mirror of
https://github.com/DISARMFoundation/DISARMframeworks.git
synced 2024-10-01 01:45:36 -04:00
2654 lines
102 KiB
JSON
2654 lines
102 KiB
JSON
{
|
|
"type": "bundle",
|
|
"id": "bundle--a2bcc7f6-d52b-4227-a7f1-1cdd84161c9e",
|
|
"objects": [
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--45968fd4-4fdb-4ba2-82e1-f5e5c148e325",
|
|
"created_by_ref": "identity--125833cb-53bf-4bae-b876-1f1380db32f9",
|
|
"created": "2022-06-29T15:07:39.598443Z",
|
|
"modified": "2022-06-29T15:07:39.598443Z",
|
|
"name": "Strategic Planning",
|
|
"description": "Define the desired end state, i.e. the set of required conditions that defines achievement of all objectives.",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA01.md",
|
|
"external_id": "TA01"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--57742fd1-338e-4321-9899-e3d5dca7b965"
|
|
],
|
|
"x_mitre_shortname": "strategic-planning"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--2f02c1ff-9e62-469c-a8bf-d9a6b1cc7917",
|
|
"created_by_ref": "identity--1bb5fb95-92d8-4177-bd6f-69d39102c166",
|
|
"created": "2022-06-29T15:07:39.59933Z",
|
|
"modified": "2022-06-29T15:07:39.59933Z",
|
|
"name": "Objective Planning",
|
|
"description": "Set clearly defined, measurable, and achievable objectives. Achieving objectives ties execution of tactical tasks to reaching the desired end state. There are four primary considerations:\n- Each desired effect should link directly to one or more objectives\n- The effect should be measurable\n- The objective statement should not specify the way and means of accomplishment\n- The effect should be distinguishable from the objective it supports as a condition for success, not as another objective or task.",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA02.md",
|
|
"external_id": "TA02"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--2ec6f56d-d375-41a5-8130-9b6ebf4a86dc"
|
|
],
|
|
"x_mitre_shortname": "objective-planning"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--49b9b288-58bb-41b8-b2b7-570e10025264",
|
|
"created_by_ref": "identity--0b41447d-bea6-40d3-9ac8-8a04b664b04c",
|
|
"created": "2022-06-29T15:07:39.600239Z",
|
|
"modified": "2022-06-29T15:07:39.600239Z",
|
|
"name": "Conduct Center of Gravity Analysis",
|
|
"description": "Recon/research to identify \"the source of power that provides moral or physical strength, freedom of action, or will to act.\" Thus, the center of gravity is usually seen as the \"source of strength\". Includes demographic and network analysis of communities",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA13.md",
|
|
"external_id": "TA13"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f4e8ae1c-deab-4507-80fd-fecc81a150cc"
|
|
],
|
|
"x_mitre_shortname": "conduct-center-of-gravity-analysis"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--f2d0efbf-0f86-419b-917b-2f3dc904094d",
|
|
"created_by_ref": "identity--6099b19d-e04a-4c37-bda2-98d74fb89c39",
|
|
"created": "2022-06-29T15:07:39.601668Z",
|
|
"modified": "2022-06-29T15:07:39.601668Z",
|
|
"name": "Develop People",
|
|
"description": "Develop online and offline users and agents, including automated personas",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA03.md",
|
|
"external_id": "TA03"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1114b012-3734-403b-b0b5-cd9b05671a62"
|
|
],
|
|
"x_mitre_shortname": "develop-people"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--a9cc9713-f33b-44a8-868b-c59950406f76",
|
|
"created_by_ref": "identity--6dae4715-664b-454e-82fb-96d8bfcc300e",
|
|
"created": "2022-06-29T15:07:39.602545Z",
|
|
"modified": "2022-06-29T15:07:39.602545Z",
|
|
"name": "Develop Networks",
|
|
"description": "Develop online and offline communities and transmission methods and cultivate assets and unwitting agents",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA04.md",
|
|
"external_id": "TA04"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--61f73ca8-1f50-4cd2-8950-14b91614578a"
|
|
],
|
|
"x_mitre_shortname": "develop-networks"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--6c6c13f5-aa72-42e5-a9d2-4700306c353e",
|
|
"created_by_ref": "identity--5ed012d0-1601-486c-8d8d-7ed4484b5b3f",
|
|
"created": "2022-06-29T15:07:39.60333Z",
|
|
"modified": "2022-06-29T15:07:39.60333Z",
|
|
"name": "Microtargeting",
|
|
"description": "Target very specific populations of people",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA05.md",
|
|
"external_id": "TA05"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--4bce6287-e6b3-4eb3-9f72-c517e91fa686"
|
|
],
|
|
"x_mitre_shortname": "microtargeting"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--5c04a4d3-dd32-458b-952e-1e05f2861cbd",
|
|
"created_by_ref": "identity--d9d725ce-a097-4c35-a468-04828dfdfd3a",
|
|
"created": "2022-06-29T15:07:39.604105Z",
|
|
"modified": "2022-06-29T15:07:39.604105Z",
|
|
"name": "Develop Content",
|
|
"description": "Create and acquire content used in incident",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA06.md",
|
|
"external_id": "TA06"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--6c534bfb-7b1b-4af3-be06-6855f71c8d0a"
|
|
],
|
|
"x_mitre_shortname": "develop-content"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--ddb9dd2f-6a39-46e8-9b3c-a25c12cef614",
|
|
"created_by_ref": "identity--afcafb94-dc2c-45da-b40a-6afdbf8e536f",
|
|
"created": "2022-06-29T15:07:39.604873Z",
|
|
"modified": "2022-06-29T15:07:39.604873Z",
|
|
"name": "Channel Selection",
|
|
"description": "Set up specific delivery, amplification and manipulation channels for incident, including channels to attack. Each channel serves as an atomic surface (test bed) location/site for adversary to hide/conceal the work/content that goes into setting up for this channel and/or other specific platforms. Contributes to building out a connected ecosystem where this channel can operate as part of a whole campaign/incident",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA07.md",
