| TA01 Plan Strategy |
TA02 Plan Objectives |
TA05 Microtarget |
TA06 Develop Content |
TA07 Select Channels and Affordances |
TA08 Conduct Pump Priming |
TA09 Deliver Content |
TA10 Drive Offline Activity |
TA11 Persist in the Information Environment |
TA12 Assess Effectiveness |
TA13 Target Audience Analysis |
TA14 Develop Narratives |
TA15 Establish Assets |
TA16 Establish Legitimacy |
TA17 Maximise Exposure |
TA18 Drive Online Harms |
| T0073 Determine Target Audiences |
T0002 Facilitate State Propaganda |
T0016 Create Clickbait |
T0015 Create Hashtags and Search Artefacts |
T0029 Online Polls |
T0020 Trial Content |
T0114 Deliver Ads |
T0017 Conduct Fundraising |
T0059 Play the Long Game |
T0132 Measure Performance |
T0072 Segment Audiences |
T0003 Leverage Existing Narratives |
T0010 Cultivate Ignorant Agents |
T0097 Present Persona |
T0039 Bait Influencer |
T0047 Censor Social Media as a Political Force |
| T0074 Determine Strategic Ends |
T0066 Degrade Adversary |
T0018 Purchase Targeted Advertisements |
T0015.001 Use Existing Hashtag |
T0107 Bookmarking and Content Curation |
T0042 Seed Kernel of Truth |
T0114.001 Social Media |
T0017.001 Conduct Crowdfunding Campaigns |
T0060 Continue to Amplify |
T0132.001 People Focused |
T0072.001 Geographic Segmentation |
T0004 Develop Competing Narratives |
T0014 Prepare Fundraising Campaigns |
T0097.100 Individual Persona |
T0049 Flood Information Space |
T0048 Harass |
| T0074.001 Geopolitical Advantage |
T0075 Dismiss |
T0101 Create Localised Content |
T0015.002 Create New Hashtag |
T0109 Consumer Review Networks |
T0044 Seed Distortions |
T0114.002 Traditional Media |
T0057 Organise Events |
T0128 Conceal Information Assets |
T0132.002 Content Focused |
T0072.002 Demographic Segmentation |
T0022 Leverage Conspiracy Theory Narratives |
T0014.001 Raise Funds from Malign Actors |
T0097.101 Local Persona |
T0049.001 Trolls Amplify and Manipulate |
T0048.001 Boycott/"Cancel" Opponents |
| T0074.002 Domestic Political Advantage |
T0075.001 Discredit Credible Sources |
T0102 Leverage Echo Chambers/Filter Bubbles |
T0023 Distort Facts |
T0110 Formal Diplomatic Channels |
T0045 Use Fake Experts |
T0115 Post Content |
T0057.001 Pay for Physical Action |
T0128.001 Use Pseudonyms |
T0132.003 View Focused |
T0072.003 Economic Segmentation |
T0022.001 Amplify Existing Conspiracy Theory Narratives |
T0014.002 Raise Funds from Ignorant Agents |
T0097.102 Journalist Persona |
T0049.002 Flood Existing Hashtag |
T0048.002 Harass People Based on Identities |
| T0074.003 Economic Advantage |
T0076 Distort |
T0102.001 Use Existing Echo Chambers/Filter Bubbles |
T0023.001 Reframe Context |
T0111 Traditional Media |
T0046 Use Search Engine Optimisation |
T0115.001 Share Memes |
T0057.002 Conduct Symbolic Action |
T0128.002 Conceal Network Identity |
T0133 Measure Effectiveness |
T0072.004 Psychographic Segmentation |
T0022.002 Develop Original Conspiracy Theory Narratives |
T0065 Prepare Physical Broadcast Capabilities |
T0097.103 Activist Persona |
T0049.003 Bots Amplify via Automated Forwarding and Reposting |
T0048.003 Threaten to Dox |
| T0074.004 Ideological Advantage |
T0077 Distract |
T0102.002 Create Echo Chambers/Filter Bubbles |
T0023.002 Edit Open-Source Content |
T0111.001 TV |
|
T0115.002 Post Violative Content to Provoke Takedown and Backlash |
T0061 Sell Merchandise |
T0128.003 Distance Reputable Individuals from Operation |
T0133.001 Behaviour Changes |
T0072.005 Political Segmentation |
T0040 Demand Insurmountable Proof |
T0091 Recruit Malign Actors |
T0097.104 Hacktivist Persona |
T0049.004 Utilise Spamoflauge |
T0048.004 Dox |
| |
T0078 Dismay |
T0102.003 Exploit Data Voids |
T0084 Reuse Existing Content |
T0111.002 Newspaper |
|
T0115.003 One-Way Direct Posting |
T0126 Encourage Attendance at Events |
T0128.004 Launder Information Assets |
T0133.002 Content |
T0080 Map Target Audience Information Environment |
T0068 Respond to Breaking News Event or Active Crisis |
T0091.001 Recruit Contractors |
T0097.105 Military Personnel Persona |
T0049.005 Conduct Swarming |
