mirror of
https://github.com/DISARMFoundation/DISARMframeworks.git
synced 2024-10-01 01:45:36 -04:00
c888a7d6f4
Updated subtechniques so that now all have a description. Also made slight name changes to a few techniques and subtechniques but retained the disarm_id and overall nature of all of them
10491 lines
417 KiB
JSON
10491 lines
417 KiB
JSON
{
|
|
"type": "bundle",
|
|
"id": "bundle--e020c1e7-3134-48fc-9416-d915f05ec6a9",
|
|
"objects": [
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--7d0ab1db-b6fa-4be4-acc1-49d6de17835e",
|
|
"created_by_ref": "identity--67c4f5a6-d2cb-4ffb-9c7e-7d38180f108e",
|
|
"created": "2022-07-02T19:37:33.806285Z",
|
|
"modified": "2022-07-02T19:37:33.806285Z",
|
|
"name": "Plan Strategy",
|
|
"description": "Define the desired end state, i.e. the set of required conditions that defines achievement of all objectives.",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA01.md",
|
|
"external_id": "TA01"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--77470fc4-91ab-4259-9531-aa66a9d64ff4"
|
|
],
|
|
"x_mitre_shortname": "plan-strategy"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--75ee5c1f-0d5f-4ae0-af72-79fb6ad99553",
|
|
"created_by_ref": "identity--27cc0239-4142-4a71-8d56-2ee7040fa393",
|
|
"created": "2022-07-02T19:37:33.806746Z",
|
|
"modified": "2022-07-02T19:37:33.806746Z",
|
|
"name": "Plan Objectives",
|
|
"description": "Set clearly defined, measurable, and achievable objectives. Achieving objectives ties execution of tactical tasks to reaching the desired end state. There are four primary considerations: \n- Each desired effect should link directly to one or more objectives \n- The effect should be measurable \n- The objective statement should not specify the way and means of accomplishment \n- The effect should be distinguishable from the objective it supports as a condition for success, not as another objective or task.",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA02.md",
|
|
"external_id": "TA02"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--873a8612-609b-4102-a18e-ab2c2ea756c9"
|
|
],
|
|
"x_mitre_shortname": "plan-objectives"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--ff08ad89-689f-411d-93e7-958ea562ef02",
|
|
"created_by_ref": "identity--4077fff6-8224-4975-a240-1c9ac04b40de",
|
|
"created": "2022-07-02T19:37:33.807156Z",
|
|
"modified": "2022-07-02T19:37:33.807156Z",
|
|
"name": "Microtarget",
|
|
"description": "Target very specific populations of people",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA05.md",
|
|
"external_id": "TA05"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--acee02cf-d048-45b2-9662-42ec134acf1a"
|
|
],
|
|
"x_mitre_shortname": "microtarget"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--70a7547e-a1cc-4883-a362-a09b4773a2f2",
|
|
"created_by_ref": "identity--c6cf23e0-e4c3-4a8c-a73a-8884d447eabf",
|
|
"created": "2022-07-02T19:37:33.807562Z",
|
|
"modified": "2022-07-02T19:37:33.807562Z",
|
|
"name": "Develop Content",
|
|
"description": "Create or acquire text, images, and other content",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA06.md",
|
|
"external_id": "TA06"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--75cdd83d-0fb5-4aec-8045-873058200b34"
|
|
],
|
|
"x_mitre_shortname": "develop-content"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--4afb4146-7d6d-407b-be8f-49a4831ff397",
|
|
"created_by_ref": "identity--008391fb-fdd3-4006-bdaf-7b5dbadd17ed",
|
|
"created": "2022-07-02T19:37:33.807971Z",
|
|
"modified": "2022-07-02T19:37:33.807971Z",
|
|
"name": "Select Channels and Affordances",
|
|
"description": "Selecting platforms and affordances assesses which online or offline platforms and their associated affordances maximize an influence operation\u2019s ability to reach its target audience. To select the most appropriate platform(s), an operation may assess the technological affordances including platform algorithms, terms of service, permitted content types, or other attributes that determine platform usability and accessibility. Selecting platforms includes both choosing platforms on which the operation will publish its own content and platforms on which the operation will attempt to restrict adversarial content.",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA07.md",
|
|
"external_id": "TA07"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--4d556538-7853-4abd-a03c-1fca8a755898"
|
|
],
|
|
"x_mitre_shortname": "select-channels-and-affordances"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--c068c80d-b032-43f0-aae1-6849e481e511",
|
|
"created_by_ref": "identity--5c253227-f4e4-4ea7-8028-be843133b9cd",
|
|
"created": "2022-07-02T19:37:33.80837Z",
|
|
"modified": "2022-07-02T19:37:33.80837Z",
|
|
"name": "Conduct Pump Priming",
|
|
"description": "Release content on a targetted small scale, prior to general release, including releasing seed. Used for preparation before broader release, and as message honing. Used for preparation before broader release, and as message honing. ",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA08.md",
|
|
"external_id": "TA08"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--84f4f78f-ede1-4a49-81e1-b1f4a958a48f"
|
|
],
|
|
"x_mitre_shortname": "conduct-pump-priming"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--76f5f41d-a890-4c4e-8011-28ac6484956d",
|
|
"created_by_ref": "identity--5c8c4241-9e16-4dfb-a391-97fe59cc59a4",
|
|
"created": "2022-07-02T19:37:33.808764Z",
|
|
"modified": "2022-07-02T19:37:33.808764Z",
|
|
"name": "Deliver Content",
|
|
"description": "Release content to general public or larger population",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA09.md",
|
|
"external_id": "TA09"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a5e15fad-e6cb-49a7-926d-43dc816e177b"
|
|
],
|
|
"x_mitre_shortname": "deliver-content"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--4a308bda-5256-415d-8502-1d21f81ad663",
|
|
"created_by_ref": "identity--8b4cff32-99ff-481f-ae2d-48f4d844f820",
|
|
"created": "2022-07-02T19:37:33.809167Z",
|
|
"modified": "2022-07-02T19:37:33.809167Z",
|
|
"name": "Drive Offline Activity",
|
|
"description": "Move incident/campaign from online to offline. Encouraging users to move from the platform on which they initially viewed operation content and engage in the physical information space or offline world. This may include operation-aligned rallies or protests, radio, newspaper, or billboards. An influence operation may drive to physical forums to diversify its information channels and facilitate spaces where the target audience can engage with both operation content and like-minded individuals offline. ",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA10.md",
|
|
"external_id": "TA10"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--e439c781-4bf4-495e-9aa7-40b99d62e613"
|
|
],
|
|
"x_mitre_shortname": "drive-offline-activity"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--4f4b3036-b624-420d-bede-ebf462049d56",
|
|
"created_by_ref": "identity--bcf8a625-b6c5-4c63-abe9-8b0102ef67aa",
|
|
"created": "2022-07-02T19:37:33.809568Z",
|
|
"modified": "2022-07-02T19:37:33.809568Z",
|
|
"name": "Persist in the Information Environment",
|
|
"description": "Persist in the Information Space refers to taking measures that allow an operation to maintain its presence and avoid takedown by an external entity. Techniques in Persist in the Information Space help campaigns operate without detection and appear legitimate to the target audience and platform monitoring services. Influence operations on social media often persist online by varying the type of information assets and platforms used throughout the campaign.",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA11.md",
|
|
"external_id": "TA11"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--bbbdaae2-da9f-45ff-8b80-9c0ab679a570"
|
|
],
|
|
"x_mitre_shortname": "persist-in-the-information-environment"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--b289831d-3978-47c4-aeef-0551c83d119f",
|
|
"created_by_ref": "identity--0785bc2b-8b8f-4d1f-ae8e-fb8735df5df4",
|
|
"created": "2022-07-02T19:37:33.809971Z",
|
|
"modified": "2022-07-02T19:37:33.809971Z",
|
|
"name": "Assess Effectiveness",
|
|
"description": "Assess effectiveness of action, for use in future plans ",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA12.md",
|
|
"external_id": "TA12"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--6f4d3055-a36d-4f91-8532-0aa73e6ee6e6"
|
|
],
|
|
"x_mitre_shortname": "assess-effectiveness"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--d62bebf4-5a41-4307-a98a-b1e96a519c90",
|
|
"created_by_ref": "identity--bbeaef8d-b522-4025-83d5-ac981926ace5",
|
|
"created": "2022-07-02T19:37:33.81037Z",
|
|
"modified": "2022-07-02T19:37:33.81037Z",
|
|
"name": "Target Audience Analysis",
|
|
"description": "Identifying and analyzing the target audience examines target audience member locations, political affiliations, financial situations, and other attributes that an influence operation may incorporate into its messaging strategy. During this tactic, influence operations may also identify existing similarities and differences between target audience members to unite like groups and divide opposing groups. Identifying and analyzing target audience members allows influence operations to tailor operation strategy and content to their analysis. ",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA13.md",
|
|
"external_id": "TA13"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--6e8e9574-2a05-4550-895e-6a41ca20616a"
|
|
],
|
|
"x_mitre_shortname": "target-audience-analysis"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--3ba6c81a-d2c9-4891-9a3f-17879cdc9010",
|
|
"created_by_ref": "identity--5a50d2c2-71af-4019-81e0-c885f3524ceb",
|
|
"created": "2022-07-02T19:37:33.810768Z",
|
|
"modified": "2022-07-02T19:37:33.810768Z",
|
|
"name": "Develop Narratives",
|
|
"description": "The promotion of beneficial master narratives is perhaps the most effective method for achieving long-term strategic narrative dominance. From a \"\"whole of society\"\" perspective the promotion of the society's core master narratives should occupy a central strategic role. From a misinformation campaign / cognitive security perpectve the tactics around master narratives center more precisely on the day-to-day promotion and reinforcement of this messaging. In other words, beneficial, high-coverage master narratives are a central strategic goal and their promotion constitutes an ongoing tactical struggle carried out at a whole-of-society level. Tactically, their promotion covers a broad spectrum of activities both on- and offline.",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA14.md",
|
|
"external_id": "TA14"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--7e525c1a-6362-4339-ab2e-ba36ed17a380"
|
|
],
|
|
"x_mitre_shortname": "develop-narratives"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--f66b1e2f-e556-4ad2-860a-7956d61f2517",
|
|
"created_by_ref": "identity--2e39dd9e-c8c5-4f77-9f70-558c2c7c32ab",
|
|
"created": "2022-07-02T19:37:33.811164Z",
|
|
"modified": "2022-07-02T19:37:33.811164Z",
|
|
"name": "Establish Social Assets",
|
|
