-422e-8fdb-b7deed9fb807"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--b2413c39-7f40-48b0-b22e-f8591bbd40e6",
|
|
"created_by_ref": "identity--3e623f11-ecf5-43cc-b425-aad3f116e9e9",
|
|
"created": "2022-07-01T16:24:14.474416Z",
|
|
"modified": "2022-07-01T16:24:14.474416Z",
|
|
"name": "Create Inauthentic Accounts",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0090.md",
|
|
"external_id": "T0090"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f60a407c-4d9f-406a-980d-8de7519fe897"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--4f89cab1-bff8-427e-926d-b941863553ec",
|
|
"created_by_ref": "identity--e8c42977-1372-435d-929c-b04bfa2db7dd",
|
|
"created": "2022-07-01T16:24:14.475564Z",
|
|
"modified": "2022-07-01T16:24:14.475564Z",
|
|
"name": "Recruit bad actors",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0091.md",
|
|
"external_id": "T0091"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--b81d5e29-9475-4528-a6e7-93d6680b1d45"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--1ff91dc0-b242-4772-bd06-be4b6f61494b",
|
|
"created_by_ref": "identity--255a5cc4-4aff-4b40-9c7a-81db68736898",
|
|
"created": "2022-07-01T16:24:14.476685Z",
|
|
"modified": "2022-07-01T16:24:14.476685Z",
|
|
"name": "Build Network",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0092.md",
|
|
"external_id": "T0092"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a63852a9-3bd3-4485-84b0-0b83176143c5"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--d86144e8-a1c6-4cb9-b9fb-7c374bc7d0b3",
|
|
"created_by_ref": "identity--cd487c42-b790-48c2-843d-732f59b2e225",
|
|
"created": "2022-07-01T16:24:14.477696Z",
|
|
"modified": "2022-07-01T16:24:14.477696Z",
|
|
"name": "Acquire/ recruit Network",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0093.md",
|
|
"external_id": "T0093"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a217ace8-6a0c-48e2-b597-081a5a112158"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--0f24fc67-a682-4a06-8f34-8fe6f3c6532d",
|
|
"created_by_ref": "identity--33146be0-d03a-45f9-b8bb-95b536c40ed5",
|
|
"created": "2022-07-01T16:24:14.478801Z",
|
|
"modified": "2022-07-01T16:24:14.478801Z",
|
|
"name": "Infiltrate Existing Networks",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0094.md",
|
|
"external_id": "T0094"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--dfc2461f-1a29-42cc-a758-1cb1d1c3f86f"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--c0ca6d1c-6be5-49d6-8d80-b7325bd57512",
|
|
"created_by_ref": "identity--da0851c8-6dec-4ae9-ba5e-00cd033fa985",
|
|
"created": "2022-07-01T16:24:14.479813Z",
|
|
"modified": "2022-07-01T16:24:14.479813Z",
|
|
"name": "Develop Owned Media Assets",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0095.md",
|
|
"external_id": "T0095"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--2a25897b-44b6-4cf4-8f1d-e099f5d76ef7"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--537fc870-dd6e-4c78-a85e-d2675cb85272",
|
|
"created_by_ref": "identity--e12bbda8-3427-4bb1-a3a5-f22ee394a02f",
|
|
"created": "2022-07-01T16:24:14.480871Z",
|
|
"modified": "2022-07-01T16:24:14.480871Z",
|
|
"name": "Leverage Content Farm",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0096.md",
|
|
"external_id": "T0096"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--59a99022-a19d-4d3e-8490-227017b97e8c"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--7f8a7619-22c1-4a7a-85cd-5124f9f4b7d2",
|
|
"created_by_ref": "identity--7a6a5107-0b80-4663-ba46-51a1069f8ca8",
|
|
"created": "2022-07-01T16:24:14.481994Z",
|
|
"modified": "2022-07-01T16:24:14.481994Z",
|
|
"name": "Create personas",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0097.md",
|
|
"external_id": "T0097"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--2d85e55e-1bd3-4055-8d05-2c9cf5ed9809"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--11312b5a-8e17-48d1-b38b-5166f2b1a0f4",
|
|
"created_by_ref": "identity--9b5ec443-0df3-445f-99bf-949a271b742c",
|
|
"created": "2022-07-01T16:24:14.483453Z",
|
|
"modified": "2022-07-01T16:24:14.483453Z",
|
|
"name": "Establish Inauthentic News Sites",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0098.md",
|
|
"external_id": "T0098"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--fedb8cd3-f4b6-4bc2-b972-f95859c5db0a"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--1b12ec34-04cf-4bd1-b0ef-65ec98369792",
|
|
"created_by_ref": "identity--4c9f2af1-dc6d-4054-9a31-d58aaf0d23fc",
|
|
"created": "2022-07-01T16:24:14.484756Z",
|
|
"modified": "2022-07-01T16:24:14.484756Z",
|
|
"name": "Prepare Assets Impersonating Legitimate Entities",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0099.md",
|
|
"external_id": "T0099"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--3dcb1243-22ca-43ea-87ba-aa1cc807eaff"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--0cc5f7d7-f316-407a-9e15-fb2434c99c3b",
|
|
"created_by_ref": "identity--f2fde7e7-1933-427a-a583-e0b59b31a3e1",
|
|
"created": "2022-07-01T16:24:14.485847Z",
|
|
"modified": "2022-07-01T16:24:14.485847Z",
|
|
"name": "Co-opt Trusted Sources",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0100.md",
|
|
"external_id": "T0100"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--cc52949e-a6c8-4022-8842-b21b3329c46d"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--99db72ab-99a2-434d-be3e-fcdd7456e6da",
|
|
"created_by_ref": "identity--ea479f5a-151e-476e-aa27-92fdc16e9c23",
|
|
"created": "2022-07-01T16:24:14.486882Z",
|
|
"modified": "2022-07-01T16:24:14.486882Z",
|
|
"name": "Create Localized Content",
|
|