|
|
"external_id": "TA07"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--19f570c1-18da-4e67-a25d-2dfebe78f672"
|
|
],
|
|
"x_mitre_shortname": "channel-selection"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--ede1dc9b-6afa-46d1-a42c-6b3e791bc1eb",
|
|
"created_by_ref": "identity--5db0a7c4-6a1b-4bf4-96fe-903e83aeffa8",
|
|
"created": "2022-06-29T15:07:39.60579Z",
|
|
"modified": "2022-06-29T15:07:39.60579Z",
|
|
"name": "Pump Priming",
|
|
"description": "Release content on a targetted small scale, prior to general release, including releasing seed. Used for preparation before broader release, and as message honing. Used for preparation before broader release, and as message honing. ",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA08.md",
|
|
"external_id": "TA08"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--d2c8701a-10d8-44ed-813f-816287d4338e"
|
|
],
|
|
"x_mitre_shortname": "pump-priming"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--66b91148-79b6-472f-b48b-5c74113088dc",
|
|
"created_by_ref": "identity--fa3bc483-b617-451e-9d4b-0319b384e007",
|
|
"created": "2022-06-29T15:07:39.606564Z",
|
|
"modified": "2022-06-29T15:07:39.606564Z",
|
|
"name": "Exposure",
|
|
"description": "Release content to general public or push to larger population",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA09.md",
|
|
"external_id": "TA09"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--18be7d67-99d2-445e-82e4-cb2a2d2001c5"
|
|
],
|
|
"x_mitre_shortname": "exposure"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--81feb109-6d02-468e-bd47-006ce9d9aafa",
|
|
"created_by_ref": "identity--38b488f5-bebd-4549-b299-b48a025ab7a7",
|
|
"created": "2022-06-29T15:07:39.607327Z",
|
|
"modified": "2022-06-29T15:07:39.607327Z",
|
|
"name": "Drive Offline Activity",
|
|
"description": "Move incident into offline world",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA10.md",
|
|
"external_id": "TA10"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c71c8982-494c-4f13-b20c-5ed4357852f0"
|
|
],
|
|
"x_mitre_shortname": "drive-offline-activity"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--898251e6-a030-4ff1-8037-2c4b49e85ed3",
|
|
"created_by_ref": "identity--4372f1ab-ec3d-4c3c-9c9f-2388733f6690",
|
|
"created": "2022-06-29T15:07:39.60849Z",
|
|
"modified": "2022-06-29T15:07:39.60849Z",
|
|
"name": "Persistence",
|
|
"description": "Keep incident 'alive', beyond the incident creators' efforts",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA11.md",
|
|
"external_id": "TA11"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--674862c3-7265-4282-bd8c-3a0d22c4c4c0"
|
|
],
|
|
"x_mitre_shortname": "persistence"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--6a8a5578-8e24-4599-b5ce-556f207927c7",
|
|
"created_by_ref": "identity--a8fe2534-40b8-415a-b4fb-b11fdda48cc9",
|
|
"created": "2022-06-29T15:07:39.60928Z",
|
|
"modified": "2022-06-29T15:07:39.60928Z",
|
|
"name": "Measure Effectiveness",
|
|
"description": "Measure effectiveness of incident, for use in planning future events",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA12.md",
|
|
"external_id": "TA12"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--dc36d4e3-df17-435b-a9eb-edaabf732e61"
|
|
],
|
|
"x_mitre_shortname": "measure-effectiveness"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--84a2d44a-8820-41ed-ac79-c5aa7a8f8309",
|
|
"created_by_ref": "identity--36185e59-28d9-4668-bc6f-e1ee4a79cf41",
|
|
"created": "2022-06-29T15:07:39.610695Z",
|
|
"modified": "2022-06-29T15:07:39.610695Z",
|
|
"name": "5Ds (dismiss, distort, distract, dismay, divide)",
|
|
"description": "TA01",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "strategic-planning"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0001.md",
|
|
"external_id": "T0001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1733e05c-8340-4ffe-a371-0816092f6ace"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--b7d38923-ba1b-4510-b82e-be675c8ea67f",
|
|
"created_by_ref": "identity--d2aea7f2-2399-42fa-966c-7965cccd334f",
|
|
"created": "2022-06-29T15:07:39.611653Z",
|
|
"modified": "2022-06-29T15:07:39.611653Z",
|
|
"name": "Facilitate State Propaganda",
|
|
"description": "TA01",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "strategic-planning"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0002.md",
|
|
"external_id": "T0002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--8e92cb65-7303-4b12-9378-48449e853d08"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--a0e45e50-f5c8-4a62-99f8-ac66d384c8dc",
|
|
"created_by_ref": "identity--0fd268e7-8d8f-43de-b2bf-0fc25740704e",
|
|
"created": "2022-06-29T15:07:39.6125Z",
|
|
"modified": "2022-06-29T15:07:39.6125Z",
|
|
"name": "Leverage Existing Narratives",
|
|
"description": "TA01",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "strategic-planning"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0003.md",
|
|
"external_id": "T0003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--86ff77e1-75f8-4c01-80cb-de61dcbcf86a"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--fac68697-f3ca-4638-b00f-fecc56636459",
|
|
"created_by_ref": "identity--85232727-a150-4760-aa83-3b1bd115b3e6",
|
|
"created": "2022-06-29T15:07:39.61337Z",
|
|
"modified": "2022-06-29T15:07:39.61337Z",
|
|
"name": "Devise Competing Narratives",
|
|
"description": "TA01",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "strategic-planning"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0004.md",
|
|
"external_id": "T0004"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--25a3d95a-aa85-45cd-b06e-6ecade362f98"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--f00125d7-2219-4a89-8219-69e4c76b085b",
|
|
"created_by_ref": "identity--1ae777f7-6354-4a8e-8809-44380eb3ec9f",
|
|
"created": "2022-06-29T15:07:39.614322Z",
|
|
"modified": "2022-06-29T15:07:39.614322Z",
|
|