"description": "Establishing information assets generates messaging tools, including social media accounts, operation personnel, and organizations, including directly and indirectly managed assets. For assets under their direct control, the operation can add, change, or remove these assets at will. \nEstablishing information assets allows an influence operation to promote messaging directly to the target audience without navigating through external entities. Many online influence operations create or compromise social media accounts as a primary vector of information dissemination.",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA15.md",
|
|
"external_id": "TA15"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--750498cd-e144-432b-808c-9bb4a5608700"
|
|
],
|
|
"x_mitre_shortname": "establish-social-assets"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--f60dc935-0cd7-424e-a01d-5f5b9703d63e",
|
|
"created_by_ref": "identity--ccf29195-2b3a-4cbb-91de-e346456ff333",
|
|
"created": "2022-07-02T19:37:33.811566Z",
|
|
"modified": "2022-07-02T19:37:33.811566Z",
|
|
"name": "Establish Legitimacy",
|
|
"description": "Establish assets that create trust",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA16.md",
|
|
"external_id": "TA16"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--beb9eed9-c4fb-4f67-8b74-a4994b94fca5"
|
|
],
|
|
"x_mitre_shortname": "establish-legitimacy"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--836438d3-1ece-4c01-8cee-79a50f481c00",
|
|
"created_by_ref": "identity--d9d86de1-3678-48df-943e-95e4e05052fb",
|
|
"created": "2022-07-02T19:37:33.811976Z",
|
|
"modified": "2022-07-02T19:37:33.811976Z",
|
|
"name": "Maximize Exposure",
|
|
"description": "Maximize exposure of the target audience to incident/campaign content via flooding, amplifying, and cross-posting.",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA17.md",
|
|
"external_id": "TA17"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--6b1f2042-900f-4529-8eee-b14050cf4a79"
|
|
],
|
|
"x_mitre_shortname": "maximize-exposure"
|
|
},
|
|
{
|
|
"type": "x-mitre-tactic",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-tactic--af40ad45-c8b4-4dda-a169-7ce361302b06",
|
|
"created_by_ref": "identity--913fa3cb-f01d-4b2b-a484-b8f994c3d676",
|
|
"created": "2022-07-02T19:37:33.81237Z",
|
|
"modified": "2022-07-02T19:37:33.81237Z",
|
|
"name": "Drive Online Harms",
|
|
"description": "Actions taken by an influence operation to harm their opponents in online spaces through harassment, suppression, releasing private information, and controlling the information space through offensive cyberspace operations. ",
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/tactics/TA18.md",
|
|
"external_id": "TA18"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--294a5905-1859-492d-a592-63c6a5d162c0"
|
|
],
|
|
"x_mitre_shortname": "drive-online-harms"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--e51e06f7-14a1-48c8-a950-ced1ef45f0c8",
|
|
"created_by_ref": "identity--04febab1-d117-4ce7-9096-c2c9fb702bfe",
|
|
"created": "2022-07-02T19:37:33.813089Z",
|
|
"modified": "2022-07-02T19:37:33.813089Z",
|
|
"name": "Facilitate State Propaganda",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "plan-objectives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0002.md",
|
|
"external_id": "T0002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--9a9bc82a-8992-4001-bcd2-28675aab65a7"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--172f546b-a5da-4e33-b53f-dd6d090c5355",
|
|
"created_by_ref": "identity--a6f50154-4d8f-42b4-9011-680a39e340fb",
|
|
"created": "2022-07-02T19:37:33.813672Z",
|
|
"modified": "2022-07-02T19:37:33.813672Z",
|
|
"name": "Leverage Existing Narratives",
|
|
"description": "TA14",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-narratives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0003.md",
|
|
"external_id": "T0003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--fc6467c6-1d4d-4e5f-b631-d5f2ff7548b7"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--fb110a13-07ed-4a2c-bfa5-dc34cad055ed",
|
|
"created_by_ref": "identity--a76d089b-9607-4204-859c-94de1dad7718",
|
|
"created": "2022-07-02T19:37:33.814116Z",
|
|
"modified": "2022-07-02T19:37:33.814116Z",
|
|
"name": "Develop Competing Narratives",
|
|
"description": "TA14",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-narratives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0004.md",
|
|
"external_id": "T0004"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--e09975f3-d1b1-45c2-a755-923bfb4fea37"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--13924f27-cd9c-458d-9f7e-ee12d038f99f",
|
|
"created_by_ref": "identity--d9517d0f-1e04-47b4-b5bc-76542d298b32",
|
|
"created": "2022-07-02T19:37:33.814549Z",
|
|
"modified": "2022-07-02T19:37:33.814549Z",
|
|
"name": "Create Inauthentic Social Media Pages and Groups",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0007.md",
|
|
"external_id": "T0007"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--034a3ee3-6bef-4215-b36b-19ba7ac8b64a"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--1dbe8aab-313e-4be1-ba6e-841803f6cb5e",
|
|
"created_by_ref": "identity--1db8ae05-46b6-4a85-b4ee-2f06823f6c41",
|
|
"created": "2022-07-02T19:37:33.814976Z",
|
|
"modified": "2022-07-02T19:37:33.814976Z",
|
|
"name": "Create fake experts",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0009.md",
|
|
"external_id": "T0009"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--617207a4-e92a-4eec-8ebb-da710ab21c59"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--19f58260-f8b6-48d4-aaa5-c41b46df9f54",
|
|
"created_by_ref": "identity--fbe3f500-f297-4553-8886-50828356697a",
|
|
"created": "2022-07-02T19:37:33.815402Z",
|
|
"modified": "2022-07-02T19:37:33.815402Z",
|
|
"name": "Utilize Academic/Pseudoscientific Justifications",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0009.001.md",
|
|
"external_id": "T0009.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a5bdd027-7a82-4d68-8e73-0029da6a1765"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--d19da30b-76ae-413b-a7ff-9b5801dc9db6",
|
|
"created_by_ref": "identity--52b14c71-292b-475b-85e2-0cd467c843fa",
|
|
"created": "2022-07-02T19:37:33.815834Z",
|
|
"modified": "2022-07-02T19:37:33.815834Z",
|
|
"name": "Cultivate ignorant agents",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0010.md",
|
|
"external_id": "T0010"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--52b0dc6c-eb7c-42c3-a4f8-6f7a2fdeca1b"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--4998044f-0372-4231-9c87-de0582bfb145",
|
|
"created_by_ref": "identity--71531212-5cd2-40bd-9f79-5d90282b1eb9",
|
|
"created": "2022-07-02T19:37:33.816262Z",
|
|
"modified": "2022-07-02T19:37:33.816262Z",
|
|
"name": "Compromise legitimate accounts",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0011.md",
|
|
"external_id": "T0011"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--98a8b51e-db0d-41fa-9609-9924b08a1700"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--09268e23-4531-467b-82db-01a5dd1cf1cb",
|
|
"created_by_ref": "identity--ff771820-b352-49f2-a80d-0ea103fb62c3",
|
|
"created": "2022-07-02T19:37:33.81669Z",
|
|
"modified": "2022-07-02T19:37:33.81669Z",
|
|
"name": "Create inauthentic websites",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0013.md",
|
|
"external_id": "T0013"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--36d2b84b-fefa-435d-993f-c4b84d8c46f3"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--da940163-8ead-4c97-b980-4865c3ab5934",
|
|
"created_by_ref": "identity--efaeadc9-9725-4de7-96b7-8271ae2361b0",
|
|
"created": "2022-07-02T19:37:33.81712Z",
|
|
"modified": "2022-07-02T19:37:33.81712Z",
|
|
"name": "Prepare fundraising campaigns",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0014.md",
|
|
"external_id": "T0014"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--348879aa-176f-404a-a637-945f4f7bdf68"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--94e8af0b-a38f-41cb-8c89-059e04f3c926",
|
|
"created_by_ref": "identity--eaf47657-5e00-46c5-9195-f3af190a9a50",
|
|
"created": "2022-07-02T19:37:33.817554Z",
|
|
"modified": "2022-07-02T19:37:33.817554Z",
|
|
"name": "Raise funds from malign actors",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0014.001.md",
|
|
"external_id": "T0014.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c2320526-7bf9-4741-b5de-f3843c00d4c1"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ec4ace20-522f-4584-96d2-1ae397b3334b",
|
|
"created_by_ref": "identity--23bfac19-45d1-49cf-b657-2b9dcf145578",
|
|
"created": "2022-07-02T19:37:33.817978Z",
|
|
"modified": "2022-07-02T19:37:33.817978Z",
|
|
"name": "Raise funds from ignorant agents",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0014.002.md",
|
|
"external_id": "T0014.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--59abc355-7861-49ce-8e4e-9297fa9010ed"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--f78de4a2-4284-40ea-b063-2f3f02d2a15d",
|
|
"created_by_ref": "identity--6a084d9f-b57b-4bc9-ba37-d26ab5d19751",
|
|
"created": "2022-07-02T19:37:33.818402Z",
|
|
"modified": "2022-07-02T19:37:33.818402Z",
|
|
"name": "Create hashtags and search artifacts",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0015.md",
|
|
"external_id": "T0015"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--8eb3afdb-19e6-4e6b-bfe1-08e9bb0dd759"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ac0b283b-b07e-467e-969e-5c184a46c154",
|
|
"created_by_ref": "identity--8d422a9c-32e7-40a1-8e30-5cead42d84be",
|
|
"created": "2022-07-02T19:37:33.818828Z",
|
|
"modified": "2022-07-02T19:37:33.818828Z",
|
|
"name": "Create Clickbait",
|
|
"description": "TA05",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "microtarget"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0016.md",
|
|
"external_id": "T0016"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--200e079a-edc2-4b77-86dd-893e9c9c36fc"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--8512c144-df5c-434b-85cd-e399e167bc80",
|
|
"created_by_ref": "identity--e6a77670-e8a6-45f8-b3c7-26ea8c83d408",
|
|
"created": "2022-07-02T19:37:33.819251Z",
|
|
"modified": "2022-07-02T19:37:33.819251Z",
|
|
"name": "Conduct fundraising",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0017.md",
|
|
"external_id": "T0017"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--096526dd-2c07-48a9-972b-d765b08e32a5"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--7ac296f8-0cb3-42f3-b685-668665b3ea4f",
|
|
"created_by_ref": "identity--684b5faf-d6c9-4826-b3a8-fff5b999ac64",
|
|
"created": "2022-07-02T19:37:33.819677Z",
|
|
"modified": "2022-07-02T19:37:33.819677Z",
|
|
"name": "Conduct Crowdfunding Campaigns",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0017.001.md",
|
|
"external_id": "T0017.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c11f0ead-cb0f-4cea-a3ce-78f45d2b07f8"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--392b1881-ec5a-4133-88c6-3e7ec3b2b4de",
|
|
"created_by_ref": "identity--0e4113ad-67a0-4a1e-95fa-33a8608e9ce1",
|
|
"created": "2022-07-02T19:37:33.820113Z",
|
|
"modified": "2022-07-02T19:37:33.820113Z",
|
|
"name": "Purchase Targeted Advertisements",
|
|
"description": "TA05",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "microtarget"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0018.md",
|
|
"external_id": "T0018"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--3befac77-0eb6-4167-8d61-fda4ab2886e6"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--f9d37d7b-effb-498b-9edc-d3f761a32e4e",
|
|
"created_by_ref": "identity--6634e59c-d19b-4326-aa49-8d5fe46d5fb0",