"description": "TA05",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "microtarget"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0101.md",
|
|
"external_id": "T0101"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--654187d5-7333-4e0a-b727-a3fcc7133b90"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--2cb6e264-c3cf-47ab-85e7-09ed366fd0b4",
|
|
"created_by_ref": "identity--50e8492f-5f86-4e58-9bd7-fa65357526bb",
|
|
"created": "2022-07-01T16:24:14.487868Z",
|
|
"modified": "2022-07-01T16:24:14.487868Z",
|
|
"name": "Leverage Echo Chambers/Filter Bubbles",
|
|
"description": "TA05",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "microtarget"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0102.md",
|
|
"external_id": "T0102"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--7066cf1d-f2a0-4903-92d4-7dc26e08a6f7"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--06c9119a-435f-40b8-b418-91e8c877efe2",
|
|
"created_by_ref": "identity--4a37e7dd-f3dc-4b57-a5c9-75f8e0936278",
|
|
"created": "2022-07-01T16:24:14.48885Z",
|
|
"modified": "2022-07-01T16:24:14.48885Z",
|
|
"name": "Livestream",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0103.md",
|
|
"external_id": "T0103"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--fb60102d-acd3-42c3-8aea-af75d6e48a6a"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--168e5294-e0d4-4e93-abb1-9b9749ae06bf",
|
|
"created_by_ref": "identity--ddadf64e-29fb-46d0-9107-0add7e0654d1",
|
|
"created": "2022-07-01T16:24:14.489933Z",
|
|
"modified": "2022-07-01T16:24:14.489933Z",
|
|
"name": "Social Networks",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0104.md",
|
|
"external_id": "T0104"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--42f820b8-98f0-4c53-b78c-c4e585d1d064"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--3f63b868-f5f3-4491-b156-8d023a9cece8",
|
|
"created_by_ref": "identity--ec311699-8074-43ff-a976-cdde5695c655",
|
|
"created": "2022-07-01T16:24:14.49091Z",
|
|
"modified": "2022-07-01T16:24:14.49091Z",
|
|
"name": "Media Sharing Networks",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0105.md",
|
|
"external_id": "T0105"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--2e75e344-d447-4897-ba23-48af01b85b42"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--de608f3a-af0c-4117-a6ce-78080a2122d8",
|
|
"created_by_ref": "identity--97c59fa2-d9a9-43bc-a9ea-a842ed6f27ed",
|
|
"created": "2022-07-01T16:24:14.491884Z",
|
|
"modified": "2022-07-01T16:24:14.491884Z",
|
|
"name": "Discussion Forums",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0106.md",
|
|
"external_id": "T0106"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--31d2654f-43b0-4ba9-8aac-c5e64a4a39ac"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--051a61da-3aad-4f2f-9370-bc293f732d17",
|
|
"created_by_ref": "identity--215a8b86-a5fc-4743-831f-414c2f2f62fc",
|
|
"created": "2022-07-01T16:24:14.492857Z",
|
|
"modified": "2022-07-01T16:24:14.492857Z",
|
|
"name": "Bookmarking and Content Curation",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0107.md",
|
|
"external_id": "T0107"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f48bbd9a-ab6f-4dbe-b230-42297747aca2"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--3de8dc56-6ecf-40e9-bb5c-fe9332ba0228",
|
|
"created_by_ref": "identity--58943fbc-2fee-4765-9374-cacf8d71cae1",
|
|
"created": "2022-07-01T16:24:14.49383Z",
|
|
"modified": "2022-07-01T16:24:14.49383Z",
|
|
"name": "Blogging and Publishing Networks",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0108.md",
|
|
"external_id": "T0108"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--44b4b8c1-33b5-4cfa-9f6e-2f4b2462d3d3"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--33fa0f18-22c5-46e6-a2de-422b63dc1fad",
|
|
"created_by_ref": "identity--ea7c9ee7-84bf-4818-a6ba-8e160c64c1be",
|
|
"created": "2022-07-01T16:24:14.494801Z",
|
|
"modified": "2022-07-01T16:24:14.494801Z",
|
|
"name": "Consumer Review Networks",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0109.md",
|
|
"external_id": "T0109"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--07428d13-3562-40c5-ace4-5c50089fb547"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--36cb20fd-e682-49ce-be89-311b4f42357b",
|
|
"created_by_ref": "identity--ebb675d2-bb0c-455e-a501-0d6cb6557246",
|
|
"created": "2022-07-01T16:24:14.495788Z",
|
|
"modified": "2022-07-01T16:24:14.495788Z",
|
|
"name": "Formal Diplomatic Channels",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0110.md",
|
|
"external_id": "T0110"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--0b44c0b5-cd03-4211-a388-fdc5cfce37db"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--3f646f9a-2c2d-45a8-a9a0-2e9ff7426c3c",
|
|
"created_by_ref": "identity--7ee43c4e-6abc-4acb-aeb1-415ff3fae83d",
|
|
"created": "2022-07-01T16:24:14.496768Z",
|
|
"modified": "2022-07-01T16:24:14.496768Z",
|
|
"name": "Traditional Media",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0111.md",
|
|
"external_id": "T0111"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--34137ead-d4b9-4b1d-8c88-49ec8ef0e030"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--00bbca3b-174b-4ec4-996e-435ed6234c54",
|
|
"created_by_ref": "identity--95ce798f-15c9-4353-b2d9-53b17ad302b3",
|
|
"created": "2022-07-01T16:24:14.497869Z",
|
|
"modified": "2022-07-01T16:24:14.497869Z",
|
|
"name": "Email",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0112.md",
|
|
"external_id": "T0112"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--8d54974d-5f97-41b5-b51c-b58abc326af7"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--452f8735-84e8-49f0-a364-c610c56a139d",