"name": "Develop Narrative Concepts",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "objective-planning"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0006.md",
|
|
"external_id": "T0006"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--7d2a1f26-30e1-42a1-8d6c-19bdeb0a012b"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--3075bb6b-39fc-4320-8bd9-1b2a1429928a",
|
|
"created_by_ref": "identity--46595ce7-1bfe-4523-8102-88996c6e005a",
|
|
"created": "2022-06-29T15:07:39.615253Z",
|
|
"modified": "2022-06-29T15:07:39.615253Z",
|
|
"name": "Create fake Social Media Profiles / Pages / Groups",
|
|
"description": "TA03",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-people"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0007.md",
|
|
"external_id": "T0007"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--26898b49-7e32-471b-8ffa-1e01b3060d44"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--f3d091e2-e76c-4512-a0fd-04522c0e4519",
|
|
"created_by_ref": "identity--874dbe85-12c8-46ef-b7d6-64f01e032269",
|
|
"created": "2022-06-29T15:07:39.616083Z",
|
|
"modified": "2022-06-29T15:07:39.616083Z",
|
|
"name": "Create fake or imposter news sites",
|
|
"description": "TA03",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-people"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0008.md",
|
|
"external_id": "T0008"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--9ce37768-60f5-4ce8-afa9-5c5b12af93e0"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--e7bf113f-c6a4-4e72-ba77-bc654347ec2d",
|
|
"created_by_ref": "identity--b481df8f-c7e0-4bfa-97fb-15363803de41",
|
|
"created": "2022-06-29T15:07:39.617032Z",
|
|
"modified": "2022-06-29T15:07:39.617032Z",
|
|
"name": "Create fake experts",
|
|
"description": "TA03",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-people"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0009.md",
|
|
"external_id": "T0009"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--b5a12b0e-1562-4288-b8ae-43eb18200bf1"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--55a9a479-b834-4c81-9239-f75a4324b22f",
|
|
"created_by_ref": "identity--2b7d9f37-5747-43df-a1b2-043d15d716f6",
|
|
"created": "2022-06-29T15:07:39.617863Z",
|
|
"modified": "2022-06-29T15:07:39.617863Z",
|
|
"name": "Cultivate ignorant agents",
|
|
"description": "TA04",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-networks"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0010.md",
|
|
"external_id": "T0010"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--7a6c579f-0f76-4993-8822-c68202c1cb19"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--d8f9fdb1-cdf0-48b3-842b-67a7f8e8c1c7",
|
|
"created_by_ref": "identity--e9fbc051-1c09-4c86-a61e-8c0d2a4bad77",
|
|
"created": "2022-06-29T15:07:39.618689Z",
|
|
"modified": "2022-06-29T15:07:39.618689Z",
|
|
"name": "Compromise legitimate account",
|
|
"description": "TA04",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-networks"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0011.md",
|
|
"external_id": "T0011"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--0d732177-3798-4fa8-92c8-20eae733bdce"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--841e1310-50ac-44c6-b5b8-53e1a66b6347",
|
|
"created_by_ref": "identity--7dce5432-6435-4489-ad71-88841216f4f4",
|
|
"created": "2022-06-29T15:07:39.619506Z",
|
|
"modified": "2022-06-29T15:07:39.619506Z",
|
|
"name": "Use concealment",
|
|
"description": "TA04",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-networks"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0012.md",
|
|
"external_id": "T0012"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f124dc4e-34a1-4178-8675-6fb7dba683ce"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--cde7dc89-06fc-4b39-8f28-953ca75817b6",
|
|
"created_by_ref": "identity--819423c4-fd86-4ade-b7ce-0ddc03fc43e9",
|
|
"created": "2022-06-29T15:07:39.620326Z",
|
|
"modified": "2022-06-29T15:07:39.620326Z",
|
|
"name": "Create fake websites",
|
|
"description": "TA04",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-networks"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0013.md",
|
|
"external_id": "T0013"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--8b11efad-8eb5-4f7b-95d4-462fb516d4e5"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--9c13610c-f066-478e-b8e8-013133e12b90",
|
|
"created_by_ref": "identity--f440cf48-92fb-4282-a1dd-537fbffd6c24",
|
|
"created": "2022-06-29T15:07:39.62148Z",
|
|
"modified": "2022-06-29T15:07:39.62148Z",
|
|
"name": "Prepare fundraising campaigns",
|
|
"description": "TA04",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-networks"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0014.md",
|
|
"external_id": "T0014"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--0d0758c5-7c67-4b99-a691-161650d220c7"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--3359ff9e-860e-46e0-9d87-11f47b2ae40d",
|
|
"created_by_ref": "identity--aceeab73-113b-4587-bf35-2795fa74fdc9",
|
|
"created": "2022-06-29T15:07:39.622326Z",
|
|
"modified": "2022-06-29T15:07:39.622326Z",
|
|
"name": "Create hashtags",
|
|
"description": "TA04",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-networks"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0015.md",
|
|
"external_id": "T0015"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--85e1c7bf-fe4a-4c4e-bd0c-08cae90a8e47"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--789aae94-1312-4aab-b415-3320bf01b20c",
|
|
"created_by_ref": "identity--3f37ec47-1cf2-46c9-bc9a-335f456ebd73",
|
|
"created": "2022-06-29T15:07:39.62325Z",
|
|
"modified": "2022-06-29T15:07:39.62325Z",
|
|
"name": "Clickbait",
|
|
"description": "TA05",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "microtargeting"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0016.md",
|
|
"external_id": "T0016"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--75a460d4-730b-480f-8945-2a756876c5a5"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--cd48ce8e-e0e4-4c95-ab9d-13389b50b039",