|
|
"created": "2022-07-02T19:37:33.820543Z",
|
|
"modified": "2022-07-02T19:37:33.820543Z",
|
|
"name": "Generate information pollution",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0019.md",
|
|
"external_id": "T0019"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--d2099388-a0bb-4b97-b3bc-d3262ba42078"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--23859f93-6c0b-4aea-9b03-fb6cc031b923",
|
|
"created_by_ref": "identity--9c764f5f-c92a-4718-add6-21739bda23ff",
|
|
"created": "2022-07-02T19:37:33.82097Z",
|
|
"modified": "2022-07-02T19:37:33.82097Z",
|
|
"name": "Create fake research",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0019.001.md",
|
|
"external_id": "T0019.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--5f9ceb21-1abd-4044-bbf2-c84e74b6a322"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--4cd10da2-d15f-46f9-959a-e0f08228e89f",
|
|
"created_by_ref": "identity--74271455-17a6-450e-bcf1-bea65f38ef74",
|
|
"created": "2022-07-02T19:37:33.821401Z",
|
|
"modified": "2022-07-02T19:37:33.821401Z",
|
|
"name": "Hijack Hashtags",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0019.002.md",
|
|
"external_id": "T0019.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a2e40546-1488-476a-ab9a-956029b85030"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--9500a976-deeb-40b7-b620-c29eeb1cc247",
|
|
"created_by_ref": "identity--98865c4d-b028-4863-b274-159c8cd68f1e",
|
|
"created": "2022-07-02T19:37:33.821834Z",
|
|
"modified": "2022-07-02T19:37:33.821834Z",
|
|
"name": "Trial content",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "conduct-pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0020.md",
|
|
"external_id": "T0020"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--9fcf41ed-4cd2-48f1-8e67-8a716f2edaf4"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--6f1024c4-ce62-4fe0-8505-caf689ea9b79",
|
|
"created_by_ref": "identity--db5b68da-8310-4f94-af04-8ba6733ac895",
|
|
"created": "2022-07-02T19:37:33.822273Z",
|
|
"modified": "2022-07-02T19:37:33.822273Z",
|
|
"name": "Leverage Conspiracy Theory Narratives",
|
|
"description": "TA14",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-narratives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0022.md",
|
|
"external_id": "T0022"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--e4ee8ee8-86fe-417b-864f-5b0de5c898b2"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--0a4c73f6-5175-432d-b76a-76148316c86f",
|
|
"created_by_ref": "identity--bcf3e51d-6ad7-49e3-9aba-ea6fe3a994be",
|
|
"created": "2022-07-02T19:37:33.822702Z",
|
|
"modified": "2022-07-02T19:37:33.822702Z",
|
|
"name": "Amplify Existing Conspiracy Theory Narratives",
|
|
"description": "TA14",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-narratives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0022.001.md",
|
|
"external_id": "T0022.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--62cd8f40-dabd-487e-a0ad-b018e226471b"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--88087955-834b-432b-89f8-d4ce55c051e8",
|
|
"created_by_ref": "identity--27f150c3-1f90-4e5e-a7d4-ffd4e8bd9ac1",
|
|
"created": "2022-07-02T19:37:33.823217Z",
|
|
"modified": "2022-07-02T19:37:33.823217Z",
|
|
"name": "Develop Original Conspiracy Theory Narratives",
|
|
"description": "TA14",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-narratives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0022.002.md",
|
|
"external_id": "T0022.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--630788fc-8d2c-4555-8109-e0f1ee80eb57"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--41dad847-900a-4c74-aca5-7f0227800f42",
|
|
"created_by_ref": "identity--52548aab-bed2-4ac5-8652-768eef4e0a9d",
|
|
"created": "2022-07-02T19:37:33.823653Z",
|
|
"modified": "2022-07-02T19:37:33.823653Z",
|
|
"name": "Distort facts",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0023.md",
|
|
"external_id": "T0023"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a817e152-29f7-426e-b6cc-869632cec1e2"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--0408630c-c29f-4235-b7fc-7215bbf46456",
|
|
"created_by_ref": "identity--2dda1284-686d-4996-bf63-2cf6048467ab",
|
|
"created": "2022-07-02T19:37:33.824079Z",
|
|
"modified": "2022-07-02T19:37:33.824079Z",
|
|
"name": "Reframe Context",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0023.001.md",
|
|
"external_id": "T0023.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--9df42b49-73a9-4bcd-8f27-df2f91d8b028"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--5b6b3472-c1d2-4a13-bfd5-9111ff1fd4ba",
|
|
"created_by_ref": "identity--c6e945f3-044e-4507-8694-2c4fa81da59c",
|
|
"created": "2022-07-02T19:37:33.824505Z",
|
|
"modified": "2022-07-02T19:37:33.824505Z",
|
|
"name": "Edit Open-Source Content",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0023.002.md",
|
|
"external_id": "T0023.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c8bf2819-0438-473f-98ac-9263136e1f49"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--d21871f1-aad4-42fc-ae98-72e0cfc37419",
|
|
"created_by_ref": "identity--198b958d-fb42-483c-a512-f632da4b4a9d",
|
|
"created": "2022-07-02T19:37:33.824934Z",
|
|
"modified": "2022-07-02T19:37:33.824934Z",
|
|
"name": "Online polls",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0029.md",
|
|
"external_id": "T0029"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--2d06a465-405d-4855-ae3c-2a67b4d83321"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--b59d2a75-5929-484f-bccf-b385d9b88a6b",
|
|
"created_by_ref": "identity--4a16fab0-f33a-40f2-a1ed-b6e35ced3461",
|
|
"created": "2022-07-02T19:37:33.825363Z",
|
|
"modified": "2022-07-02T19:37:33.825363Z",
|
|
"name": "Bait legitimate influencers",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "conduct-pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0039 .md",
|
|
"external_id": "T0039"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--7346d733-2bda-46fa-9d65-2a355369fc5c"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--1f01222c-3cba-4cb7-bb9a-8b291bfd8597",
|
|
"created_by_ref": "identity--148bb89a-b5da-4f9b-a552-8754fb4cfe81",
|
|
"created": "2022-07-02T19:37:33.825792Z",
|
|
"modified": "2022-07-02T19:37:33.825792Z",
|
|
"name": "Demand insurmountable proof",
|
|
"description": "TA14",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-narratives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0040.md",
|
|
"external_id": "T0040"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--37408f5c-e68d-43f8-b018-e6ca5c6b8bf3"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--dc44af3a-3fbd-4368-877e-17a05cb39117",
|
|
"created_by_ref": "identity--a1346aae-96ce-48f2-94aa-1c013587ec73",
|
|
"created": "2022-07-02T19:37:33.82622Z",
|
|
"modified": "2022-07-02T19:37:33.82622Z",
|
|
"name": "Seed Kernel of truth",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "conduct-pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0042.md",
|
|
"external_id": "T0042"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--9474ab31-3912-44bf-ac44-7b680502a8bc"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--a5cf7d6c-79cf-49e7-90c5-b4e17f5da1f1",
|
|
"created_by_ref": "identity--ab328904-d62a-4a71-bfe2-0cd24175c9e4",
|
|
"created": "2022-07-02T19:37:33.826649Z",
|
|
"modified": "2022-07-02T19:37:33.826649Z",
|
|
"name": "Chat apps",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0043.md",
|
|
"external_id": "T0043"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--268c3f64-b644-48d6-a1e4-5da02393a99a"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--229eb6d0-a4ad-4335-a5eb-2fcc91003d55",
|
|
"created_by_ref": "identity--a3e417e5-d86c-4009-8597-2c7360a99958",
|
|
"created": "2022-07-02T19:37:33.827076Z",
|
|
"modified": "2022-07-02T19:37:33.827076Z",
|
|
"name": "Use Encrypted Chat Apps",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0043.001.md",
|
|
"external_id": "T0043.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--5a418a2b-b44d-4dd7-9c6a-b238693de041"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--efd168a1-f067-4d53-ae65-e7bc624fb6f6",
|
|
"created_by_ref": "identity--0decc4a8-8e05-4526-b4ac-88765d8ae3d1",
|
|
"created": "2022-07-02T19:37:33.827499Z",
|
|
"modified": "2022-07-02T19:37:33.827499Z",
|
|
"name": "Use Unencrypted Chats Apps",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0043.002.md",
|
|
"external_id": "T0043.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1fc2f776-92fa-47e6-86e2-0308a329b511"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--615d8487-91ec-4bd1-9283-1de22165641f",
|
|
"created_by_ref": "identity--44fad073-3992-4b1c-9c48-907336be5de1",
|
|
"created": "2022-07-02T19:37:33.82792Z",
|
|
"modified": "2022-07-02T19:37:33.82792Z",
|
|
"name": "Seed distortions",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "conduct-pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0044.md",
|
|
"external_id": "T0044"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--569c3f4c-fa78-40c0-b226-b4d9a3d30ba1"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--3e90bec9-e228-43cf-9e41-699d297b5a90",
|
|
"created_by_ref": "identity--4e55beeb-395d-4f2c-91a4-bfa099ef266e",
|
|
"created": "2022-07-02T19:37:33.828344Z",
|
|
"modified": "2022-07-02T19:37:33.828344Z",
|
|
"name": "Use fake experts",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "conduct-pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0045.md",
|
|
"external_id": "T0045"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--5b2990ee-2a51-40fb-aa27-e6a4451c863f"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--db9dd062-a65a-4c49-ba1f-f5473974aa5b",
|
|
"created_by_ref": "identity--5c298eab-aa07-4bef-bdac-6c7dcafbea56",
|
|
"created": "2022-07-02T19:37:33.828766Z",
|
|
"modified": "2022-07-02T19:37:33.828766Z",
|
|
"name": "Use Search Engine Optimization",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "conduct-pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0046.md",
|
|
"external_id": "T0046"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1a9c5866-b95f-4801-8859-2c0612e3528c"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--a97b1ab3-cc2a-4d95-9d57-e816384012f7",
|
|
"created_by_ref": "identity--89857fbd-fadb-4959-8a8c-d1e3d5cf974f",
|
|
"created": "2022-07-02T19:37:33.829187Z",
|
|
"modified": "2022-07-02T19:37:33.829187Z",
|
|
"name": "Censor social media as a political force",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0047.md",
|
|
"external_id": "T0047"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--2813b402-98e9-41ce-acc8-d7148e226f80"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--37ae4113-66c1-4ae3-82a2-a6d0b8d9fefc",
|
|
"created_by_ref": "identity--74136e56-674a-490c-b466-81c71e0e6b2a",
|
|
"created": "2022-07-02T19:37:33.829611Z",
|
|
"modified": "2022-07-02T19:37:33.829611Z",
|
|
"name": "Harass",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0048.md",
|
|
"external_id": "T0048"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--04b086b6-f1f4-4d1f-9451-c4125c414f56"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--fe829401-86a6-41f5-a1ed-599d09b47561",
|
|
"created_by_ref": "identity--e75ad5c4-d8b6-4f1b-925f-45339cfebca4",
|
|
"created": "2022-07-02T19:37:33.830036Z",
|
|
"modified": "2022-07-02T19:37:33.830036Z",
|
|
"name": "Boycott/\"Cancel\" Opponents",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0048.001.md",
|
|