|
|
"created_by_ref": "identity--60a17762-ba9b-4965-be21-e38eccee29ac",
|
|
"created": "2022-07-01T16:24:14.498884Z",
|
|
"modified": "2022-07-01T16:24:14.498884Z",
|
|
"name": "Employ Commercial Analytic Firms",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "conduct-pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0113.md",
|
|
"external_id": "T0113"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--931227da-5a37-4951-93ff-c1e7f61e599c"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--80db4685-548d-486f-bfaf-a77de967f07b",
|
|
"created_by_ref": "identity--977b77e2-058c-4ad0-94ec-62a9be3441e9",
|
|
"created": "2022-07-01T16:24:14.500488Z",
|
|
"modified": "2022-07-01T16:24:14.500488Z",
|
|
"name": "Deliver Ads",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "deliver-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0114.md",
|
|
"external_id": "T0114"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a093ac3f-1f0c-414f-b36a-dda4371b01ac"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--713ed012-14e4-429d-aa83-23ac6a1cc9f8",
|
|
"created_by_ref": "identity--84f48ff2-36ba-4057-8841-f2f9cd74d488",
|
|
"created": "2022-07-01T16:24:14.501903Z",
|
|
"modified": "2022-07-01T16:24:14.501903Z",
|
|
"name": "Post Content",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "deliver-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0115.md",
|
|
"external_id": "T0115"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--525c8f1b-ca5c-47e1-85f0-e54d2e6833bc"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--131e344a-a72a-4a8d-8d4f-3981f51d3131",
|
|
"created_by_ref": "identity--ae7af8f0-a6af-4e14-84c5-ea5e3db4e82c",
|
|
"created": "2022-07-01T16:24:14.502924Z",
|
|
"modified": "2022-07-01T16:24:14.502924Z",
|
|
"name": "Comment or Reply on Content",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "deliver-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0116.md",
|
|
"external_id": "T0116"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1ab0274a-2f0a-43b2-b39c-40e99b6ef113"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--c8806650-d868-4a42-ad6e-6b709a20196e",
|
|
"created_by_ref": "identity--dcb60397-c6ee-454d-88ad-b0c3352ada54",
|
|
"created": "2022-07-01T16:24:14.50396Z",
|
|
"modified": "2022-07-01T16:24:14.50396Z",
|
|
"name": "Attract Traditional Media",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "deliver-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0117.md",
|
|
"external_id": "T0117"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a1484ae9-f94d-4c7d-a878-aac74dfa438d"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--406a8bcd-a174-4ad0-8d85-078d9214583e",
|
|
"created_by_ref": "identity--b7099c34-b712-470a-8848-1f5fc0b95f10",
|
|
"created": "2022-07-01T16:24:14.504933Z",
|
|
"modified": "2022-07-01T16:24:14.504933Z",
|
|
"name": "Amplify Existing Narrative",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0118.md",
|
|
"external_id": "T0118"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--d9cf036c-8c82-45b4-9b43-a57dddcb4451"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--37628bcc-2d27-4206-91bc-3e1932d82c24",
|
|
"created_by_ref": "identity--45aac078-8e2f-4253-a149-dbf293323e24",
|
|
"created": "2022-07-01T16:24:14.505908Z",
|
|
"modified": "2022-07-01T16:24:14.505908Z",
|
|
"name": "Cross-Posting",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0119.md",
|
|
"external_id": "T0119"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--df0f38da-a10a-4f1e-aaee-2bfb485bb3c7"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--e48d695c-2d13-447e-8ceb-443170af5c0b",
|
|
"created_by_ref": "identity--397aadf4-5ac2-42de-a4db-3164f0e0da3a",
|
|
"created": "2022-07-01T16:24:14.506857Z",
|
|
"modified": "2022-07-01T16:24:14.506857Z",
|
|
"name": "Incentivize Sharing",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0120.md",
|
|
"external_id": "T0120"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--cf84ff8b-0b37-4ef8-b974-10f672b45b7c"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--1dbe26f2-3d32-4874-a8be-857b9ce82484",
|
|
"created_by_ref": "identity--5db4b618-b7a5-48eb-a0a5-1977fd858e4c",
|
|
"created": "2022-07-01T16:24:14.507818Z",
|
|
"modified": "2022-07-01T16:24:14.507818Z",
|
|
"name": "Manipulate Platform Algorithm",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0121.md",
|
|
"external_id": "T0121"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--b673392e-a037-4f80-a59f-5262a1107006"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--a12da42d-6843-4b8c-b231-a9437ef602ca",
|
|
"created_by_ref": "identity--95490c8c-36e1-42e2-ab99-403fabaca957",
|
|
"created": "2022-07-01T16:24:14.50877Z",
|
|
"modified": "2022-07-01T16:24:14.50877Z",
|
|
"name": "Direct Users to Alternative Platforms",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0122.md",
|
|
"external_id": "T0122"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--3300dfbf-efc1-4276-9e5f-2bb065c968bd"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--14242459-09b5-49fd-a9d4-8bef7d08b44b",
|
|
"created_by_ref": "identity--c765b10b-6c95-43cc-b3a0-16204cb67813",
|
|
"created": "2022-07-01T16:24:14.509722Z",
|
|
"modified": "2022-07-01T16:24:14.509722Z",
|
|
"name": "Control Information Environment through Offensive Cyberspace Operations",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0123.md",
|
|
"external_id": "T0123"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--51903a54-9405-4b44-94bb-afd007b56cf1"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--9fc957a5-1521-4812-9a9b-3586c3221d0b",