T0123 Control Information Environment through Offensive Cyberspace Operations |
| |
T0079 Divide |
|
T0084.001 Use Copypasta |
T0111.003 Radio |
|
T0116 Comment or Reply on Content |
T0126.001 Call to Action to Attend |
T0128.005 Change Names of Information Assets |
T0133.003 Awareness |
T0080.001 Monitor Social Media Analytics |
T0082 Develop New Narratives |
T0091.002 Recruit Partisans |
T0097.106 Recruiter Persona |
T0049.006 Conduct Keyword Squatting |
T0123.001 Delete Opposing Content |
| |
T0135 Undermine |
|
T0084.002 Plagiarise Content |
T0151 Digital Community Hosting Asset |
|
T0116.001 Post Inauthentic Social Media Comment |
T0126.002 Facilitate Logistics or Support for Attendance |
T0129 Conceal Operational Activity |
T0133.004 Knowledge |
T0080.002 Evaluate Media Surveys |
T0083 Integrate Target Audience Vulnerabilities into Narrative |
T0091.003 Enlist Troll Accounts |
T0097.107 Researcher Persona |
T0049.007 Inauthentic Sites Amplify News and Narratives |
T0123.002 Block Content |
| |
T0135.001 Smear |
|
T0084.003 Deceptively Labelled or Translated |
T0151.001 Social Media Platform |
|
T0117 Attract Traditional Media |
T0127 Physical Violence |
T0129.001 Conceal Network Identity |
T0133.005 Action/Attitude |
T0080.003 Identify Trending Topics/Hashtags |
|
T0092 Build Network |
T0097.108 Expert Persona |
T0049.008 Generate Information Pollution |
T0123.003 Destroy Information Generation Capabilities |
| |
T0135.002 Thwart |
|
T0084.004 Appropriate Content |
T0151.002 Online Community Group |
|
|
T0127.001 Conduct Physical Violence |
T0129.002 Generate Content Unrelated to Narrative |
T0134 Measure Effectiveness Indicators (or KPIs) |
T0080.004 Conduct Web Traffic Analysis |
|
T0092.001 Create Organisations |
T0097.109 Romantic Suitor Persona |
T0118 Amplify Existing Narrative |
T0123.004 Conduct Server Redirect |
| |
T0135.003 Subvert |
|
T0085 Develop Text-Based Content |
T0151.003 Online Community Page |
|
|
T0127.002 Encourage Physical Violence |
T0129.003 Break Association with Content |
T0134.001 Message Reach |
T0080.005 Assess Degree/Type of Media Access |
|
T0092.002 Use Follow Trains |
T0097.110 Party Official Persona |
T0119 Cross-Posting |
T0124 Suppress Opposition |
| |
T0135.004 Polarise |
|
T0085.001 Develop AI-Generated Text |
T0151.004 Chat Platform |
|
|
|
T0129.004 Delete URLs |
T0134.002 Social Media Engagement |
T0081 Identify Social and Technical Vulnerabilities |
|
T0092.003 Create Community or Sub-Group |
T0097.111 Government Official Persona |
T0119.001 Post across Groups |
T0124.001 Report Non-Violative Opposing Content |
| |
T0136 Cultivate Support |
|
T0085.003 Develop Inauthentic News Articles |
T0151.005 Chat Community Server |
|
|
|
T0129.005 Coordinate on Encrypted/Closed Networks |
|
T0081.001 Find Echo Chambers |
|
T0093 Acquire/Recruit Network |
T0097.112 Government Employee Persona |
T0119.002 Post across Platform |
T0124.002 Goad People into Harmful Action (Stop Hitting Yourself) |
| |
T0136.001 Defend Reputaton |
|
T0085.004 Develop Document |
T0151.006 Chat Room |
|
|
|
T0129.006 Deny Involvement |
|
T0081.002 Identify Data Voids |
|
T0093.001 Fund Proxies |
T0097.200 Institutional Persona |
T0119.003 Post across Disciplines |
T0124.003 Exploit Platform TOS/Content Moderation |
| |
T0136.002 Justify Action |
|
T0085.005 Develop Book |
T0151.007 Chat Broadcast Group |
|
|
|
T0129.007 Delete Accounts/Account Activity |
|
T0081.003 Identify Existing Prejudices |
|
T0093.002 Acquire Botnets |
T0097.201 Local Institution Persona |
T0120 Incentivize Sharing |
T0125 Platform Filtering |
| |
T0136.003 Energise Supporters |
|
T0085.006 Develop Opinion Article |
T0151.008 Microblogging Platform |
|
|
|
T0129.009 Remove Post Origins |
|
T0081.004 Identify Existing Fissures |
|
T0094 Infiltrate Existing Networks |
T0097.202 News Outlet Persona |
T0120.001 Use Affiliate Marketing Programmes |
|
| |
T0136.004 Boost Reputation |
|
T0085.007 Create Fake Research |
T0151.009 Legacy Online Forum Platform |
|
|
|
T0129.010 Misattribute Activity |
|