|
|
"created_by_ref": "identity--223a5089-a1c2-4ad6-9043-a8f21293c430",
|
|
"created": "2022-06-29T15:07:39.624076Z",
|
|
"modified": "2022-06-29T15:07:39.624076Z",
|
|
"name": "Conduct Fundraising Campaigns",
|
|
"description": "TA05",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "microtargeting"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0017.md",
|
|
"external_id": "T0017"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--bbc7ec0c-6dfc-4981-b955-6bbfa5d84dae"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--9f7a1615-b64e-4598-8d4b-325b5cd885e7",
|
|
"created_by_ref": "identity--19d68843-3bfb-43e5-9181-da54e704d1f1",
|
|
"created": "2022-06-29T15:07:39.625256Z",
|
|
"modified": "2022-06-29T15:07:39.625256Z",
|
|
"name": "Purchase advertisements",
|
|
"description": "TA05",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "microtargeting"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0018.md",
|
|
"external_id": "T0018"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--d3a79065-5187-4ea6-a7b1-b6cbbe4c2c74"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--efb40471-8eff-4649-8809-e590a2662d10",
|
|
"created_by_ref": "identity--5898fcca-b1dd-4a89-8fdf-aa85bf426db3",
|
|
"created": "2022-06-29T15:07:39.62625Z",
|
|
"modified": "2022-06-29T15:07:39.62625Z",
|
|
"name": "Generate information pollution",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0019.md",
|
|
"external_id": "T0019"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a608bd3b-cb2c-4b23-8f4c-a9de74e01498"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--30280325-59ca-4e5e-adef-8f5cc26bcdb7",
|
|
"created_by_ref": "identity--262785cd-a416-4796-b07f-a370de05f5e1",
|
|
"created": "2022-06-29T15:07:39.627103Z",
|
|
"modified": "2022-06-29T15:07:39.627103Z",
|
|
"name": "Trial content",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0020.md",
|
|
"external_id": "T0020"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--bb9d31d5-7bcf-404b-b61c-55a15d828423"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--11c32299-cfec-447f-9f78-935315141c50",
|
|
"created_by_ref": "identity--c0bd9b54-2596-4b51-b1be-dd884dec665b",
|
|
"created": "2022-06-29T15:07:39.627943Z",
|
|
"modified": "2022-06-29T15:07:39.627943Z",
|
|
"name": "Memes",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0021.md",
|
|
"external_id": "T0021"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--d85a7f9d-b853-4268-8265-e41ce7590c4e"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--e9884739-ea1d-4c73-bf20-4c98709a6f28",
|
|
"created_by_ref": "identity--9e3b644d-4304-4922-820b-1b132631811a",
|
|
"created": "2022-06-29T15:07:39.629147Z",
|
|
"modified": "2022-06-29T15:07:39.629147Z",
|
|
"name": "Conspiracy narratives",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0022.md",
|
|
"external_id": "T0022"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f5b9bb2a-3b58-4078-b122-3d8c5e124e0d"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--9c80a414-47c7-4871-8874-8f8ea4584f3d",
|
|
"created_by_ref": "identity--5e9bd661-f645-4170-b4c3-f554f1fe5856",
|
|
"created": "2022-06-29T15:07:39.630148Z",
|
|
"modified": "2022-06-29T15:07:39.630148Z",
|
|
"name": "Distort facts",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0023.md",
|
|
"external_id": "T0023"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--d9a09fda-4b37-4fcd-91ab-b684c3fa55cd"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--fb3dae2e-a565-4774-8471-fca6fed9d430",
|
|
"created_by_ref": "identity--dc984f43-985c-47fc-8c77-9aea0e6aa070",
|
|
"created": "2022-06-29T15:07:39.631008Z",
|
|
"modified": "2022-06-29T15:07:39.631008Z",
|
|
"name": "Create fake videos and images",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0024.md",
|
|
"external_id": "T0024"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1586c8a4-d65b-4610-bdb5-9b325222311f"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--f458d4eb-87c9-4c24-bfa1-f4a9467edf61",
|
|
"created_by_ref": "identity--66685a31-cdb4-4d34-8bbb-4a47ca520901",
|
|
"created": "2022-06-29T15:07:39.631864Z",
|
|
"modified": "2022-06-29T15:07:39.631864Z",
|
|
"name": "Leak altered documents",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0025.md",
|
|
"external_id": "T0025"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1f0dd35c-a866-49e4-828b-1b0e8ce8f4d5"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--cf006959-4d30-4dad-a7fa-22daadc54815",
|
|
"created_by_ref": "identity--a1ff5fb1-dbfe-4a40-b1cf-66e724081929",
|
|
"created": "2022-06-29T15:07:39.632662Z",
|
|
"modified": "2022-06-29T15:07:39.632662Z",
|
|
"name": "Create pseudoscientific or disingenuous research",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0026.md",
|
|
"external_id": "T0026"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a700a9ee-fadb-47dd-a8b7-cef31d7bf29f"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--4692326b-924e-4b2f-9eca-3ecd9d7ec1be",
|
|
"created_by_ref": "identity--a1c6522c-1e7e-4772-928e-a3320546fbd7",
|
|
"created": "2022-06-29T15:07:39.633485Z",
|
|
"modified": "2022-06-29T15:07:39.633485Z",
|
|
"name": "Adapt existing narratives",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0027.md",
|
|
"external_id": "T0027"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--01a4145b-c9f6-46e4-bdb9-4978f47b8868"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--bd05490e-2878-4429-8733-11ba701979d3",
|
|
"created_by_ref": "identity--1ee45a95-6500-45a3-8ef1-0f02c522e97b",
|
|
"created": "2022-06-29T15:07:39.634308Z",
|
|
"modified": "2022-06-29T15:07:39.634308Z",
|
|
"name": "Create competing narratives",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0028.md",
|
|
"external_id": "T0028"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--2b2ce021-2309-4394-9096-87853a7c8294"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--413bb66c-1ecf-4e9d-bb68-3ea2161d449b",
|
|
"created_by_ref": "identity--6d959eae-cd5a-4520-9323-608b5f4794c8",