|
|
"created_by_ref": "identity--5e8ce124-c570-4587-92b2-bddc4ecc556a",
|
|
"created": "2022-07-01T16:24:14.510675Z",
|
|
"modified": "2022-07-01T16:24:14.510675Z",
|
|
"name": "Suppress Opposition",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0124.md",
|
|
"external_id": "T0124"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--01b6f196-971b-4b82-b654-ff210c62b3dc"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--292fe986-f817-488c-ac94-eb48177d0db1",
|
|
"created_by_ref": "identity--4a47880a-4ac1-47ba-af79-6e75948d6bd0",
|
|
"created": "2022-07-01T16:24:14.51163Z",
|
|
"modified": "2022-07-01T16:24:14.51163Z",
|
|
"name": "Platform Filtering",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0125.md",
|
|
"external_id": "T0125"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--bebf4c01-217b-4c58-8696-8ce2f273fc27"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--3b07ad39-bdef-48e4-80a5-586f11b7c468",
|
|
"created_by_ref": "identity--df5a5eaf-8e3f-4e72-91df-e9849c38b3f7",
|
|
"created": "2022-07-01T16:24:14.512595Z",
|
|
"modified": "2022-07-01T16:24:14.512595Z",
|
|
"name": "Encourage Attendance at Events",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0126.md",
|
|
"external_id": "T0126"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--67209065-11b9-45ac-9ec8-9ee7585ea7a6"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--0f1aa09f-b4a4-4359-b59e-f3ecceed1a9f",
|
|
"created_by_ref": "identity--cea57038-c3ef-4fad-8216-86803b766001",
|
|
"created": "2022-07-01T16:24:14.513508Z",
|
|
"modified": "2022-07-01T16:24:14.513508Z",
|
|
"name": "Physical Violence",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0127.md",
|
|
"external_id": "T0127"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--40d6dfca-f7d3-4e75-80df-67e1f49e25df"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--db1568df-528a-44e2-8e39-4431a36fd76a",
|
|
"created_by_ref": "identity--2918b165-ff87-4fc2-beff-accbc9024b01",
|
|
"created": "2022-07-01T16:24:14.514608Z",
|
|
"modified": "2022-07-01T16:24:14.514608Z",
|
|
"name": "Exploit TOS/Content Moderation",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0131.md",
|
|
"external_id": "T0131"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c7f478e2-15fb-4acf-8c16-e09381852ec5"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--40ca8d02-c504-4a4d-99ed-b16241eda8f8",
|
|
"created_by_ref": "identity--abab508a-fcc2-4315-b542-e8d563153f66",
|
|
"created": "2022-07-01T16:24:14.515603Z",
|
|
"modified": "2022-07-01T16:24:14.515603Z",
|
|
"name": "Measure Performance",
|
|
"description": "TA12",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "assess-effectiveness"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0132.md",
|
|
"external_id": "T0132"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--57f5ed0d-e05f-48a9-abda-2c173503905e"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--bc787e0e-dc73-4b37-bb15-6cad8bf69346",
|
|
"created_by_ref": "identity--1f5bd77c-c66f-4ba1-90e0-91461551cb47",
|
|
"created": "2022-07-01T16:24:14.516778Z",
|
|
"modified": "2022-07-01T16:24:14.516778Z",
|
|
"name": "Measure Effectiveness",
|
|
"description": "TA12",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "assess-effectiveness"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0133.md",
|
|
"external_id": "T0133"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--d1c2bd31-7592-4c46-8c1b-026accd15caf"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--2bdfc4db-af0d-443b-8e95-ed7b14180404",
|
|
"created_by_ref": "identity--31557bcc-8002-44d5-86e7-60143178d055",
|
|
"created": "2022-07-01T16:24:14.518656Z",
|
|
"modified": "2022-07-01T16:24:14.518656Z",
|
|
"name": "Measure Effectiveness Indicators (or KPIs)",
|
|
"description": "TA12",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "assess-effectiveness"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0134.md",
|
|
"external_id": "T0134"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c0f3fe6e-0629-48d2-83ca-c889f932fda5"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--e12f7624-95c7-44a5-8c63-8492c61334b7",
|
|
"created_by_ref": "identity--ce66cb37-7003-422b-bffd-0671b529b982",
|
|
"created": "2022-07-01T16:24:14.519906Z",
|
|
"modified": "2022-07-01T16:24:14.519906Z",
|
|
"name": "Facilitate State Propaganda",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "plan-objectives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0002.md",
|
|
"external_id": "T0002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--b276dc95-02d4-4038-9ec9-6d72dae9cec6"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--af057f72-44ae-4fd3-a3b1-838d8de9f29f",
|
|
"created_by_ref": "identity--03ac84b3-2e27-4a1a-96ef-4d9dae84de1f",
|
|
"created": "2022-07-01T16:24:14.521068Z",
|
|
"modified": "2022-07-01T16:24:14.521068Z",
|
|
"name": "Leverage Existing Narratives",
|
|
"description": "TA14",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-narratives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0003.md",
|
|
"external_id": "T0003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--fa98d4d2-cc00-45b9-9ff9-b946e0657a2c"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--36f3bb49-d150-4ea3-8279-6596a4a19370",
|
|
"created_by_ref": "identity--27245209-d724-4438-afd5-42455b23e7f8",
|
|
"created": "2022-07-01T16:24:14.522073Z",
|
|
"modified": "2022-07-01T16:24:14.522073Z",
|
|
"name": "Develop Competing Narratives",
|
|
"description": "TA14",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-narratives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0004.md",