T0081.005 Identify Existing Conspiracy Narratives/Suspicions |
|
T0094.001 Identify Susceptible Targets in Networks |
T0097.203 Fact Checking Organisation Persona |
T0120.002 Use Contests and Prizes |
|
| |
T0136.005 Cultvate Support for Initiative |
|
T0085.008 Machine Translated Text |
T0151.010 Community Forum Platform |
|
|
|
T0130 Conceal Infrastructure |
|
T0081.006 Identify Wedge Issues |
|
T0094.002 Utilise Butterfly Attacks |
T0097.204 Think Tank Persona |
T0121 Manipulate Platform Algorithm |
|
| |
T0136.006 Cultivate Support for Ally |
|
T0086 Develop Image-Based Content |
T0151.011 Community Sub-Forum |
|
|
|
T0130.001 Conceal Sponsorship |
|
T0081.007 Identify Target Audience Adversaries |
|
T0095 Develop Owned Media Assets |
T0097.205 Business Persona |
T0121.001 Bypass Content Blocking |
|
| |
T0136.007 Recruit Members |
|
T0086.001 Develop Memes |
T0151.012 Image Board Platform |
|
|
|
T0130.002 Utilise Bulletproof Hosting |
|
T0081.008 Identify Media System Vulnerabilities |
|
T0096 Leverage Content Farms |
T0097.206 Government Institution Persona |
T0122 Direct Users to Alternative Platforms |
|
| |
T0136.008 Increase Prestige |
|
T0086.002 Develop AI-Generated Images (Deepfakes) |
T0151.013 Question and Answer Platform |
|
|
|
T0130.003 Use Shell Organisations |
|
|
|
T0096.001 Create Content Farms |
T0097.207 NGO Persona |
|
|
| |
T0137 Make Money |
|
T0086.003 Deceptively Edit Images (Cheap Fakes) |
T0151.014 Comments Section |
|
|
|
T0130.004 Use Cryptocurrency |
|
|
|
T0096.002 Outsource Content Creation to External Organisations |
T0097.208 Social Cause Persona |
|
|
| |
T0137.001 Generate Ad Revenue |
|
T0086.004 Aggregate Information into Evidence Collages |
T0151.015 Online Game Platform |
|
|
|
T0130.005 Obfuscate Payment |
|
|
|
T0113 Employ Commercial Analytic Firms |
T0098 Establish Inauthentic News Sites |
|
|
| |
T0137.002 Scam |
|
T0087 Develop Video-Based Content |
T0151.016 Online Game Session |
|
|
|
T0131 Exploit TOS/Content Moderation |
|
|
|
T0145 Establish Account Imagery |
T0098.001 Create Inauthentic News Sites |
|
|
| |
T0137.003 Raise Funds |
|
T0087.001 Develop AI-Generated Videos (Deepfakes) |
T0151.017 Dating Platform |
|
|
|
T0131.001 Legacy Web Content |
|
|
|
T0145.001 Copy Account Imagery |
T0098.002 Leverage Existing Inauthentic News Sites |
|
|
| |
T0137.004 Sell Items under False Pretences |
|
T0087.002 Deceptively Edit Video (Cheap Fakes) |
T0152 Digital Content Hosting Asset |
|
|
|
T0131.002 Post Borderline Content |
|
|
|
T0145.002 AI-Generated Account Imagery |
T0100 Co-Opt Trusted Sources |
|
|
| |
T0137.005 Extort |
|
T0088 Develop Audio-Based Content |
T0152.001 Blogging Platform |
|
|
|
|
|
|
|
T0145.003 Animal Account Imagery |
T0100.001 Co-Opt Trusted Individuals |
|
|
| |
T0137.006 Manipulate Stocks |
|
T0088.001 Develop AI-Generated Audio (Deepfakes) |
T0152.002 Blog Asset |
|
|
|
|
|
|
|
T0145.004 Scenery Account Imagery |
T0100.002 Co-Opt Grassroots Groups |
|
|
| |
T0138 Motivate to Act |
|
T0088.002 Deceptively Edit Audio (Cheap Fakes) |
T0152.003 Website Hosting Platform |
|
|
|
|
|
|
|
T0145.005 Illustrated Character Account Imagery |
T0100.003 Co-Opt Influencers |
|
|
| |
T0138.001 Encourage |
|
T0089 Obtain Private Documents |
T0152.004 Website Asset |
|
|
|
|
|
|
|
T0145.006 Attractive Person Account Imagery |
T0143 Persona Legitimacy |
|
|
| |
T0138.002 Provoke |
|
T0089.001 Obtain Authentic Documents |
T0152.005 Paste Platform |
|
|
|
|
|
|
|
T0145.007 Stock Image Account Imagery |
T0143.001 Authentic Persona |
|
|
| |
T0138.003 Compel |
|
T0089.003 Alter Authentic Documents |
T0152.006 Video Platform |
|
|
|
|
|
|
|
|
T0143.002 Fabricated Persona |
|
|
| |
T0139 Dissuade from Acting |
|
T0146 Account Asset |
T0152.007 Audio Platform |
|
|
|
|
|
|
|
|
T0143.003 Impersonated Persona |
|
|
| |
T0139.001 Discourage |
|
T0146.001 Free Account Asset |
T0152.008 Live Streaming Platform |
|
|
|
|
|
|
|
|
T0143.004 Parody Persona |
|
|
| |
T0139.002 Silence |
|
T0146.002 Paid Account Asset |
T0152.009 Software Delivery Platform |
|
|
|
|
|
|
|
|