"external_id": "T0048.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--0d696997-f1da-430f-9d1c-f8ba336ecd23"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--1f21fab1-27f8-4e09-ab3e-270c539a1443",
|
|
"created_by_ref": "identity--13373ec9-d939-40a2-8de1-982dde2492b6",
|
|
"created": "2022-07-02T19:37:33.83046Z",
|
|
"modified": "2022-07-02T19:37:33.83046Z",
|
|
"name": "Harass People Based on Identities",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0048.002.md",
|
|
"external_id": "T0048.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--fcf702c2-3bac-4dc4-8589-30d02326dbf6"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--b3f45d94-43fb-4095-be5f-3ce7dc7fed34",
|
|
"created_by_ref": "identity--63489239-e92e-4334-88a6-0247dfa673cc",
|
|
"created": "2022-07-02T19:37:33.830884Z",
|
|
"modified": "2022-07-02T19:37:33.830884Z",
|
|
"name": "Threaten to Dox",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0048.003.md",
|
|
"external_id": "T0048.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--371fa8c4-3cd7-42f6-8b9b-4b9bb438f328"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--05c604a8-1f99-4d72-a827-8729b9e260ab",
|
|
"created_by_ref": "identity--e1b45141-7944-464b-9985-5725907a3855",
|
|
"created": "2022-07-02T19:37:33.831308Z",
|
|
"modified": "2022-07-02T19:37:33.831308Z",
|
|
"name": "Dox",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0048.004.md",
|
|
"external_id": "T0048.004"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--9ab81d2f-eddd-4928-bd8d-a719c8ca6ecc"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--3400fe54-b861-4820-a9ad-784a38740492",
|
|
"created_by_ref": "identity--ff62c01e-5860-4d14-82e0-b3d0bd4b9528",
|
|
"created": "2022-07-02T19:37:33.831744Z",
|
|
"modified": "2022-07-02T19:37:33.831744Z",
|
|
"name": "Flooding the Information Space",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0049.md",
|
|
"external_id": "T0049"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--544b3744-fb12-446b-b25c-a91109273f13"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--594f5a85-b578-425b-82ee-9bba74d56c7c",
|
|
"created_by_ref": "identity--ed53515d-7c50-482d-b2c0-95f009d999c2",
|
|
"created": "2022-07-02T19:37:33.832172Z",
|
|
"modified": "2022-07-02T19:37:33.832172Z",
|
|
"name": "Trolls amplify and manipulate",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0049.001.md",
|
|
"external_id": "T0049.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--4f3b3e7c-6b4a-4d60-bc8b-9109c4f8e752"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--47e69cce-3c4f-43a9-9c8b-72fa9a648a0f",
|
|
"created_by_ref": "identity--3e0e7db7-ea47-44ba-8445-5cf86ff9e772",
|
|
"created": "2022-07-02T19:37:33.832604Z",
|
|
"modified": "2022-07-02T19:37:33.832604Z",
|
|
"name": "Hijack existing hashtag",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0049.002.md",
|
|
"external_id": "T0049.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--b76529f7-97d3-458b-a261-8335dd455e21"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--b66eb6a2-e0f4-473b-9b96-7c9c8afad51b",
|
|
"created_by_ref": "identity--5866e8c9-3f54-4161-83ce-5dd9c51d7e85",
|
|
"created": "2022-07-02T19:37:33.83303Z",
|
|
"modified": "2022-07-02T19:37:33.83303Z",
|
|
"name": "Bots Amplify via Automated Forwarding and Reposting",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0049.003.md",
|
|
"external_id": "T0049.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--4693540f-e01c-44eb-a5c4-0ce8edd60324"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--0acaace6-ed59-4fbb-a334-a6107279893e",
|
|
"created_by_ref": "identity--ee46b6f8-5fcd-4bc3-8407-353a95848239",
|
|
"created": "2022-07-02T19:37:33.833455Z",
|
|
"modified": "2022-07-02T19:37:33.833455Z",
|
|
"name": "Utilize Spamoflauge",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0049.004.md",
|
|
"external_id": "T0049.004"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--acecea7a-e8e9-472a-a448-5a6a26935450"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--a4216780-4301-49c9-81b5-a3ccef87bd9b",
|
|
"created_by_ref": "identity--a1fddff9-aead-4a57-8da6-788f1efaab59",
|
|
"created": "2022-07-02T19:37:33.833881Z",
|
|
"modified": "2022-07-02T19:37:33.833881Z",
|
|
"name": "Conduct Swarming",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0049.005.md",
|
|
"external_id": "T0049.005"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--8bee9979-7243-4e45-a8d9-db728fa34add"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ad6707e6-d861-4403-88a3-7fbc59af0cd6",
|
|
"created_by_ref": "identity--45f39bab-59c9-4f00-b9cb-c62d5679c576",
|
|
"created": "2022-07-02T19:37:33.834303Z",
|
|
"modified": "2022-07-02T19:37:33.834303Z",
|
|
"name": "Conduct Keyword Squatting",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0049.006.md",
|
|
"external_id": "T0049.006"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c31563f9-041e-4d6e-88bb-b2651810bfc3"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--294a0fc6-e1c0-4207-ad7d-02739a4d2585",
|
|
"created_by_ref": "identity--e3e13768-4a01-4e88-bc27-7f2bffe670ef",
|
|
"created": "2022-07-02T19:37:33.834767Z",
|
|
"modified": "2022-07-02T19:37:33.834767Z",
|
|
"name": "Inauthentic Sites Amplify News and Narratives",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0049.007.md",
|
|
"external_id": "T0049.007"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1515ce37-dbd3-4052-a8d2-8f7e4c1b1cc7"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ea801f99-8842-42a9-8ca8-49a943d70b8c",
|
|
"created_by_ref": "identity--ca170fff-8ce1-4fb5-bd87-6b69d6703959",
|
|
"created": "2022-07-02T19:37:33.835203Z",
|
|
"modified": "2022-07-02T19:37:33.835203Z",
|
|
"name": "Organize Events",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0057.md",
|
|
"external_id": "T0057"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--78ee3891-bbce-46d9-8ef2-94efeb663b3d"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--58ce7f79-cddc-4da1-a2c2-daffb7c968f8",
|
|
"created_by_ref": "identity--28c33c12-7272-4929-9591-588c7c9736f4",
|
|
"created": "2022-07-02T19:37:33.835636Z",
|
|
"modified": "2022-07-02T19:37:33.835636Z",
|
|
"name": "Pay for Physical Action",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0057.001.md",
|
|
"external_id": "T0057.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--9b45f901-704d-42d5-9036-dc7bd435f033"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--73ad4a21-0baa-41ae-8b94-44b897f2a5e0",
|
|
"created_by_ref": "identity--e5e40f22-db89-406f-ae1d-8e2be9fa2bcd",
|
|
"created": "2022-07-02T19:37:33.836064Z",
|
|
"modified": "2022-07-02T19:37:33.836064Z",
|
|
"name": "Conduct Symbolic Action",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0057.002.md",
|
|
"external_id": "T0057.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--2f13aa63-b17a-48c1-9087-9bcda65504ae"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--f0e9457d-bb92-439b-aa6c-0b8c5cca46bf",
|
|
"created_by_ref": "identity--3a8a9bbb-1eea-4f0e-bd1c-94f0c6ad9c4e",
|
|
"created": "2022-07-02T19:37:33.836487Z",
|
|
"modified": "2022-07-02T19:37:33.836487Z",
|
|
"name": "Play the long game",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0059.md",
|
|
"external_id": "T0059"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--7c36d0db-40a5-4908-badb-e2c0a00826e2"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--7d68dded-dd84-428d-8397-832cd2d05545",
|
|
"created_by_ref": "identity--396f2b57-5a41-41c2-81b1-5f1a1b7cc117",
|
|
"created": "2022-07-02T19:37:33.836921Z",
|
|
"modified": "2022-07-02T19:37:33.836921Z",
|
|
"name": "Continue to Amplify",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0060.md",
|
|
"external_id": "T0060"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--e5bc89e8-226b-4544-aee6-db5f1b647ddf"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--54821f53-96b6-4bbc-a3c4-61d708c96c63",
|
|
"created_by_ref": "identity--9bae1129-8497-4491-8b10-71fec3f1564d",
|
|
"created": "2022-07-02T19:37:33.837348Z",
|
|
"modified": "2022-07-02T19:37:33.837348Z",
|
|
"name": "Sell Merchandise",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0061.md",
|
|
"external_id": "T0061"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--110e9b59-73d3-4f2f-b7b8-c8cb20cc7973"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--4266be95-78ce-4761-ad72-e0701c326db2",
|
|
"created_by_ref": "identity--70f2bfe7-2514-4b4b-8ea9-0bd452e1d308",
|
|
"created": "2022-07-02T19:37:33.83778Z",
|
|
"modified": "2022-07-02T19:37:33.83778Z",
|
|
"name": "Sell Merchandise",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0061.001.md",
|
|
"external_id": "T0061.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--3957b131-ac53-4cb5-b2bf-16b3312fb1f7"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--e3dd1b95-e41d-4c72-a788-ba70dba36fcf",
|
|
"created_by_ref": "identity--11276b71-5ca5-4799-a27e-9f96481c4fc6",
|
|
"created": "2022-07-02T19:37:33.838206Z",
|
|
"modified": "2022-07-02T19:37:33.838206Z",
|
|
"name": "Prepare Physical Broadcast Capabilities",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0065.md",
|
|
"external_id": "T0065"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1ec82b52-ff28-4902-ba7f-41b8b1934f4e"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--a4ca74ec-78a0-439c-b409-2b3950fa97f3",
|
|
"created_by_ref": "identity--450f9885-309f-4aa0-9571-f17cebc54cff",
|
|
"created": "2022-07-02T19:37:33.838628Z",
|
|
"modified": "2022-07-02T19:37:33.838628Z",
|
|
"name": "Degrade Adversary",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "plan-objectives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0066.md",
|
|
"external_id": "T0066"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--733cb5e2-2dc5-4b87-9245-61d9105b3804"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--9ae3cd65-83f3-4a31-bd20-92b2ef2f2dbd",
|
|
"created_by_ref": "identity--c9dcfe33-a9bb-4e0f-bfe3-99d0603e6c64",
|
|
"created": "2022-07-02T19:37:33.839048Z",
|
|
"modified": "2022-07-02T19:37:33.839048Z",
|
|
"name": "Respond to Breaking News Event or Active Crisis",
|
|
"description": "TA14",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-narratives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0068.md",
|
|
"external_id": "T0068"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a1125173-88b3-4960-94b7-89df8ef5ee37"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--2263c28c-24f6-463c-b580-0cf7fa0130f9",
|
|
"created_by_ref": "identity--7595fa4b-cf2d-4c60-84c5-7a5a0a2707a0",
|
|
"created": "2022-07-02T19:37:33.839469Z",
|
|
"modified": "2022-07-02T19:37:33.839469Z",
|
|
"name": "Segment Audiences",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0072.md",
|
|
"external_id": "T0072"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--ad5b698a-578c-4c98-8bab-37647bb6d5b9"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--377a21e0-870a-4fac-a93d-46489fd32d1c",
|
|
"created_by_ref": "identity--b03da2b2-e9ab-4774-a71b-0b03a3879710",
|
|
"created": "2022-07-02T19:37:33.839895Z",
|
|
"modified": "2022-07-02T19:37:33.839895Z",
|
|
"name": "Geographic Segmentation",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0072.001.md",
|
|
"external_id": "T0072.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--b86bea6e-dd47-46b3-bed7-4697f497bfe5"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--5f34d97b-88d8-416f-9585-a0e94378b9e5",
|
|
"created_by_ref": "identity--2033c99b-661c-4668-af89-1ca75d14f449",
