DISARMframeworks/generated_pages/tactics/TA11.md

Tactic TA11: Persist in the Information Environment

• Summary: Persist in the Information Space refers to taking measures that allow an operation to maintain its presence and avoid takedown by an external entity. Techniques in Persist in the Information Space help campaigns operate without detection and appear legitimate to the target audience and platform monitoring services. Influence operations on social media often persist online by varying the type of information assets and platforms used throughout the campaign.

• Belongs to phase: P03

Tasks
TK0023 retention
TK0024 customer relationship
TK0025 advocacy/ zealotry
TK0026 conversion
TK0027 keep recruiting/prospecting
TK0041 OPSEC for TA11

Techniques
T0059 Play the long game
T0060 Continue to Amplify
T0128 Conceal People
T0128.001 Use Pseudonyms
T0128.002 Conceal Network Identity
T0128.003 Distance Reputable Individuals from Operation
T0128.004 Launder Accounts
T0128.005 Change Names of Accounts
T0129 Conceal Operational Activity
T0129.001 Conceal Network Identity
T0129.002 Generate Content Unrelated to Narrative
T0129.003 Break Association with Content
T0129.004 Delete URLs
T0129.005 Coordinate on encrypted/closed networks
T0129.006 Deny involvement
T0129.007 Delete Accounts/Account Activity
T0129.008 Redirect URLs
T0129.009 Remove Post Origins
T0129.010 Misattribute Activity
T0130 Conceal Infrastructure
T0130.001 Conceal Sponsorship
T0130.002 Utilize Bulletproof Hosting
T0130.003 Use Shell Organizations
T0130.004 Use Cryptocurrency
T0130.005 Obfuscate Payment
T0131 Exploit TOS/Content Moderation
T0131.001 Legacy web content
T0131.002 Post Borderline Content

Counters	Response types
C00131 Seize and analyse botnet servers	D02
C00138 Spam domestic actors with lawsuits	D03
C00139 Weaponise youtube content matrices	D03
C00143 (botnet) DMCA takedown requests to waste group time	D04

DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW