mirror of
https://github.com/DISARMFoundation/DISARMframeworks.git
synced 2025-01-06 13:08:14 -05:00
40 lines
2.1 KiB
JSON
40 lines
2.1 KiB
JSON
{
|
|
"type": "bundle",
|
|
"id": "bundle--0f8c57bd-22b3-432c-8909-b3a14f9954bb",
|
|
"objects": [
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--09c83f74-e10c-452e-b55b-37807cc79c95",
|
|
"created_by_ref": "identity--047518ae-fd89-411a-ac53-0d262d59768c",
|
|
"created": "2022-07-02T19:59:12.660812Z",
|
|
"modified": "2022-07-02T19:59:12.660812Z",
|
|
"name": "Enlist Troll Accounts",
|
|
"description": "An influence operation may hire trolls, or human operators of fake accounts that aim to provoke others by posting and amplifying content about controversial issues. Trolls can serve to discredit an influence operation\u2019s opposition or bring attention to the operation\u2019s cause through debate. \nClassic trolls refer to regular people who troll for personal reasons, such as attention-seeking or boredom. Classic trolls may advance operation narratives by coincidence but are not directly affiliated with any larger operation. Conversely, hybrid trolls act on behalf of another institution, such as a state or financial organization, and post content with a specific ideological goal. Hybrid trolls may be highly advanced and institutionalized or less organized and work for a single individual. ",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0091.003.md",
|
|
"external_id": "T0091.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--7e51d2e1-3838-4081-a1a0-d499970c5de3"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
}
|
|
]
|
|
}
|