|
|
"created": "2022-06-29T15:07:39.635202Z",
|
|
"modified": "2022-06-29T15:07:39.635202Z",
|
|
"name": "Manipulate online polls",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "channel-selection"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0029.md",
|
|
"external_id": "T0029"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--946301e5-d900-4e74-89ec-2686d4b7718d"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--d1d9fbc5-1a0d-4c54-9284-b4254b2aedcb",
|
|
"created_by_ref": "identity--e26ac50e-fe21-4258-acc0-c5fd2fb2c003",
|
|
"created": "2022-06-29T15:07:39.636177Z",
|
|
"modified": "2022-06-29T15:07:39.636177Z",
|
|
"name": "Backstop personas",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "channel-selection"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0030.md",
|
|
"external_id": "T0030"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--3ec1d89b-ac1c-4390-ad55-c105b4086200"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--955864ba-e10a-4456-8349-2bc7858bc990",
|
|
"created_by_ref": "identity--bf9e05c5-5314-49db-b2e1-8f22fd1ffe9e",
|
|
"created": "2022-06-29T15:07:39.637017Z",
|
|
"modified": "2022-06-29T15:07:39.637017Z",
|
|
"name": "YouTube",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "channel-selection"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0031.md",
|
|
"external_id": "T0031"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--9888dac6-7b56-436b-b276-ea7774d33d22"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--90cf47b9-d7a8-4305-b5d2-43c96a27033a",
|
|
"created_by_ref": "identity--e89f1e4c-34c5-488b-b2f8-ef37beb05b7a",
|
|
"created": "2022-06-29T15:07:39.637902Z",
|
|
"modified": "2022-06-29T15:07:39.637902Z",
|
|
"name": "Reddit",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "channel-selection"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0032.md",
|
|
"external_id": "T0032"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--42473975-0d38-41eb-82c1-0b8c7a87bd2f"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--82e41ffb-af93-4beb-b45e-32ad1c2172ff",
|
|
"created_by_ref": "identity--1ea15f55-3cfb-4a5b-904d-1ba50bc281dc",
|
|
"created": "2022-06-29T15:07:39.63883Z",
|
|
"modified": "2022-06-29T15:07:39.63883Z",
|
|
"name": "Instagram",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "channel-selection"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0033.md",
|
|
"external_id": "T0033"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--5447d252-3be0-4121-9f30-86470453af86"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--44fb71ec-858f-4392-aa7e-308876d787ca",
|
|
"created_by_ref": "identity--fc7750ea-d603-4def-b797-c2a1ce6ecd39",
|
|
"created": "2022-06-29T15:07:39.639769Z",
|
|
"modified": "2022-06-29T15:07:39.639769Z",
|
|
"name": "LinkedIn",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "channel-selection"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0034.md",
|
|
"external_id": "T0034"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--fdae8056-6642-4a17-9fe0-6cfaa22621b9"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--fd760a8e-d115-45ee-9399-6fb9d98eabba",
|
|
"created_by_ref": "identity--ed36f4ba-651d-41f6-b60e-4a341b7ce4e3",
|
|
"created": "2022-06-29T15:07:39.640692Z",
|
|
"modified": "2022-06-29T15:07:39.640692Z",
|
|
"name": "Pinterest",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "channel-selection"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0035.md",
|
|
"external_id": "T0035"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--b3423c1e-00b2-46bd-8b74-902ddfe3b405"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--e871e99b-abc1-4b1c-b00d-51c247d7d259",
|
|
"created_by_ref": "identity--4131f25c-10a7-4492-b1dd-b0170979fcdc",
|
|
"created": "2022-06-29T15:07:39.641583Z",
|
|
"modified": "2022-06-29T15:07:39.641583Z",
|
|
"name": "WhatsApp",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "channel-selection"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0036.md",
|
|
"external_id": "T0036"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--b6ccac56-44ae-4198-8096-386ddd276815"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--7b39572f-5feb-4cb5-87f0-acfce31b5628",
|
|
"created_by_ref": "identity--e7ec42e4-3697-4b94-a995-56ffa9abd4a5",
|
|
"created": "2022-06-29T15:07:39.642437Z",
|
|
"modified": "2022-06-29T15:07:39.642437Z",
|
|
"name": "Facebook",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "channel-selection"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0037.md",
|
|
"external_id": "T0037"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c3d60b27-9ab5-4502-a47e-81c7dec8d054"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--96852c01-94f7-465f-9d58-acc33148b15c",
|
|
"created_by_ref": "identity--e5ac1460-477f-4765-be1e-40f8e6882e5c",
|
|
"created": "2022-06-29T15:07:39.643889Z",
|
|
"modified": "2022-06-29T15:07:39.643889Z",
|
|
"name": "Twitter",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "channel-selection"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0038.md",
|
|
"external_id": "T0038"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1cc171db-ad4b-4ebf-8b4a-0299906b7d09"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--81201f8f-d4af-43d2-b871-1452b99ec7ea",
|
|
"created_by_ref": "identity--2f672425-274a-4338-8cf9-836a758e7d3d",
|
|
"created": "2022-06-29T15:07:39.64475Z",
|
|
"modified": "2022-06-29T15:07:39.64475Z",
|
|
"name": "Bait legitimate influencers",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0039.md",
|
|
"external_id": "T0039"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--8bfd8806-fd70-4654-a97a-bbdf36f0c3c0"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--00aabe3c-19ef-4658-aec6-0bbf2fc9a675",
|
|
"created_by_ref": "identity--04f085f5-9ea4-4cf2-a187-57431fe27396",
|
|
"created": "2022-06-29T15:07:39.6456Z",
|
|
"modified": "2022-06-29T15:07:39.6456Z",
|
|