|
|
"external_id": "T0004"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--69eb42e3-de4e-4724-878c-d0833c4d1e46"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--e67f9807-13c7-458a-a0ab-36b3fbb53ad0",
|
|
"created_by_ref": "identity--78916569-acc4-4828-b118-3870af8b9b02",
|
|
"created": "2022-07-01T16:24:14.523084Z",
|
|
"modified": "2022-07-01T16:24:14.523084Z",
|
|
"name": "Create Inauthentic Social Media Pages and Groups",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0007.md",
|
|
"external_id": "T0007"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--e68e6cd5-98a0-4b2c-97b4-95d5e0b6a0af"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--66aebd3c-e983-4fa8-9b1f-8665bb061324",
|
|
"created_by_ref": "identity--93555985-272a-4ce1-947d-11bbf36a61c7",
|
|
"created": "2022-07-01T16:24:14.524077Z",
|
|
"modified": "2022-07-01T16:24:14.524077Z",
|
|
"name": "Create fake experts",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0009.md",
|
|
"external_id": "T0009"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--18b8d32b-3139-4c46-bff4-80e6066e3297"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--e66bad5d-6d6d-46ab-b8e1-8748d828ae57",
|
|
"created_by_ref": "identity--4c505540-eb21-4c3d-a862-193e033e55d8",
|
|
"created": "2022-07-01T16:24:14.525052Z",
|
|
"modified": "2022-07-01T16:24:14.525052Z",
|
|
"name": "Cultivate ignorant agents",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0010.md",
|
|
"external_id": "T0010"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--342a8a59-42f2-468b-a6a1-dd4f1f698754"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ee39f971-738b-433b-8f5a-d8f1366d667a",
|
|
"created_by_ref": "identity--6cabed65-d774-40e5-952f-11983e074ca2",
|
|
"created": "2022-07-01T16:24:14.526023Z",
|
|
"modified": "2022-07-01T16:24:14.526023Z",
|
|
"name": "Compromise legitimate accounts",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0011.md",
|
|
"external_id": "T0011"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--e8bf456e-2012-490c-9f77-968072db1199"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--c84590e4-f502-4868-8808-cf97e96a0987",
|
|
"created_by_ref": "identity--86572e6b-f8f6-4b0c-9863-97ab988e7505",
|
|
"created": "2022-07-01T16:24:14.527022Z",
|
|
"modified": "2022-07-01T16:24:14.527022Z",
|
|
"name": "Create inauthentic websites",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0013.md",
|
|
"external_id": "T0013"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f06a143a-e314-40f8-91f3-e5e9f56d0892"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--408d45af-4dc6-4720-b700-6381176927c0",
|
|
"created_by_ref": "identity--a9695c30-f4e2-4926-a8c9-687378347281",
|
|
"created": "2022-07-01T16:24:14.528005Z",
|
|
"modified": "2022-07-01T16:24:14.528005Z",
|
|
"name": "Prepare fundraising campaigns",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0014.md",
|
|
"external_id": "T0014"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--65755537-9562-48e6-a509-7801af9c2bb7"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--dff9e0f0-08dd-42ec-bdaa-056154240101",
|
|
"created_by_ref": "identity--4ec39702-c9ea-4a8c-8e0a-6b36ae38d287",
|
|
"created": "2022-07-01T16:24:14.528978Z",
|
|
"modified": "2022-07-01T16:24:14.528978Z",
|
|
"name": "Create hashtags and search artifacts",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0015.md",
|
|
"external_id": "T0015"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a5bfd20b-920b-46bb-a747-c35dac032c19"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--be6ed16c-6649-4bcf-bcaf-e9b32f1137b1",
|
|
"created_by_ref": "identity--8301272d-8d1b-46de-ad05-cf5c88f0fd7b",
|
|
"created": "2022-07-01T16:24:14.529935Z",
|
|
"modified": "2022-07-01T16:24:14.529935Z",
|
|
"name": "Create Clickbait",
|
|
"description": "TA05",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "microtarget"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0016.md",
|
|
"external_id": "T0016"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--dfe29dd7-f590-4069-ad69-8692ff740fff"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--22648a45-4950-4730-9dc8-22cec9e8dbbd",
|
|
"created_by_ref": "identity--7c382789-c188-4a0a-85d4-11479e860784",
|
|
"created": "2022-07-01T16:24:14.530877Z",
|
|
"modified": "2022-07-01T16:24:14.530877Z",
|
|
"name": "Conduct fundraising",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0017.md",
|
|
"external_id": "T0017"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--13b1183f-8816-48a2-b26c-2e2ed75f5a01"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--daf9ac8f-04b3-4fb7-a4cd-1442649c32f4",
|
|
"created_by_ref": "identity--ee4d34f4-c4a8-4b4e-a06e-da64264a16c3",
|
|
"created": "2022-07-01T16:24:14.531915Z",
|
|
"modified": "2022-07-01T16:24:14.531915Z",
|
|
"name": "Purchase Targeted Advertisements",
|
|
"description": "TA05",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "microtarget"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0018.md",
|
|
"external_id": "T0018"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--750b68be-6f7f-48c3-b443-4d3233b41de3"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--98e44372-510d-44b2-9b03-ef79bf76ed6a",
|
|
"created_by_ref": "identity--7351fa66-6b73-45b3-9196-18e905bcb8e2",
|
|
"created": "2022-07-01T16:24:14.532864Z",
|
|
"modified": "2022-07-01T16:24:14.532864Z",
|
|
"name": "Generate information pollution",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0019.md",
|
|