|
|
"created": "2022-07-02T19:37:33.840319Z",
|
|
"modified": "2022-07-02T19:37:33.840319Z",
|
|
"name": "Demographic Segmentation",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0072.002.md",
|
|
"external_id": "T0072.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--72c07e06-ad56-4d8c-ad14-ebf5b638074b"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--5749117a-940b-475d-96d2-62a8af9f13d3",
|
|
"created_by_ref": "identity--8e7e242b-2dea-432a-a14e-d2437e67b24a",
|
|
"created": "2022-07-02T19:37:33.840741Z",
|
|
"modified": "2022-07-02T19:37:33.840741Z",
|
|
"name": "Economic Segmentation",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0072.003.md",
|
|
"external_id": "T0072.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--9f62ff9f-25a6-458c-88f0-c75c7602378d"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--5b832fd9-0643-4435-84b6-83fc66d497b6",
|
|
"created_by_ref": "identity--461d3320-47a9-4fe0-9cfc-d08ab8f9b5bc",
|
|
"created": "2022-07-02T19:37:33.841165Z",
|
|
"modified": "2022-07-02T19:37:33.841165Z",
|
|
"name": "Psychographic Segmentation",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0072.004.md",
|
|
"external_id": "T0072.004"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--bee6eb31-89c5-4535-acc5-0a0b909ba5c1"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--3c77b6f0-c00c-4d25-b466-903f3ad3146a",
|
|
"created_by_ref": "identity--2fb1abd3-8b11-41be-b9c6-4672970dfb81",
|
|
"created": "2022-07-02T19:37:33.841592Z",
|
|
"modified": "2022-07-02T19:37:33.841592Z",
|
|
"name": "Political Segmentation",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0072.005.md",
|
|
"external_id": "T0072.005"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--710f28cb-8f9c-496d-8b87-c16a8ad9a4f9"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--9786e7ee-453f-4cfb-9079-7f00d2ed6b6e",
|
|
"created_by_ref": "identity--6dfef7e5-c62c-4a47-b44b-feb4fa9ab1cf",
|
|
"created": "2022-07-02T19:37:33.842021Z",
|
|
"modified": "2022-07-02T19:37:33.842021Z",
|
|
"name": "Determine Target Audiences",
|
|
"description": "TA01",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "plan-strategy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0073.md",
|
|
"external_id": "T0073"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--5698b71b-8020-43b3-9f0d-09d046a82575"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ed375b53-49a3-4ef0-b49c-e9568852121e",
|
|
"created_by_ref": "identity--dd1da6af-df4a-4e9b-8574-f8290a5d01ed",
|
|
"created": "2022-07-02T19:37:33.842444Z",
|
|
"modified": "2022-07-02T19:37:33.842444Z",
|
|
"name": "Determine Strategic Ends",
|
|
"description": "TA01",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "plan-strategy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0074.md",
|
|
"external_id": "T0074"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--fe36f4c1-aa27-4225-9ade-d708517eb68a"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--40858431-0c70-4bb5-b55c-591005eed696",
|
|
"created_by_ref": "identity--7b9ce418-e8d3-4909-9e2f-182f63a98cd2",
|
|
"created": "2022-07-02T19:37:33.842865Z",
|
|
"modified": "2022-07-02T19:37:33.842865Z",
|
|
"name": "Dismiss",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "plan-objectives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0075.md",
|
|
"external_id": "T0075"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--4a48b553-dd19-4e10-aec3-0e0f356296e3"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--0dd3c381-c219-4cba-afb8-875aca4b1f41",
|
|
"created_by_ref": "identity--55320c87-7aba-48ea-a3ce-728733d4a50d",
|
|
"created": "2022-07-02T19:37:33.843289Z",
|
|
"modified": "2022-07-02T19:37:33.843289Z",
|
|
"name": "Discredit Credible Sources",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "plan-objectives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0075.001.md",
|
|
"external_id": "T0075.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--173fffb9-be0a-4687-b36a-9de1414513f7"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--e0565020-6bfa-4da8-be8a-912ac84222de",
|
|
"created_by_ref": "identity--d2fb2247-b026-45e2-aa3b-911f3a69b205",
|
|
"created": "2022-07-02T19:37:33.843728Z",
|
|
"modified": "2022-07-02T19:37:33.843728Z",
|
|
"name": "Distort",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "plan-objectives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0076.md",
|
|
"external_id": "T0076"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--28357524-6545-45d9-ba95-b7598bbcb6f2"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--cca18ee2-3c33-4756-8278-650053b1f759",
|
|
"created_by_ref": "identity--66ccc20a-2051-4cc6-b4ad-03877c927632",
|
|
"created": "2022-07-02T19:37:33.844151Z",
|
|
"modified": "2022-07-02T19:37:33.844151Z",
|
|
"name": "Distract",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "plan-objectives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0077.md",
|
|
"external_id": "T0077"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--e52a5099-4499-477e-8dd4-f8af612bd288"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--3783ac9a-a163-4040-a134-3aacdefb8e65",
|
|
"created_by_ref": "identity--b2262ccd-31e7-4a32-a7eb-d7999d292281",
|
|
"created": "2022-07-02T19:37:33.844571Z",
|
|
"modified": "2022-07-02T19:37:33.844571Z",
|
|
"name": "Dismay",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "plan-objectives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0078.md",
|
|
"external_id": "T0078"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--59d65d3a-d2c4-4501-9cfe-505df3e1f1e4"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--7fa35d41-4ba5-4bd5-ac18-ba26800efc4d",
|
|
"created_by_ref": "identity--fc2448d2-3137-4b6d-b169-a429e118e973",
|
|
"created": "2022-07-02T19:37:33.844991Z",
|
|
"modified": "2022-07-02T19:37:33.844991Z",
|
|
"name": "Divide",
|
|
"description": "TA02",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "plan-objectives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0079.md",
|
|
"external_id": "T0079"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--4361364c-f2ed-425f-97a4-870f38b61fd4"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--57046318-f21a-490b-85bd-0445878e1a01",
|
|
"created_by_ref": "identity--cccea9f5-5d6c-48df-a327-7757fd3d04d3",
|
|
"created": "2022-07-02T19:37:33.845411Z",
|
|
"modified": "2022-07-02T19:37:33.845411Z",
|
|
"name": "Map Target Audience Information Environment",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0080.md",
|
|
"external_id": "T0080"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--67a82272-60f4-4562-8635-1bf9fabd8b52"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--316f6fab-480d-4902-bcb8-0a3d43dd5acd",
|
|
"created_by_ref": "identity--f52c968e-44e5-4ee9-b490-8feef10b439a",
|
|
"created": "2022-07-02T19:37:33.845831Z",
|
|
"modified": "2022-07-02T19:37:33.845831Z",
|
|
"name": "Monitor Social Media Analytics",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0080.001.md",
|
|
"external_id": "T0080.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--759dadb1-3881-435f-a88e-faa1fe5b8904"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--e2fc406d-688f-45ab-b8b5-416ca7cb8625",
|
|
"created_by_ref": "identity--4d2c75a4-e591-49be-baee-7a8b47aa1721",
|
|
"created": "2022-07-02T19:37:33.846286Z",
|
|
"modified": "2022-07-02T19:37:33.846286Z",
|
|
"name": "Evaluate Media Surveys",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0080.002.md",
|
|
"external_id": "T0080.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--2ae86909-42f0-45bc-99fb-e691b99abdf8"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--be08cd38-1ba3-4743-bbdf-a6bf96c33a72",
|
|
"created_by_ref": "identity--3496ea8b-bdbe-45df-b3de-179feb6dfdd5",
|
|
"created": "2022-07-02T19:37:33.846714Z",
|
|
"modified": "2022-07-02T19:37:33.846714Z",
|
|
"name": "Identify Trending Topics/Hashtags",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0080.003.md",
|
|
"external_id": "T0080.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--099a2a56-3ba9-4d23-b9df-333a668d1fa1"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--8a132fc1-f33b-4110-89a2-86dc083b57d7",
|
|
"created_by_ref": "identity--af3a45de-ee4e-4329-9acb-03522464fe8b",
|
|
"created": "2022-07-02T19:37:33.847138Z",
|
|
"modified": "2022-07-02T19:37:33.847138Z",
|
|
"name": "Conduct Web Traffic Analysis",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0080.004.md",
|
|
"external_id": "T0080.004"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--4c815477-1006-4c4a-b914-4c05452d6c58"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ca742cc1-d49b-4c82-be17-ce4cc1676758",
|
|
"created_by_ref": "identity--53283031-76bd-471e-b9a4-8c0268d78618",
|
|
"created": "2022-07-02T19:37:33.847561Z",
|
|
"modified": "2022-07-02T19:37:33.847561Z",
|
|
"name": "Assess Degree/Type of Media Access",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0080.005.md",
|
|
"external_id": "T0080.005"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--fdb9537c-44c4-49eb-b3b3-2fde90b3d5c0"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--84a47a2a-d814-45ed-80dd-945b752ab746",
|
|
"created_by_ref": "identity--75bc6171-3e71-40bd-a868-de92231a1c2a",
|
|
"created": "2022-07-02T19:37:33.847993Z",
|
|
"modified": "2022-07-02T19:37:33.847993Z",
|
|
"name": "Identify Social and Technical Vulnerabilities",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0081.md",
|
|
"external_id": "T0081"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--d9e9bd5b-d9d7-4f4b-9dee-46bfa6e562a7"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--6e084581-218d-4818-94c6-8dfa21c1a87e",
|
|
"created_by_ref": "identity--20cda0f1-5da0-405b-888b-b7ed45e937b3",
|
|
"created": "2022-07-02T19:37:33.84842Z",
|
|
"modified": "2022-07-02T19:37:33.84842Z",
|
|
"name": "Find Echo Chambers",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0081.001.md",
|
|
"external_id": "T0081.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--31510995-6631-4af3-af8b-91a32f3241fa"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--35a7b256-4f20-4fcc-9d63-1d76f8bfbfdf",
|
|
"created_by_ref": "identity--f906d4dc-03c6-4a32-b06f-0c76b6819051",
|
|
"created": "2022-07-02T19:37:33.848841Z",
|
|
"modified": "2022-07-02T19:37:33.848841Z",
|
|
"name": "Identify Data Voids",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0081.002.md",
|
|
"external_id": "T0081.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--ce69c665-a9e8-4aab-ba98-c402ae9d1cf3"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--07568c40-2b9d-4d73-aea0-9b423672dd65",
|
|
"created_by_ref": "identity--c6d716dd-9973-40f8-84bd-30587a668416",
|
|
"created": "2022-07-02T19:37:33.849265Z",
|
|
"modified": "2022-07-02T19:37:33.849265Z",
|
|
"name": "Identify Existing Prejudices",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0081.003.md",
|
|
"external_id": "T0081.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--2e991130-79b4-414d-ab60-3e0c90be10c2"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--0a86f02a-7cd0-42b9-bc49-969c12b79f5f",
|
|
"created_by_ref": "identity--eb49064c-0873-4a33-95d8-b5df8f10ecae",
|
|
"created": "2022-07-02T19:37:33.849692Z",
|
|
"modified": "2022-07-02T19:37:33.849692Z",
|
|
"name": "Identify Existing Fissures",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0081.004.md",
|
|