"name": "Demand unsurmountable proof",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0040.md",
|
|
"external_id": "T0040"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--2e6feaa4-0c79-4474-b380-c16ffdd4799e"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--f8a959f9-b687-4c31-9deb-5a06e63cd875",
|
|
"created_by_ref": "identity--283d6581-1c8a-458b-af6a-50dd0e9b8863",
|
|
"created": "2022-06-29T15:07:39.646459Z",
|
|
"modified": "2022-06-29T15:07:39.646459Z",
|
|
"name": "Deny involvement",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0041.md",
|
|
"external_id": "T0041"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--07ac7a54-b81f-4437-9ec9-9265e903bb6a"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--15befb69-cd3a-436d-aacb-65d4a31233d9",
|
|
"created_by_ref": "identity--afc71eb6-14b5-44fd-a7a1-35f88f2fbb79",
|
|
"created": "2022-06-29T15:07:39.647547Z",
|
|
"modified": "2022-06-29T15:07:39.647547Z",
|
|
"name": "Kernel of Truth",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0042.md",
|
|
"external_id": "T0042"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--fc4be82a-c933-4783-9df4-b5b0c7d80a91"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--b26a909a-26cf-475a-9073-cd1c05a6666e",
|
|
"created_by_ref": "identity--fcd733c4-48df-46d7-ae37-faa74290cd9b",
|
|
"created": "2022-06-29T15:07:39.648402Z",
|
|
"modified": "2022-06-29T15:07:39.648402Z",
|
|
"name": "Use SMS/ WhatsApp/ Chat apps",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0043.md",
|
|
"external_id": "T0043"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--11403d9c-d1ed-4ef4-add4-f556a75e91db"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--fc64a9ea-e918-4234-a887-197783cf1b24",
|
|
"created_by_ref": "identity--4c0cfcee-6771-424a-9949-048a1eb143ec",
|
|
"created": "2022-06-29T15:07:39.649313Z",
|
|
"modified": "2022-06-29T15:07:39.649313Z",
|
|
"name": "Seed distortions",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0044.md",
|
|
"external_id": "T0044"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--da4bb9c7-d6f4-477d-80a7-e5770ec4e3fa"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--b00e5ddc-d058-4c95-bbeb-e319c45c4209",
|
|
"created_by_ref": "identity--233e6a79-d4b8-47ff-8069-a7b3ba016fe5",
|
|
"created": "2022-06-29T15:07:39.650266Z",
|
|
"modified": "2022-06-29T15:07:39.650266Z",
|
|
"name": "Use fake experts",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0045.md",
|
|
"external_id": "T0045"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--03fa1f90-ecd1-4c5f-8250-f0342df68267"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--bc283648-febe-4abc-b09f-9f57e4778c2e",
|
|
"created_by_ref": "identity--2b8570fe-aece-4178-9c33-138d0019412e",
|
|
"created": "2022-06-29T15:07:39.651502Z",
|
|
"modified": "2022-06-29T15:07:39.651502Z",
|
|
"name": "Search Engine Optimization",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0046.md",
|
|
"external_id": "T0046"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--b4c34737-3f47-4665-ab2d-1e7fde67bfae"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--0527b90a-1628-48ee-9a63-b9fa8af1f05e",
|
|
"created_by_ref": "identity--8a2b8d9d-b740-4810-aabd-16072cdf0f97",
|
|
"created": "2022-06-29T15:07:39.652346Z",
|
|
"modified": "2022-06-29T15:07:39.652346Z",
|
|
"name": "Muzzle social media as a political force",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0047.md",
|
|
"external_id": "T0047"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--42cb73d0-14c4-44e2-a722-466ca266ee78"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--bc725cb5-9c6a-42da-880b-b6e0eacaf546",
|
|
"created_by_ref": "identity--9bc3e2bc-a39d-46e5-bc80-83c740de79f1",
|
|
"created": "2022-06-29T15:07:39.65319Z",
|
|
"modified": "2022-06-29T15:07:39.65319Z",
|
|
"name": "Cow online opinion leaders",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0048.md",
|
|
"external_id": "T0048"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--e68b79a3-2136-4a07-80bb-7b4b50e17f29"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--aac86bd2-8f32-4177-9bfe-26ab811b3a58",
|
|
"created_by_ref": "identity--cde3ccc9-4f7e-4dde-9c25-912f897161ca",
|
|
"created": "2022-06-29T15:07:39.65403Z",
|
|
"modified": "2022-06-29T15:07:39.65403Z",
|
|
"name": "Flooding",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0049.md",
|
|
"external_id": "T0049"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--0f2d59a5-d16b-41d9-b7b9-5e89aedb76c6"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--a85945cc-b898-433a-be92-eca07ec1aa91",
|
|
"created_by_ref": "identity--575dfd43-182b-4124-a79d-46cf773eb1d6",
|
|
"created": "2022-06-29T15:07:39.654957Z",
|
|
"modified": "2022-06-29T15:07:39.654957Z",
|
|
"name": "Cheerleading domestic social media ops",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0050.md",
|
|
"external_id": "T0050"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--2baad641-b04a-493e-9bf1-5eb7e5b2cbf5"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--1c8f05cf-413d-49a3-94b6-58a7a98d7ef8",
|
|
"created_by_ref": "identity--63b90850-3d52-40de-829f-b0a109696675",
|
|
"created": "2022-06-29T15:07:39.655847Z",
|
|
"modified": "2022-06-29T15:07:39.655847Z",
|
|
"name": "Fabricate social media comment",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0051.md",
|
|
"external_id": "T0051"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--9dbb9ca6-8a99-4387-b8c1-0612364eba1d"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--0d1dcc47-dbd5-4b4d-bedf-e6b5321086a9",
|
|
"created_by_ref": "identity--edc70461-aee4-45d2-af9b-a7bfd245f83a",
|
|
"created": "2022-06-29T15:07:39.656664Z",
|
|
"modified": "2022-06-29T15:07:39.656664Z",
|
|
"name": "Tertiary sites amplify news",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0052.md",
|
|
"external_id": "T0052"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--29dfd462-e316-4667-b832-6fd1045344e2"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--40e9751b-4af7-4433-936f-ba4c04c03a0a",