"external_id": "T0019"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--ad14a770-200d-4b00-b913-718e1b0e530f"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--2e2d4635-1651-49bc-b542-6aa85af1d91f",
|
|
"created_by_ref": "identity--30be0f6f-5832-4df3-9692-8606e7125a61",
|
|
"created": "2022-07-01T16:24:14.534067Z",
|
|
"modified": "2022-07-01T16:24:14.534067Z",
|
|
"name": "Trial content",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "conduct-pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0020.md",
|
|
"external_id": "T0020"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--eec430a2-a6a5-4408-8acf-3d9529fd430e"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--c57174c2-c238-4641-9bf7-ea688942a84f",
|
|
"created_by_ref": "identity--19884075-4712-4d05-894e-c332f40b808a",
|
|
"created": "2022-07-01T16:24:14.535111Z",
|
|
"modified": "2022-07-01T16:24:14.535111Z",
|
|
"name": "Leverage Conspiracy Theory Narratives",
|
|
"description": "TA14",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-narratives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0022.md",
|
|
"external_id": "T0022"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--2045a4ca-f615-477d-a7a0-1f9f4efaf043"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--79e50463-07e2-4d2f-96da-a1b6ebd7c86c",
|
|
"created_by_ref": "identity--d195d36a-1178-4b6a-b42b-b725d05ac422",
|
|
"created": "2022-07-01T16:24:14.536135Z",
|
|
"modified": "2022-07-01T16:24:14.536135Z",
|
|
"name": "Distort facts",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0023.md",
|
|
"external_id": "T0023"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--7176ab9e-b2fa-4d30-bd2e-19dd22c44402"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--bae20020-b607-4c62-9892-e26a1d436b47",
|
|
"created_by_ref": "identity--083b1be6-5a03-4cbf-8e15-73c3afa35105",
|
|
"created": "2022-07-01T16:24:14.537501Z",
|
|
"modified": "2022-07-01T16:24:14.537501Z",
|
|
"name": "Online polls",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0029.md",
|
|
"external_id": "T0029"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--d92cc05d-9e5f-4e18-88fb-a5ab0a8d9f79"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--f69a1d16-a69a-4087-a0aa-bbc8603a7e1e",
|
|
"created_by_ref": "identity--952731c3-9d6e-4d1c-a3fd-b4f9d87fe69e",
|
|
"created": "2022-07-01T16:24:14.538523Z",
|
|
"modified": "2022-07-01T16:24:14.538523Z",
|
|
"name": "Bait legitimate influencers",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "conduct-pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0039 .md",
|
|
"external_id": "T0039 "
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--7d2c28fc-c45b-408e-bfa6-b8417f055016"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--c618f1d0-ad8e-4c32-aca0-867a542f98a0",
|
|
"created_by_ref": "identity--58ac5406-c3c0-41e2-b834-b2ccf3b777b9",
|
|
"created": "2022-07-01T16:24:14.539517Z",
|
|
"modified": "2022-07-01T16:24:14.539517Z",
|
|
"name": "Demand insurmountable proof",
|
|
"description": "TA14",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-narratives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0040.md",
|
|
"external_id": "T0040"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--b903a0dd-59e4-4372-87ff-f98b7b848c29"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--5f9c3638-814a-4886-ad75-ee868a9c337c",
|
|
"created_by_ref": "identity--1b79f87b-9c29-42b9-ab80-ea44b5bbc25c",
|
|
"created": "2022-07-01T16:24:14.540522Z",
|
|
"modified": "2022-07-01T16:24:14.540522Z",
|
|
"name": "Seed Kernel of truth",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "conduct-pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0042.md",
|
|
"external_id": "T0042"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f5fd9ee6-da4c-4b9c-bc17-a388f4ed50b0"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--19f9ad83-fd72-4a6c-aa5f-87c33393e83f",
|
|
"created_by_ref": "identity--58272284-438b-49d1-a013-0b5f1e2f404c",
|
|
"created": "2022-07-01T16:24:14.5415Z",
|
|
"modified": "2022-07-01T16:24:14.5415Z",
|
|
"name": "Chat apps",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0043.md",
|
|
"external_id": "T0043"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--38816591-45a8-4358-a51a-0f428202acb7"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--d4199f15-fca8-4d58-ac99-ac4298890ec6",
|
|
"created_by_ref": "identity--3d454db9-21b6-4f7b-bafa-3b2680e68214",
|
|
"created": "2022-07-01T16:24:14.542473Z",
|
|
"modified": "2022-07-01T16:24:14.542473Z",
|
|
"name": "Seed distortions",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "conduct-pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0044.md",
|
|
"external_id": "T0044"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--73180b64-89d7-4ac4-8d8f-6fbec63eedbf"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--7543b8ab-71e3-4fb6-a7ce-41451873e152",
|
|
"created_by_ref": "identity--9ee8fbd4-2428-462a-bd40-1cb18461348c",
|
|
"created": "2022-07-01T16:24:14.543441Z",
|
|
"modified": "2022-07-01T16:24:14.543441Z",
|
|
"name": "Use fake experts",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "conduct-pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0045.md",
|
|
"external_id": "T0045"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--b633aa91-b4ed-4cbf-b3d5-5d26a99483c5"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--50209d12-7a2f-458d-897b-71328a99b1db",
|
|
"created_by_ref": "identity--303b2742-95a6-4100-ba4d-9c914fcebaf1",
|
|
"created": "2022-07-01T16:24:14.544406Z",
|
|
"modified": "2022-07-01T16:24:14.544406Z",
|
|
