mirror of
https://github.com/DISARMFoundation/DISARMframeworks.git
synced 2024-12-18 20:34:18 -05:00
40 lines
1.6 KiB
JSON
40 lines
1.6 KiB
JSON
{
|
|
"type": "bundle",
|
|
"id": "bundle--fd214e7d-c2e1-4849-b721-3346296a119b",
|
|
"objects": [
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ea762d7a-8852-4d91-b44f-4754aa079313",
|
|
"created_by_ref": "identity--f1a0f560-2d9e-4c5d-bf47-7e96e805de82",
|
|
"created": "2024-11-22T16:43:58.203425Z",
|
|
"modified": "2024-11-22T16:43:58.203425Z",
|
|
"name": "Remove Post Origins",
|
|
"description": "Removing post origins refers to the elimination of evidence that indicates the initial source of operation content, often to complicate attribution. An influence operation may remove post origins by deleting watermarks, renaming files, or removing embedded links in its content.",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "mitre-attack",
|
|
"url": "https://github.com/DISARMFoundation/DISARMframeworks/blob/main/generated_pages/techniques/T0129.009.md",
|
|
"external_id": "T0129.009"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f79f25d2-8b96-4580-b169-eb7b613a7c31"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "2.1"
|
|
}
|
|
]
|
|
}
|