T0144 Persona Legitimacy Evidence |
|
|
| |
T0139.003 Deter |
|
T0146.003 Verified Account Asset |
T0152.010 File Hosting Platform |
|
|
|
|
|
|
|
|
T0144.001 Present Persona across Platforms |
|
|
| |
T0140 Cause Harm |
|
T0146.004 Administrator Account Asset |
T0152.011 Wiki Platform |
|
|
|
|
|
|
|
|
T0144.002 Persona Template |
|
|
| |
T0140.001 Defame |
|
T0146.005 Lookalike Account ID |
T0152.012 Subscription Service Platform |
|
|
|
|
|
|
|
|
|
|
|
| |
T0140.002 Intimidate |
|
T0146.006 Open Access Platform |
T0153 Digital Content Delivery Asset |
|
|
|
|
|
|
|
|
|
|
|
| |
T0140.003 Spread Hate |
|
T0146.007 Automated Account Asset |
T0153.001 Email Platform |
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0147 Software Asset |
T0153.002 Link Shortening Platform |
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0147.001 Game Asset |
T0153.003 Shortened Link Asset |
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0147.002 Game Mod Asset |
T0153.004 QR Code Asset |
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0147.003 Malware Asset |
T0153.005 Online Advertising Platform |
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0147.004 Mobile App Asset |
T0153.006 Content Recommendation Algorithm |
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0148 Financial Instrument |
T0153.007 Direct Messaging |
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0148.001 Online Banking Platform |
T0154 Digital Content Creation Asset |
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0148.002 Bank Account Asset |
T0154.001 AI LLM Platform |
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0148.003 Payment Processing Platform |
T0154.002 AI Media Platform |
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0148.004 Payment Processing Capability |
T0155 Gated Asset |
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0148.005 Subscription Processing Capability |
T0155.001 Password Gated Asset |
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0148.006 Crowdfunding Platform |
T0155.002 Invite Gated Asset |
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0148.007 eCommerce Platform |
T0155.003 Approval Gated Asset |
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0148.008 Cryptocurrency Exchange Platform |
T0155.004 Geoblocked Asset |
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0148.009 Cryptocurrency Wallet |
T0155.005 Paid Access Asset |
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0149 Online Infrastructure |
T0155.006 Subscription Access Asset |
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0149.001 Domain Asset |
T0155.007 Encrypted Communication Channel |
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0149.002 Email Domain Asset |
|
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0149.003 Lookalike Domain |
|
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0149.004 Redirecting Domain Asset |
|
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0149.005 Server Asset |
|
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0149.006 IP Address Asset |
|
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0149.007 VPN Asset |
|
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0149.008 Proxy IP Address Asset |
|
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0149.009 Internet Connected Physical Asset |
|
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0150 Asset Origin |
|
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0150.001 Newly Created Asset |
|
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0150.002 Dormant Asset |
|
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0150.003 Pre-Existing Asset |
|
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0150.004 Repurposed Asset |
|
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0150.005 Compromised Asset |
|
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0150.006 Purchased Asset |
|
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0150.007 Rented Asset |
|
|
|
|
|
|
|
|
|
|
|
|
| |
|
|
T0150.008 Bulk Created Asset |
|
|
|
|
|
|
|
|
|
|
|
|