"name": "Use Search Engine Optimization",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "conduct-pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0046.md",
|
|
"external_id": "T0046"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1fe23767-cd01-4798-8e90-f2019d6c79c4"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--716f1465-686d-427a-a942-fc1a068ac01e",
|
|
"created_by_ref": "identity--ed0b4063-bece-4edd-a4d7-a6b75b102bad",
|
|
"created": "2022-07-01T16:24:14.545343Z",
|
|
"modified": "2022-07-01T16:24:14.545343Z",
|
|
"name": "Censor social media as a political force",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0047.md",
|
|
"external_id": "T0047"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--2ed5e009-7619-4f66-b241-13201d052008"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--6f46288d-a2f5-439e-8bd1-6e2522a6c53d",
|
|
"created_by_ref": "identity--caa94a95-6536-4202-b3b6-e4b36f569cdb",
|
|
"created": "2022-07-01T16:24:14.546511Z",
|
|
"modified": "2022-07-01T16:24:14.546511Z",
|
|
"name": "Harass",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0048.md",
|
|
"external_id": "T0048"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--71cb0869-f22c-46dc-86bd-c75187cf98f9"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--cc45f60b-ccd1-407e-a3d3-de5aa48b9ed1",
|
|
"created_by_ref": "identity--2f9487bf-bb13-49ed-ba90-c386ee28db03",
|
|
"created": "2022-07-01T16:24:14.547473Z",
|
|
"modified": "2022-07-01T16:24:14.547473Z",
|
|
"name": "Flooding the Information Space",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0049.md",
|
|
"external_id": "T0049"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f3625817-a4b1-4285-89be-e87ab3c674d5"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--66273919-128e-4461-b058-2e47e59d627f",
|
|
"created_by_ref": "identity--6a5e6bd9-898e-4345-9e39-0de7244d222c",
|
|
"created": "2022-07-01T16:24:14.548402Z",
|
|
"modified": "2022-07-01T16:24:14.548402Z",
|
|
"name": "Organize Events",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0057.md",
|
|
"external_id": "T0057"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--8ea1eb4f-aaaa-4115-b4c1-918bce69a20b"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--662fda0b-f2d1-44c2-8d28-0b93073686e5",
|
|
"created_by_ref": "identity--42a68f8f-f0f4-4b31-a013-3c843bc54345",
|
|
"created": "2022-07-01T16:24:14.549343Z",
|
|
"modified": "2022-07-01T16:24:14.549343Z",
|
|
"name": "Play the long game",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0059.md",
|
|
"external_id": "T0059"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--16c00a52-58ad-41c4-9875-2076b212f4ca"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--9a97b8b6-4939-4e58-9f83-f85be0b35cf8",
|
|
"created_by_ref": "identity--16c7b9a7-a6bf-485b-9ffd-477a360f90f6",
|
|
"created": "2022-07-01T16:24:14.550781Z",
|
|
"modified": "2022-07-01T16:24:14.550781Z",
|
|
"name": "Continue to Amplify",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0060.md",
|
|
"external_id": "T0060"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1648fbee-84ee-4b5d-bf8e-0a57f9e04b9a"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--fc132df1-a06d-4cde-b845-58a67818d030",
|
|
"created_by_ref": "identity--41dd436e-9a24-4ae6-8747-ab24c6bac0f6",
|
|
"created": "2022-07-01T16:24:14.551914Z",
|
|
"modified": "2022-07-01T16:24:14.551914Z",
|
|
"name": "Sell Merchandise",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0061.md",
|
|
"external_id": "T0061"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--fd5ef2c4-6781-46e0-8536-0f30e37422f2"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--39409269-cf42-484b-88f0-e7686b9514f0",
|
|
"created_by_ref": "identity--d5a00e16-fd8e-4611-a3a3-d86c9853f942",
|
|
"created": "2022-07-01T16:24:14.552971Z",
|
|
"modified": "2022-07-01T16:24:14.552971Z",
|
|
"name": "Prepare Physical Broadcast Capabilities",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0065.md",
|
|
"external_id": "T0065"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--5dd47089-beb3-44fa-88cc-48c1fe203466"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--7aad7eaa-b651-4479-bb65-e629a2d8ba9f",
|
|
"created_by_ref": "identity--25529100-11e4-4842-94eb-7ce4f05dbaae",
|
|
"created": "2022-07-01T16:24:14.554088Z",
|
|
"modified": "2022-07-01T16:24:14.554088Z",
|
|
"name": "Degrade Adversary",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "plan-objectives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0066.md",
|
|
"external_id": "T0066"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--fc31880b-de51-4b80-8e78-57bc2a3860f5"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--1b9da518-3d4d-4371-a8b4-8519ed504ad6",
|
|
"created_by_ref": "identity--f9afb581-1c82-49d8-a9ce-c0b4f0027892",
|
|
"created": "2022-07-01T16:24:14.555092Z",
|
|
"modified": "2022-07-01T16:24:14.555092Z",
|
|
"name": "Respond to Breaking News Event or Active Crisis",
|
|
"description": "TA14",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-narratives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0068.md",
|
|
"external_id": "T0068"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--0b77a2ee-6b63-4d87-bb5c-abd61843e9c1"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--3da81b25-d20a-4d70-a7f2-305d0652fa49",
|
|
"created_by_ref": "identity--a7f99786-8e33-4a3d-9c07-7c138733771c",
|
|
"created": "2022-07-01T16:24:14.556091Z",
|
|
"modified": "2022-07-01T16:24:14.556091Z",
|
|
"name": "Segment Audiences",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0072.md",
|
|