|
|
"created_by_ref": "identity--dd806483-fcc5-4f59-bbf3-f93289e01791",
|
|
"created": "2022-06-29T15:07:39.657442Z",
|
|
"modified": "2022-06-29T15:07:39.657442Z",
|
|
"name": "Twitter trolls amplify and manipulate",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0053.md",
|
|
"external_id": "T0053"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f93162c6-e04b-4252-82e6-d663c85d0d1a"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--0a778eec-5cdd-4a35-a178-6453d9295c71",
|
|
"created_by_ref": "identity--36599099-8622-4849-bda0-6f36fe4420e5",
|
|
"created": "2022-06-29T15:07:39.658726Z",
|
|
"modified": "2022-06-29T15:07:39.658726Z",
|
|
"name": "Twitter bots amplify",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0054.md",
|
|
"external_id": "T0054"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--e14b09fe-550c-4303-8560-679ebd896b10"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--6bb89169-af6e-41d7-8ee6-5e6ca0778b23",
|
|
"created_by_ref": "identity--b7adce0d-6fd8-4d25-8254-f34ce9721b28",
|
|
"created": "2022-06-29T15:07:39.659606Z",
|
|
"modified": "2022-06-29T15:07:39.659606Z",
|
|
"name": "Use hashtag",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0055.md",
|
|
"external_id": "T0055"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a16dbe3d-b808-4942-a563-13e088a7dc1a"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--08061315-22ae-4838-8413-6909586a0356",
|
|
"created_by_ref": "identity--2580ddb8-9b92-4654-97dd-19ded33583ee",
|
|
"created": "2022-06-29T15:07:39.660319Z",
|
|
"modified": "2022-06-29T15:07:39.660319Z",
|
|
"name": "Dedicated channels disseminate information pollution",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0056.md",
|
|
"external_id": "T0056"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--630ff03e-fbcf-4d93-baf7-d06661fb65db"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--7b3dd190-7a38-4944-aeb0-e1d7592c8c3b",
|
|
"created_by_ref": "identity--6a5453fb-9ad6-45d7-ada3-7d8e65ea41ad",
|
|
"created": "2022-06-29T15:07:39.66129Z",
|
|
"modified": "2022-06-29T15:07:39.66129Z",
|
|
"name": "Organise remote rallies and events",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0057.md",
|
|
"external_id": "T0057"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--6ff67578-a4a0-4353-844b-2d86bb87e4a0"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--b87a6150-0913-4161-b6f2-190881a12058",
|
|
"created_by_ref": "identity--7d23cd01-4491-4667-99c8-e48e5fda3a57",
|
|
"created": "2022-06-29T15:07:39.662167Z",
|
|
"modified": "2022-06-29T15:07:39.662167Z",
|
|
"name": "Legacy web content",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persistence"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0058.md",
|
|
"external_id": "T0058"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c00b8748-a8cb-49d9-aa00-ce0d55d185a4"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ee02b052-755c-4e8a-ad6d-7bab7ec88a84",
|
|
"created_by_ref": "identity--bc243e05-9718-4edf-bbca-4af2b8b29971",
|
|
"created": "2022-06-29T15:07:39.662962Z",
|
|
"modified": "2022-06-29T15:07:39.662962Z",
|
|
"name": "Play the long game",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persistence"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0059.md",
|
|
"external_id": "T0059"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--16114ef5-a787-4b4a-8736-5198f48011c4"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--b463d063-b47b-42ad-ae6c-63ddf738b509",
|
|
"created_by_ref": "identity--81ae2c07-7ef0-40ef-b13e-3c693905a251",
|
|
"created": "2022-06-29T15:07:39.66387Z",
|
|
"modified": "2022-06-29T15:07:39.66387Z",
|
|
"name": "Continue to amplify",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persistence"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0060.md",
|
|
"external_id": "T0060"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--25772063-9811-4713-a2d4-6136c3dd1a84"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--4ccf7878-ca79-443a-bc53-dbc5a32cdca5",
|
|
"created_by_ref": "identity--081e355e-4913-403b-b5b0-2decfe75acb2",
|
|
"created": "2022-06-29T15:07:39.664619Z",
|
|
"modified": "2022-06-29T15:07:39.664619Z",
|
|
"name": "Sell merchandising",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0061.md",
|
|
"external_id": "T0061"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--985e7b21-f851-4d00-a243-81ae85893185"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--3491ca2c-d41c-441e-8f25-6b095b045eec",
|
|
"created_by_ref": "identity--64060b20-48ea-4363-93c4-b0595d45008b",
|
|
"created": "2022-06-29T15:07:39.665912Z",
|
|
"modified": "2022-06-29T15:07:39.665912Z",
|
|
"name": "Behaviour changes",
|
|
"description": "TA12",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "measure-effectiveness"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0062.md",
|
|
"external_id": "T0062"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--7b816be9-3a03-4d91-b131-4da2f4a392c4"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--18f72131-588a-45b9-9c27-e98d8afc3894",
|
|
"created_by_ref": "identity--beb9c87a-7b02-47ee-9bdc-fcc81dbefc06",
|
|
"created": "2022-06-29T15:07:39.666666Z",
|
|
"modified": "2022-06-29T15:07:39.666666Z",
|
|
"name": "Message reach",
|
|
"description": "TA12",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "measure-effectiveness"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0063.md",
|
|
"external_id": "T0063"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--eef2db77-ca5e-45b6-b527-8621c5ee7fe8"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ecefdcdc-b3f2-4ab4-a68f-e0d3eb1f1e93",
|
|
"created_by_ref": "identity--1c32f480-43ff-465e-ae3f-27a5c26492fd",
|
|
"created": "2022-06-29T15:07:39.667406Z",
|
|
"modified": "2022-06-29T15:07:39.667406Z",
|
|
"name": "Social media engagement",
|
|
"description": "TA12",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "measure-effectiveness"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0064.md",