"external_id": "T0081.004"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--05299b1f-4cb2-4ed6-83f5-dd86edce256a"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--13d33e6a-9372-4bff-91e8-6d101840daf6",
|
|
"created_by_ref": "identity--04bfa891-ff2c-41d5-ab4c-26ffd98a51b5",
|
|
"created": "2022-07-02T19:37:33.850109Z",
|
|
"modified": "2022-07-02T19:37:33.850109Z",
|
|
"name": "Identify Existing Conspiracy Narratives/Suspicions",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0081.005.md",
|
|
"external_id": "T0081.005"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--b043117b-a87d-4415-8fd8-a5faa968c26d"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--26029561-89fa-4a78-84b8-c1d8c1867578",
|
|
"created_by_ref": "identity--b6d00605-98e9-47a4-bc1a-854bb3c14e49",
|
|
"created": "2022-07-02T19:37:33.850528Z",
|
|
"modified": "2022-07-02T19:37:33.850528Z",
|
|
"name": "Identify Wedge Issues",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0081.006.md",
|
|
"external_id": "T0081.006"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--4589917a-bae4-4823-a294-74fdbe12badc"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--98c15838-7027-47e6-81bf-384c1dc2e48a",
|
|
"created_by_ref": "identity--ece89807-e8d5-4d36-b047-f3febffbbc3c",
|
|
"created": "2022-07-02T19:37:33.850949Z",
|
|
"modified": "2022-07-02T19:37:33.850949Z",
|
|
"name": "Identify Target Audience Adversaries",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0081.007.md",
|
|
"external_id": "T0081.007"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--0a3cd19f-c340-492d-b6a3-7c59de3386fe"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--5e2a73fb-28d1-4818-9eed-e83ccaa7d6ed",
|
|
"created_by_ref": "identity--1300e9c2-d368-4220-bf64-1a3b31fb3c26",
|
|
"created": "2022-07-02T19:37:33.85137Z",
|
|
"modified": "2022-07-02T19:37:33.85137Z",
|
|
"name": "Identify Media System Vulnerabilities",
|
|
"description": "TA13",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "target-audience-analysis"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0081.008.md",
|
|
"external_id": "T0081.008"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--fb697750-6770-4104-840b-f49b2da7231c"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--fc96f570-8ab1-4e74-87ac-cbcfd8afbb46",
|
|
"created_by_ref": "identity--abae652c-9d63-4231-8b89-e40f467fed1e",
|
|
"created": "2022-07-02T19:37:33.851792Z",
|
|
"modified": "2022-07-02T19:37:33.851792Z",
|
|
"name": "Develop New Narratives",
|
|
"description": "TA14",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-narratives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0082.md",
|
|
"external_id": "T0082"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a0a3e74b-7077-4f6c-8d50-df134d792550"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--dce876f1-e98f-487a-aa33-132bd19d0c36",
|
|
"created_by_ref": "identity--3d8fcbcb-8c08-4e38-8f4f-dfb9adabe800",
|
|
"created": "2022-07-02T19:37:33.852217Z",
|
|
"modified": "2022-07-02T19:37:33.852217Z",
|
|
"name": "Integrate Target Audience Vulnerabilities into Narrative",
|
|
"description": "TA14",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-narratives"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0083.md",
|
|
"external_id": "T0083"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--313c4ec1-b4f3-4cea-bb71-20499c7632ca"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--e733ca10-2e05-4b0e-aa51-8cfa95d0a949",
|
|
"created_by_ref": "identity--720674c6-bacf-422d-8aaa-8fdab902212a",
|
|
"created": "2022-07-02T19:37:33.852637Z",
|
|
"modified": "2022-07-02T19:37:33.852637Z",
|
|
"name": "Reuse Existing Content",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0084.md",
|
|
"external_id": "T0084"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--46c5830d-9493-44fa-bba5-e0f10f50abc9"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ce09340c-cb19-4ceb-8b12-d201d112b997",
|
|
"created_by_ref": "identity--442bfe41-1467-4446-84da-50e22e3d6ba0",
|
|
"created": "2022-07-02T19:37:33.853053Z",
|
|
"modified": "2022-07-02T19:37:33.853053Z",
|
|
"name": "Use Copypasta",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0084.001.md",
|
|
"external_id": "T0084.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1e4623e8-e300-4062-8a34-0379fae1cfe8"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--30f7c204-ad16-4b50-bb86-d79789f998cc",
|
|
"created_by_ref": "identity--caba801b-e6e2-4533-8192-d463499c7da7",
|
|
"created": "2022-07-02T19:37:33.853472Z",
|
|
"modified": "2022-07-02T19:37:33.853472Z",
|
|
"name": "Plagiarize Content",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0084.002.md",
|
|
"external_id": "T0084.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--011a9c7c-02e8-4cbd-9ecd-cfcc2c9edd08"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--8e3e4dd0-3594-4fed-9db9-74b506e00c5d",
|
|
"created_by_ref": "identity--cd6ac5f9-db3d-4b55-8034-68fedd229fbc",
|
|
"created": "2022-07-02T19:37:33.853895Z",
|
|
"modified": "2022-07-02T19:37:33.853895Z",
|
|
"name": "Deceptively Labeled or Translated",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0084.003.md",
|
|
"external_id": "T0084.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c462d77b-4ad9-421d-bae0-772990424834"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--2ab24152-cfc1-4aff-8b6f-9b1d7fc5d634",
|
|
"created_by_ref": "identity--9d41b761-0cc9-49fc-bb23-86d9e849cd97",
|
|
"created": "2022-07-02T19:37:33.854313Z",
|
|
"modified": "2022-07-02T19:37:33.854313Z",
|
|
"name": "Appropriate Content",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0084.004.md",
|
|
"external_id": "T0084.004"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--19217c11-527f-401a-a42f-96e9a375d66f"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--eef8629d-f9fa-4a36-b9c1-8c66ede3d595",
|
|
"created_by_ref": "identity--c1c15902-4171-46da-a16b-4c525be20155",
|
|
"created": "2022-07-02T19:37:33.854732Z",
|
|
"modified": "2022-07-02T19:37:33.854732Z",
|
|
"name": "Develop Text-based Content",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0085.md",
|
|
"external_id": "T0085"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--68390bf8-6931-4248-b765-3350f21ee749"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--8dae3cdc-dad5-42d5-9f78-a69eaa8ebfd6",
|
|
"created_by_ref": "identity--b8c4ad76-fd37-42e7-b4ac-b1ef98757be0",
|
|
"created": "2022-07-02T19:37:33.855155Z",
|
|
"modified": "2022-07-02T19:37:33.855155Z",
|
|
"name": "Develop AI-Generated Text",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0085.001.md",
|
|
"external_id": "T0085.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a7747ff0-84a2-46a4-b52a-7830df04df11"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--004999ac-269c-482f-9d1a-6a249feff43c",
|
|
"created_by_ref": "identity--d6e43f4f-aaf8-4937-b388-d9ed898b589e",
|
|
"created": "2022-07-02T19:37:33.855585Z",
|
|
"modified": "2022-07-02T19:37:33.855585Z",
|
|
"name": "Develop False or Altered Documents",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0085.002.md",
|
|
"external_id": "T0085.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--3c8e9214-07b5-4b3a-8c23-4464a8a889ec"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--c97b807e-6795-43ce-a2ae-3e9861636d42",
|
|
"created_by_ref": "identity--f5045820-7ff3-4806-bcb2-6e245b0039ee",
|
|
"created": "2022-07-02T19:37:33.856007Z",
|
|
"modified": "2022-07-02T19:37:33.856007Z",
|
|
"name": "Develop Inauthentic News Articles",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0085.003.md",
|
|
"external_id": "T0085.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--4beff981-edd5-4d00-b39d-f3a59f961d2f"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--c7710e63-b56a-4fbc-a84b-cab31476ffe6",
|
|
"created_by_ref": "identity--9f0b8b1a-17eb-4781-96c1-a8d5940a2031",
|
|
"created": "2022-07-02T19:37:33.856427Z",
|
|
"modified": "2022-07-02T19:37:33.856427Z",
|
|
"name": "Develop Image-based Content",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0086.md",
|
|
"external_id": "T0086"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c9c50898-7973-4953-9d68-84f853651fad"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--8b540502-10df-401b-8186-4cb563900f22",
|
|
"created_by_ref": "identity--c2004f5f-d077-44f5-bc7f-b7e52d6d50d7",
|
|
"created": "2022-07-02T19:37:33.856847Z",
|
|
"modified": "2022-07-02T19:37:33.856847Z",
|
|
"name": "Develop Memes",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0086.001.md",
|
|
"external_id": "T0086.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f648d86e-c235-489d-9c17-172cc137e2a6"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--6b236705-3281-4016-879e-495b90cf5748",
|
|
"created_by_ref": "identity--b8fa8ff9-b2f0-4eb2-94ef-f47ee8c69e7a",
|
|
"created": "2022-07-02T19:37:33.857269Z",
|
|
"modified": "2022-07-02T19:37:33.857269Z",
|
|
"name": "Develop AI-Generated Images (Deepfakes)",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0086.002.md",
|
|
"external_id": "T0086.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--e30e0f9b-bbac-4d6c-85a9-9803349edea3"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--0653256e-fda6-4cda-bb34-5464b2ea4713",
|
|
"created_by_ref": "identity--144e4781-6d89-4e16-9cc0-1737df6b3b7e",
|
|
"created": "2022-07-02T19:37:33.857725Z",
|
|
"modified": "2022-07-02T19:37:33.857725Z",
|
|
"name": "Deceptively Edit Images (Cheap fakes)",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0086.003.md",
|
|
"external_id": "T0086.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--77322b73-a29b-4fb8-8057-562e2142e00b"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--0154002e-3609-4a0f-8495-15b7e433df4b",
|
|
"created_by_ref": "identity--72d6bbc3-21ce-4694-b8ac-3da4ed4f8209",
|
|
"created": "2022-07-02T19:37:33.85815Z",
|
|
"modified": "2022-07-02T19:37:33.85815Z",
|
|
"name": "Aggregate Information into Evidence Collages",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0086.004.md",
|
|
"external_id": "T0086.004"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--39ef70af-4bcd-4818-a0bc-2dedb1e509b8"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--b8e999f5-dc25-4969-b949-cfb350440e64",
|
|
"created_by_ref": "identity--f1c920c5-7d5e-47ec-8d92-c9dc12c4c2f5",
|
|
"created": "2022-07-02T19:37:33.858574Z",
|
|
"modified": "2022-07-02T19:37:33.858574Z",
|
|
"name": "Develop Video-based Content",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0087.md",
|
|
"external_id": "T0087"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--fa738161-9d85-4a5b-917e-99debb0a8366"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--62f717da-4d1b-4f31-a0b4-3fcba13a5b87",
|
|
"created_by_ref": "identity--be61fb86-4638-4c0c-9995-d71730477fb1",
|
|
"created": "2022-07-02T19:37:33.858994Z",
|
|
"modified": "2022-07-02T19:37:33.858994Z",
|
|
"name": "Develop AI-Generated Videos (Deepfakes)",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0087.001.md",
|
|
"external_id": "T0087.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--cde97962-33b7-49d7-9db1-9d870313a5a2"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ebd8f8d0-d7db-40a2-b2ad-618a50d5459f",
|
|
"created_by_ref": "identity--00641b94-e993-4767-97a1-73cddd6003fc",
|
|
"created": "2022-07-02T19:37:33.85941Z",
|
|
"modified": "2022-07-02T19:37:33.85941Z",
|
|
"name": "Deceptively Edit Video (Cheap fakes)",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0087.002.md",
|
|