"external_id": "T0072"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--e59d1c37-7d61-4eae-b91d-5797e478dcba"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--cb856749-7154-4f90-85f6-64a5cb0483a3",
|
|
"created_by_ref": "identity--e2c04c3c-6480-4eca-a4e8-be0db43b197e",
|
|
"created": "2022-07-01T16:24:14.557089Z",
|
|
"modified": "2022-07-01T16:24:14.557089Z",
|
|
"name": "Dismiss",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "plan-objectives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0075.md",
|
|
"external_id": "T0075"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--ccc0fbe7-2a40-4024-b645-25e1080539e0"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--6e9f5654-a9ad-4e9d-afb4-09a9ae0c626a",
|
|
"created_by_ref": "identity--e93ba744-ca58-4c9b-802d-4af68ff0e4dd",
|
|
"created": "2022-07-01T16:24:14.558058Z",
|
|
"modified": "2022-07-01T16:24:14.558058Z",
|
|
"name": "Distort",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "plan-objectives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0076.md",
|
|
"external_id": "T0076"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f4436e0d-ca85-476e-982f-8d02dd8a0112"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--177e35f3-a68b-4ab7-a88e-007527e828ee",
|
|
"created_by_ref": "identity--e13e8bb7-b450-4e1a-b2b3-c6999dcf393f",
|
|
"created": "2022-07-01T16:24:14.559034Z",
|
|
"modified": "2022-07-01T16:24:14.559034Z",
|
|
"name": "Distract",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "plan-objectives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0077.md",
|
|
"external_id": "T0077"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--dceab928-4b50-4250-a766-2647af92f7e2"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--64568475-7f70-407e-82d5-c613563cd2e0",
|
|
"created_by_ref": "identity--56faff19-d33d-484f-9e40-7edab8ccc745",
|
|
"created": "2022-07-01T16:24:14.560Z",
|
|
"modified": "2022-07-01T16:24:14.560Z",
|
|
"name": "Dismay",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "plan-objectives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0078.md",
|
|
"external_id": "T0078"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--8d2f78ba-6c39-4b62-b309-51bbfad84629"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--96824d66-d1f2-4fc6-8947-d8d84f2af4ce",
|
|
"created_by_ref": "identity--17f46857-6d75-4014-a1ec-ba644453bd99",
|
|
"created": "2022-07-01T16:24:14.560968Z",
|
|
"modified": "2022-07-01T16:24:14.560968Z",
|
|
"name": "Divide",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "plan-objectives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0079.md",
|
|
"external_id": "T0079"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--d43a47f0-11dc-4ebd-a088-756406a850c1"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--1a7417b5-34f6-463d-88db-74dd19672e4c",
|
|
"created_by_ref": "identity--ea61cff6-4c09-455c-8398-022ed472126d",
|
|
"created": "2022-07-01T16:24:14.561915Z",
|
|
"modified": "2022-07-01T16:24:14.561915Z",
|
|
"name": "Conceal People",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0128.md",
|
|
"external_id": "T0128"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c0beec50-ca37-40d9-8464-bdd796a6389a"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--987869af-0a82-40e8-879b-eb9b8a02d419",
|
|
"created_by_ref": "identity--7e02ef50-340b-4ce8-ae3d-d38c82f9cdc3",
|
|
"created": "2022-07-01T16:24:14.562845Z",
|
|
"modified": "2022-07-01T16:24:14.562845Z",
|
|
"name": "Conceal Operational Activity",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0129.md",
|
|
"external_id": "T0129"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--35503f87-7236-4947-a71e-51646873485f"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--5bf28faa-96e7-4a15-b932-3fabe6e709d1",
|
|
"created_by_ref": "identity--b6c9b478-b178-44fd-b8b3-76af429a8152",
|
|
"created": "2022-07-01T16:24:14.56377Z",
|
|
"modified": "2022-07-01T16:24:14.56377Z",
|
|
"name": "Conceal Infrastructure",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0130.md",
|
|
"external_id": "T0130"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--345b9bdd-0b1c-4ea1-90de-b2136f9ea7c0"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "x-mitre-matrix",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-matrix--cb904eb2-b753-466f-83f8-c6e19f39a631",
|
|
"created": "2022-07-01T16:24:14.564182Z",
|
|
"modified": "2022-07-01T16:24:14.564182Z",
|
|
"name": "DISARM Framework",
|
|
"description": "DISARM is a framework designed for describing and understanding disinformation incidents.",
|
|
"tactic_refs": [
|
|
"x-mitre-tactic--91e50646-d377-4904-8b8a-db58454fbbe2",
|
|
"x-mitre-tactic--bd30ac72-3528-4704-97fc-e7049ff50486",
|
|
"x-mitre-tactic--39ba49b5-27ef-4919-ad0c-21cf5f6d5ea0",
|
|
"x-mitre-tactic--0c4cb5fb-80e0-4185-b007-683e55d444ea",
|
|
"x-mitre-tactic--c7e154be-29c7-4ec9-b00b-15b271a53f4d",
|
|
"x-mitre-tactic--dab5cc61-8a53-42a6-ad76-7725680f1376",
|
|
"x-mitre-tactic--95a8ea59-bcd3-45fb-88a2-e1ec86707eba",
|
|
"x-mitre-tactic--b946c4ec-838c-4328-8529-b1e0bbb9f958",
|
|
"x-mitre-tactic--2cfa7033-a678-4aa0-bee5-bf48ce833e42",
|
|
"x-mitre-tactic--e6145745-2127-4a3e-8dda-23a2464a4f49",
|
|
"x-mitre-tactic--19a9fbb5-f208-4d04-bc3d-cf4d9ab40472",
|
|
"x-mitre-tactic--ba67bdf7-9c5e-4c41-9233-42152146073e",
|
|
"x-mitre-tactic--415417fd-38b3-4e8e-81aa-2888e7d14948",
|
|
"x-mitre-tactic--4c6114bf-663b-4da8-81fe-ef35653c2de4",
|
|
"x-mitre-tactic--c37c514d-52b9-4ff2-83c5-0f65719439a0",
|
|
"x-mitre-tactic--106f515b-06d4-42cb-839a-7fc272267917"
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation",
|
|
"external_id": "DISARM"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|