|
|
"external_id": "T0064"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--56fb8dbc-d520-4738-a907-b2c8268fe0e3"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--bc94c49f-2121-4e3b-8f1a-8a72d9df4f8d",
|
|
"created_by_ref": "identity--1649545c-f9ba-40d6-8819-527b358f0320",
|
|
"created": "2022-06-29T15:07:39.668156Z",
|
|
"modified": "2022-06-29T15:07:39.668156Z",
|
|
"name": "Use physical broadcast capabilities",
|
|
"description": "TA04",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-networks"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0065.md",
|
|
"external_id": "T0065"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--b37e3f6b-8488-45e6-acaf-35add129b24c"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--f2292557-c4d2-49c8-bac5-2bdb9ff43165",
|
|
"created_by_ref": "identity--3d83a869-9099-4861-af28-bcfcd5bd09a1",
|
|
"created": "2022-06-29T15:07:39.668922Z",
|
|
"modified": "2022-06-29T15:07:39.668922Z",
|
|
"name": "Degrade adversary",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "objective-planning"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0066.md",
|
|
"external_id": "T0066"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--7f0968ff-b34a-4453-a8eb-cdabb7a5f0e2"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ee320afa-9925-4609-ba01-1b345aba7abd",
|
|
"created_by_ref": "identity--12032cf4-860c-4ce5-b3ed-79fe470d0691",
|
|
"created": "2022-06-29T15:07:39.669754Z",
|
|
"modified": "2022-06-29T15:07:39.669754Z",
|
|
"name": "Plan to discredit credible sources",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "objective-planning"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0067.md",
|
|
"external_id": "T0067"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--054c9054-713c-4d33-b64a-782762b19697"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ce6626db-4c1a-4b99-bc4c-bc2d5898c186",
|
|
"created_by_ref": "identity--41a22faf-481a-479c-ab75-a891814eb827",
|
|
"created": "2022-06-29T15:07:39.670552Z",
|
|
"modified": "2022-06-29T15:07:39.670552Z",
|
|
"name": "Respond to breaking news event",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "objective-planning"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0068.md",
|
|
"external_id": "T0068"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--0f810227-bdc9-41fe-9306-5d7458763f2d"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--40c5fb5f-3b61-44ed-9f9d-206b26fda76c",
|
|
"created_by_ref": "identity--b9e7689b-2823-42f4-9d4e-87e719780725",
|
|
"created": "2022-06-29T15:07:39.671351Z",
|
|
"modified": "2022-06-29T15:07:39.671351Z",
|
|
"name": "Respond to active crisis",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "objective-planning"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0069.md",
|
|
"external_id": "T0069"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f54a004d-60a8-4869-8458-0eea4167d0d2"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--5661a6e3-4eef-4983-bf67-ade655c61b41",
|
|
"created_by_ref": "identity--1edf1f3b-897f-4983-b2e9-ada3f05908bf",
|
|
"created": "2022-06-29T15:07:39.672282Z",
|
|
"modified": "2022-06-29T15:07:39.672282Z",
|
|
"name": "Analyze existing communities",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "objective-planning"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0070.md",
|
|
"external_id": "T0070"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--2f71a7e8-5ad1-4d6e-9ec5-4e1b5b764f2e"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--58e8704d-e76c-4b1d-8255-a980403e2ec5",
|
|
"created_by_ref": "identity--2851616b-dd3e-43b3-88f8-007a7f6a1532",
|
|
"created": "2022-06-29T15:07:39.673166Z",
|
|
"modified": "2022-06-29T15:07:39.673166Z",
|
|
"name": "Find echo chambers",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "conduct-center-of-gravity-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0071.md",
|
|
"external_id": "T0071"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--46bba0a9-84c1-436e-abed-baaa07827448"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--1bd1d867-a9bc-46ee-8b3b-d8907ecb4986",
|
|
"created_by_ref": "identity--eb576670-0d92-489f-8bb8-ca4af90bc1ff",
|
|
"created": "2022-06-29T15:07:39.674013Z",
|
|
"modified": "2022-06-29T15:07:39.674013Z",
|
|
"name": "Segment audiences",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "conduct-center-of-gravity-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0072.md",
|
|
"external_id": "T0072"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--9d95da9e-41d5-4ca6-9230-3afda70cca8f"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1,0"
|
|
},
|
|
{
|
|
"type": "x-mitre-matrix",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-matrix--efa3ff0a-9e96-44ba-9a87-f46cc11a01c4",
|
|
"created": "2022-06-29T15:07:39.674372Z",
|
|
"modified": "2022-06-29T15:07:39.674372Z",
|
|
"name": "DISARM Framework",
|
|
"description": "DISARM is a framework designed for describing and understanding disinformation incidents.",
|
|
"tactic_refs": [
|
|
"x-mitre-tactic--45968fd4-4fdb-4ba2-82e1-f5e5c148e325",
|
|
"x-mitre-tactic--2f02c1ff-9e62-469c-a8bf-d9a6b1cc7917",
|
|
"x-mitre-tactic--49b9b288-58bb-41b8-b2b7-570e10025264",
|
|
"x-mitre-tactic--f2d0efbf-0f86-419b-917b-2f3dc904094d",
|
|
"x-mitre-tactic--a9cc9713-f33b-44a8-868b-c59950406f76",
|
|
"x-mitre-tactic--6c6c13f5-aa72-42e5-a9d2-4700306c353e",
|
|
"x-mitre-tactic--5c04a4d3-dd32-458b-952e-1e05f2861cbd",
|
|
"x-mitre-tactic--ddb9dd2f-6a39-46e8-9b3c-a25c12cef614",
|
|
"x-mitre-tactic--ede1dc9b-6afa-46d1-a42c-6b3e791bc1eb",
|
|
"x-mitre-tactic--66b91148-79b6-472f-b48b-5c74113088dc",
|
|
"x-mitre-tactic--81feb109-6d02-468e-bd47-006ce9d9aafa",
|
|
"x-mitre-tactic--898251e6-a030-4ff1-8037-2c4b49e85ed3",
|
|
"x-mitre-tactic--6a8a5578-8e24-4599-b5ce-556f207927c7"
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation",
|
|
"external_id": "DISARM"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|