"external_id": "T0087.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--e2e4de75-947f-4f08-aa35-2291d4b8312c"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--e91c0e56-47ba-4f9d-99bc-992041352ac3",
|
|
"created_by_ref": "identity--206071b7-66f3-4fd5-8e3b-25166a3e555d",
|
|
"created": "2022-07-02T19:37:33.859828Z",
|
|
"modified": "2022-07-02T19:37:33.859828Z",
|
|
"name": "Develop Audio-based Content",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0088.md",
|
|
"external_id": "T0088"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--d4399c44-28a3-48f8-ba69-503f4e17b91a"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--76f88607-8506-4926-8096-19fe7083dc8d",
|
|
"created_by_ref": "identity--97306357-fa61-47ef-b24c-413cbc1f2152",
|
|
"created": "2022-07-02T19:37:33.860255Z",
|
|
"modified": "2022-07-02T19:37:33.860255Z",
|
|
"name": "Develop AI-Generated Audio (Deepfakes)",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0088.001.md",
|
|
"external_id": "T0088.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--61022ad4-05cd-4a64-97c7-bc32eedd0a96"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--043470b6-4d18-43cf-925a-68d05c536eb4",
|
|
"created_by_ref": "identity--e73a507c-0d82-477a-8e69-b3f7bf17294a",
|
|
"created": "2022-07-02T19:37:33.860676Z",
|
|
"modified": "2022-07-02T19:37:33.860676Z",
|
|
"name": "Deceptively Edit Audio (Cheap fakes)",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0088.002.md",
|
|
"external_id": "T0088.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a20c2b7f-eeee-45c2-8ac9-0892e13e02b1"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--6fb878ba-15cb-41b2-905d-bd8eeaee83ca",
|
|
"created_by_ref": "identity--ebd356ae-bb78-4574-a07b-efc6302af94a",
|
|
"created": "2022-07-02T19:37:33.861099Z",
|
|
"modified": "2022-07-02T19:37:33.861099Z",
|
|
"name": "Obtain Private Documents",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0089.md",
|
|
"external_id": "T0089"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c6352d9e-8d24-4cdf-b222-2933b0cc3b70"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--8fe7fdd1-9621-4e6c-9a98-7e117b5a294f",
|
|
"created_by_ref": "identity--988116d4-e51f-44e0-a6db-f5d97d9266a4",
|
|
"created": "2022-07-02T19:37:33.86152Z",
|
|
"modified": "2022-07-02T19:37:33.86152Z",
|
|
"name": "Obtain Authentic Documents",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0089.001.md",
|
|
"external_id": "T0089.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--2660ca27-b6ad-4593-91c8-77f3cca4ad83"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ffefefbd-5175-47b0-9805-4959f5aeb3e9",
|
|
"created_by_ref": "identity--78e3ff74-15f4-4ed3-8e64-792857647e38",
|
|
"created": "2022-07-02T19:37:33.861942Z",
|
|
"modified": "2022-07-02T19:37:33.861942Z",
|
|
"name": "Create Inauthentic Documents",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0089.002.md",
|
|
"external_id": "T0089.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--18b49cbb-c98f-4a03-950b-d318195f2bc6"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--747c5c84-a11f-4862-b5ae-6e779f5d4527",
|
|
"created_by_ref": "identity--a0b773e3-275b-4a53-b274-e65ce818ef24",
|
|
"created": "2022-07-02T19:37:33.862365Z",
|
|
"modified": "2022-07-02T19:37:33.862365Z",
|
|
"name": "Alter Authentic Documents",
|
|
"description": "TA06",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "develop-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0089.003.md",
|
|
"external_id": "T0089.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f067d90a-4bfc-4729-bee8-e63ca68f7650"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ce1f507e-58e4-47ec-88f1-16aaaf2e1305",
|
|
"created_by_ref": "identity--104cc9b2-8e32-44cd-b24a-a392115de5b0",
|
|
"created": "2022-07-02T19:37:33.862782Z",
|
|
"modified": "2022-07-02T19:37:33.862782Z",
|
|
"name": "Create Inauthentic Accounts",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0090.md",
|
|
"external_id": "T0090"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--6cebd2e6-f53c-4ee8-b1bb-74fb3b0df392"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--f7c26d55-3174-4467-9f72-0b988e8cb16c",
|
|
"created_by_ref": "identity--0dc35b43-b0b4-48ea-9085-f6da79e6ba7b",
|
|
"created": "2022-07-02T19:37:33.863199Z",
|
|
"modified": "2022-07-02T19:37:33.863199Z",
|
|
"name": "Create Anonymous Accounts",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0090.001.md",
|
|
"external_id": "T0090.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--78d98e18-4b09-4196-a432-7f0306c07ffe"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--314ec4eb-6397-487e-86c5-3cb3f617ba04",
|
|
"created_by_ref": "identity--50ef4646-d3de-41e4-a894-c05bfaca489a",
|
|
"created": "2022-07-02T19:37:33.863619Z",
|
|
"modified": "2022-07-02T19:37:33.863619Z",
|
|
"name": "Create Cyborg Accounts",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0090.002.md",
|
|
"external_id": "T0090.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--2a32d698-7a57-4fa5-83bf-204666f87075"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--1cb66d7b-d806-4f99-b2ac-28dca3994d36",
|
|
"created_by_ref": "identity--6bb11a2e-ba2e-41d2-998a-382805fa7e04",
|
|
"created": "2022-07-02T19:37:33.864043Z",
|
|
"modified": "2022-07-02T19:37:33.864043Z",
|
|
"name": "Create Bot Accounts",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0090.003.md",
|
|
"external_id": "T0090.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--73647538-262e-48be-ad69-0070fa65d93d"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--78bc180a-06c6-4f9e-9e48-19a7c1cd81ac",
|
|
"created_by_ref": "identity--0152e38e-8d94-4560-8238-d28aa89de2ae",
|
|
"created": "2022-07-02T19:37:33.864465Z",
|
|
"modified": "2022-07-02T19:37:33.864465Z",
|
|
"name": "Create Sockpuppet Accounts",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0090.004.md",
|
|
"external_id": "T0090.004"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--50422965-6337-4144-892f-d7f6d56ee243"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--a5825430-8e76-42e5-9ff4-86e95873143e",
|
|
"created_by_ref": "identity--a6dcef91-39c4-4fb7-a765-b8a5db706175",
|
|
"created": "2022-07-02T19:37:33.864888Z",
|
|
"modified": "2022-07-02T19:37:33.864888Z",
|
|
"name": "Recruit malign actors",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0091.md",
|
|
"external_id": "T0091"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--0ad63f50-f08e-4a79-92b2-badc7b51663c"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--e70bbb18-4493-4974-859a-4798ca7e6606",
|
|
"created_by_ref": "identity--812b328b-b064-470e-a930-5775015148fd",
|
|
"created": "2022-07-02T19:37:33.865308Z",
|
|
"modified": "2022-07-02T19:37:33.865308Z",
|
|
"name": "Recruit Contractors",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0091.001.md",
|
|
"external_id": "T0091.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--7f9d362e-b46b-4c7e-a578-a6b3c9510ff2"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--26162c87-c9ac-445f-8d88-68335f9a3197",
|
|
"created_by_ref": "identity--13f6f274-ac2e-4579-8be6-9725818581ea",
|
|
"created": "2022-07-02T19:37:33.865727Z",
|
|
"modified": "2022-07-02T19:37:33.865727Z",
|
|
"name": "Recruit Partisans",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0091.002.md",
|
|
"external_id": "T0091.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--094ed745-5f02-4594-acb3-1897c1b74367"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ec4782e3-ff29-4fc3-8040-bad6dcee8174",
|
|
"created_by_ref": "identity--319fe8fa-0e16-403b-8227-98daea715b42",
|
|
"created": "2022-07-02T19:37:33.86615Z",
|
|
"modified": "2022-07-02T19:37:33.86615Z",
|
|
"name": "Enlist Troll Accounts",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0091.003.md",
|
|
"external_id": "T0091.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--bff26be5-a735-45c1-969f-b55d3ad8dc52"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ff7191a5-5a67-4d2c-9b4b-89b9b9ba8782",
|
|
"created_by_ref": "identity--dd8e3737-9acc-4609-b78d-5f20eec53bbc",
|
|
"created": "2022-07-02T19:37:33.866569Z",
|
|
"modified": "2022-07-02T19:37:33.866569Z",
|
|
"name": "Build Network",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0092.md",
|
|
"external_id": "T0092"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--27126e47-5b2a-402f-b0ed-b815c80666df"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--619b95a1-167c-4ff3-86ab-b7ebc2b13b43",
|
|
"created_by_ref": "identity--be26c332-ed2c-4066-8f98-d78aa1c00818",
|
|
"created": "2022-07-02T19:37:33.866988Z",
|
|
"modified": "2022-07-02T19:37:33.866988Z",
|
|
"name": "Create Organizations",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0092.001.md",
|
|
"external_id": "T0092.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--5061c7cc-3af5-49a0-9245-2669cde78b6b"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--8e4c5820-7bff-4ec5-9715-40719666da71",
|
|
"created_by_ref": "identity--57820783-429b-4669-9f77-ac679f2a3466",
|
|
"created": "2022-07-02T19:37:33.867417Z",
|
|
"modified": "2022-07-02T19:37:33.867417Z",
|
|
"name": "Use Follow Trains",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0092.002.md",
|
|
"external_id": "T0092.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c337e02e-687d-43ba-995a-0df7c768cade"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ad4751a2-109e-4796-8722-dce77aaa643a",
|
|
"created_by_ref": "identity--4f7b4d2c-47c8-4274-91c2-1d7bd10e1408",
|
|
"created": "2022-07-02T19:37:33.86784Z",
|
|
"modified": "2022-07-02T19:37:33.86784Z",
|
|
"name": "Create Community or Sub-group",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0092.003.md",
|
|
"external_id": "T0092.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--de688407-08e9-4ef8-a01a-567f91a9872c"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--7c8a9541-c05f-40fc-ac52-b89ad8d9a2f4",
|
|
"created_by_ref": "identity--330e5af1-12ea-4f72-8e45-607ff963a108",
|
|
"created": "2022-07-02T19:37:33.868264Z",
|
|
"modified": "2022-07-02T19:37:33.868264Z",
|
|
"name": "Acquire/Recruit Network",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0093.md",
|
|
"external_id": "T0093"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--4eb6823b-9e72-4091-aa68-936ab1e16981"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--4a78b2bf-0ab4-4478-a06a-6938e709da36",
|
|
"created_by_ref": "identity--54541f0c-376c-4631-9749-bee32c80cf00",
|
|
"created": "2022-07-02T19:37:33.868688Z",
|
|
"modified": "2022-07-02T19:37:33.868688Z",
|
|
"name": "Fund Proxies",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0093.001.md",
|
|
"external_id": "T0093.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--42836a54-4324-4359-b8d2-4aa8e6f4490b"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--135f88a1-1d17-4fc7-8c14-88ecf2160f29",
|
|
"created_by_ref": "identity--30438970-eabc-48dd-8cc5-1d32817e6c87",
|
|
"created": "2022-07-02T19:37:33.869135Z",
|
|
"modified": "2022-07-02T19:37:33.869135Z",
|
|
"name": "Acquire Botnets",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0093.002.md",
|
|
"external_id": "T0093.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--ef3bcec0-4fca-4d69-adfc-85f8c5d07c21"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--96b4fe73-ff37-4a1a-8be2-4750735d0441",
|
|
"created_by_ref": "identity--0f006580-1669-46b4-8a49-d488991888e6",
|
|
"created": "2022-07-02T19:37:33.869555Z",
|
|
"modified": "2022-07-02T19:37:33.869555Z",
|
|
"name": "Infiltrate Existing Networks",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0094.md",
