mirror of
https://github.com/DISARMFoundation/DISARMframeworks.git
synced 2025-01-21 12:11:00 -05:00
40 lines
1.8 KiB
JSON
40 lines
1.8 KiB
JSON
{
|
|
"type": "bundle",
|
|
"id": "bundle--3f3c13f0-539f-4705-97f8-3f3012ff20d5",
|
|
"objects": [
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--973f4b45-2d71-4d57-a1c4-58411b90fa5c",
|
|
"created_by_ref": "identity--fd2ee5ff-2e67-43f9-9a23-ece8438413c3",
|
|
"created": "2022-07-02T19:59:12.730481Z",
|
|
"modified": "2022-07-02T19:59:12.730481Z",
|
|
"name": "Use Pseudonyms",
|
|
"description": "An operation may use pseudonyms, or fake names, to mask the identity of operation accounts, publish anonymous content, or otherwise use falsified personas to conceal identity of the operation. An operation may coordinate pseudonyms across multiple platforms, for example, by writing an article under a pseudonym and then posting a link to the article on social media on an account with the same falsified name. ",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0128.001.md",
|
|
"external_id": "T0128.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--59fc4478-4c10-493e-9a23-3c04a961614e"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
}
|
|
]
|
|
}
|