|
|
"external_id": "T0094"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--8fffb44e-03fc-4f96-b496-ce530d88d422"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--a37bdf98-3cb9-473a-b913-876ff9133a6b",
|
|
"created_by_ref": "identity--43838b8a-6227-4a5e-92c1-547c0aff7142",
|
|
"created": "2022-07-02T19:37:33.869971Z",
|
|
"modified": "2022-07-02T19:37:33.869971Z",
|
|
"name": "Identify susceptible targets in networks",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0094.001.md",
|
|
"external_id": "T0094.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--7a582033-0b35-4a5d-bb84-bc24e3941d8c"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--3cece475-02b2-4671-8e2f-c916bbf14958",
|
|
"created_by_ref": "identity--414b6582-daed-422e-9d86-f855ccd8c5c0",
|
|
"created": "2022-07-02T19:37:33.870389Z",
|
|
"modified": "2022-07-02T19:37:33.870389Z",
|
|
"name": "Utilize Butterfly Attacks",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0094.002.md",
|
|
"external_id": "T0094.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--37bc4615-6a71-4848-bf87-27d59c0821bd"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--166792ef-462e-4b61-8abf-d9b250ceac14",
|
|
"created_by_ref": "identity--2d3a9bd7-5386-48bd-9ffe-c7af0fe59bbf",
|
|
"created": "2022-07-02T19:37:33.870813Z",
|
|
"modified": "2022-07-02T19:37:33.870813Z",
|
|
"name": "Develop Owned Media Assets",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0095.md",
|
|
"external_id": "T0095"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--cf16f77c-3709-404b-ad0c-999200f29c66"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--e94c61d4-dcbb-45a9-b1fd-c3fe794aa09a",
|
|
"created_by_ref": "identity--3e2a03fd-ff85-4db1-b749-a9d292da2c7d",
|
|
"created": "2022-07-02T19:37:33.871232Z",
|
|
"modified": "2022-07-02T19:37:33.871232Z",
|
|
"name": "Leverage Content Farms",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0096.md",
|
|
"external_id": "T0096"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--3baf6c77-b7cb-4f84-a2c2-462ded44bca5"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--f7fb4759-cf9f-472f-babf-5a8654e18d32",
|
|
"created_by_ref": "identity--ddb7071e-94c0-4897-85aa-594a6b255066",
|
|
"created": "2022-07-02T19:37:33.871651Z",
|
|
"modified": "2022-07-02T19:37:33.871651Z",
|
|
"name": "Create Content Farms",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0096.001.md",
|
|
"external_id": "T0096.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--77d562ee-c461-44f8-84ff-5783d3fa3239"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--413c3407-ef08-42be-a894-36b192314ccb",
|
|
"created_by_ref": "identity--ded204f4-4cd2-48b5-887f-93ba3ee4180d",
|
|
"created": "2022-07-02T19:37:33.872073Z",
|
|
"modified": "2022-07-02T19:37:33.872073Z",
|
|
"name": "Outsource Content Creation to External Organizations",
|
|
"description": "TA15",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-social-assets"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0096.002.md",
|
|
"external_id": "T0096.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--bac82c4f-a4e5-4252-99e7-f0e9dfad7cc0"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--31a6f5d8-748f-4135-8451-a360daa7d534",
|
|
"created_by_ref": "identity--0465705d-37cf-4cd2-8964-568afe5c091c",
|
|
"created": "2022-07-02T19:37:33.872497Z",
|
|
"modified": "2022-07-02T19:37:33.872497Z",
|
|
"name": "Create personas",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0097.md",
|
|
"external_id": "T0097"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--92b9e58e-167f-455a-a3c0-539e73b55902"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--a1bce136-1a63-48ab-8c8b-6011e6e8e722",
|
|
"created_by_ref": "identity--b00a3f6c-4938-461f-88d0-3cbb14009925",
|
|
"created": "2022-07-02T19:37:33.872913Z",
|
|
"modified": "2022-07-02T19:37:33.872913Z",
|
|
"name": "Backstop personas ",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0097.001.md",
|
|
"external_id": "T0097.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--358e3f18-046e-49f2-9f5b-d2dbb9ef0f3b"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--1e4ba283-1658-4fb7-b565-6132c093a6ad",
|
|
"created_by_ref": "identity--55f0514b-3b4b-49d0-9b36-23010e324b0a",
|
|
"created": "2022-07-02T19:37:33.873333Z",
|
|
"modified": "2022-07-02T19:37:33.873333Z",
|
|
"name": "Establish Inauthentic News Sites",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0098.md",
|
|
"external_id": "T0098"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--58bfb3d6-fbdd-4590-8daa-782c9e4a02b4"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--a379fb89-012d-45fa-924b-9015c09255ad",
|
|
"created_by_ref": "identity--5aa03f95-d8e1-45a2-9821-28cb2d3f8257",
|
|
"created": "2022-07-02T19:37:33.873754Z",
|
|
"modified": "2022-07-02T19:37:33.873754Z",
|
|
"name": "Create Inauthentic News Sites",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0098.001.md",
|
|
"external_id": "T0098.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--237e6a60-3efb-4329-b756-829a532d2397"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--c81d58e7-413f-4e62-9c82-ff482e7a79c6",
|
|
"created_by_ref": "identity--eaeceacb-fd86-4bda-a94b-7d1daaf0b93a",
|
|
"created": "2022-07-02T19:37:33.874175Z",
|
|
"modified": "2022-07-02T19:37:33.874175Z",
|
|
"name": "Leverage Existing Inauthentic News Sites",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0098.002.md",
|
|
"external_id": "T0098.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--614d4e66-84c6-4db3-8c66-28eb610235fa"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ca0e5dde-0b14-492c-9fcf-b4c16569ebf2",
|
|
"created_by_ref": "identity--ca3889fa-bb42-4c02-98a3-fb8f3bffbbff",
|
|
"created": "2022-07-02T19:37:33.874597Z",
|
|
"modified": "2022-07-02T19:37:33.874597Z",
|
|
"name": "Prepare Assets Impersonating Legitimate Entities",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0099.md",
|
|
"external_id": "T0099"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1e770dc2-f315-4e6d-bf24-070ac0880525"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--fe29b144-2129-46f4-a908-8aac1f176c45",
|
|
"created_by_ref": "identity--ca715a23-8f5f-4bc0-b9c2-1c612101710d",
|
|
"created": "2022-07-02T19:37:33.875013Z",
|
|
"modified": "2022-07-02T19:37:33.875013Z",
|
|
"name": "Astroturfing",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0099.001.md",
|
|
"external_id": "T0099.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1a02b12b-73de-42be-b401-a9439ecf80c1"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--3b1a05af-f77a-4ebd-ba0f-140eef9ab57b",
|
|
"created_by_ref": "identity--b1104618-8e2e-4b1c-8d48-67a7d1e88637",
|
|
"created": "2022-07-02T19:37:33.875433Z",
|
|
"modified": "2022-07-02T19:37:33.875433Z",
|
|
"name": "Spoof/parody account/site",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0099.002.md",
|
|
"external_id": "T0099.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1d3b2923-0087-4815-a454-5bb4b7284e98"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--f33e19e4-8f79-4170-8d1a-93052b6097f6",
|
|
"created_by_ref": "identity--8cce17fc-acf7-40f2-baaf-ef32befeb878",
|
|
"created": "2022-07-02T19:37:33.875851Z",
|
|
"modified": "2022-07-02T19:37:33.875851Z",
|
|
"name": "Co-opt Trusted Sources",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0100.md",
|
|
"external_id": "T0100"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--0be53078-50df-43dd-a327-8238fb443460"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--7ce04f53-2904-4ebc-aa21-7adb6b05b3cd",
|
|
"created_by_ref": "identity--06603b65-af3c-4454-824a-5f6566ad5abe",
|
|
"created": "2022-07-02T19:37:33.876272Z",
|
|
"modified": "2022-07-02T19:37:33.876272Z",
|
|
"name": "Co-Opt Trusted Individuals",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0100.001.md",
|
|
"external_id": "T0100.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--141a8483-e31c-489b-911f-4f0df4401c89"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--5e9ea2d3-4861-4332-a10f-7b047127eae9",
|
|
"created_by_ref": "identity--be485c19-ec05-442c-84a9-935f46a98afe",
|
|
"created": "2022-07-02T19:37:33.876689Z",
|
|
"modified": "2022-07-02T19:37:33.876689Z",
|
|
"name": "Co-Opt Grassroots Groups",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0100.002.md",
|
|
"external_id": "T0100.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--2d696fd1-e984-4e56-8865-2e4988851b99"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--119de960-e1cf-4bcf-a2e8-5c17f1f856ef",
|
|
"created_by_ref": "identity--995f3c32-09b4-4168-b317-656d7291d086",
|
|
"created": "2022-07-02T19:37:33.87711Z",
|
|
"modified": "2022-07-02T19:37:33.87711Z",
|
|
"name": "Co-opt Influencers",
|
|
"description": "TA16",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "establish-legitimacy"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0100.003.md",
|
|
"external_id": "T0100.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--47b8ced9-5146-4583-9394-cd0ba062135c"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--5c61facb-db2d-40f7-b750-1474035fc986",
|
|
"created_by_ref": "identity--76ee181c-4e48-49e4-ad07-99f5a582fff6",
|
|
"created": "2022-07-02T19:37:33.87753Z",
|
|
"modified": "2022-07-02T19:37:33.87753Z",
|
|
"name": "Create Localized Content",
|
|
"description": "TA05",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "microtarget"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0101.md",
|
|
"external_id": "T0101"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1bbbe02c-b3c7-4bfa-838b-9fe245f17384"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--52b1ecb9-deff-416f-9480-e38e48bf18ee",
|
|
"created_by_ref": "identity--4fd8af7e-146f-4a88-9cf1-ea56f9a00354",
|
|
"created": "2022-07-02T19:37:33.877947Z",
|
|
"modified": "2022-07-02T19:37:33.877947Z",
|
|
"name": "Leverage Echo Chambers/Filter Bubbles",
|
|
"description": "TA05",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "microtarget"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0102.md",
|
|
"external_id": "T0102"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--b2b5873c-408e-43cd-92f3-6b0f0bd0ceda"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--8a72e5b3-f68e-43d7-9e89-6c53364ceb06",
|
|
"created_by_ref": "identity--0254a7d4-34ed-4013-8a7a-97eb70017fff",
|
|
"created": "2022-07-02T19:37:33.878375Z",
|
|
"modified": "2022-07-02T19:37:33.878375Z",
|
|
"name": "Use existing Echo Chambers/Filter Bubbles",
|
|
"description": "TA05",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "microtarget"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0102.001.md",
|
|
"external_id": "T0102.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--15c0a8b7-cbb7-45fc-b874-0a8ab9ba53a1"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--7cd31068-f7b2-4fb9-85b6-2f52333b9f0d",
|
|
"created_by_ref": "identity--ae82f01a-ef55-456b-b294-d81f6e809f26",
|
|
"created": "2022-07-02T19:37:33.878792Z",
|
|
"modified": "2022-07-02T19:37:33.878792Z",
|
|
"name": "Create Echo Chambers/Filter Bubbles",
|
|
"description": "TA05",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "microtarget"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0102.002.md",
|
|
"external_id": "T0102.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--7c713745-6e49-4c67-abb1-301f7880c68e"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ed49de26-e110-49ab-b45a-014ddcb923b7",
|
|
"created_by_ref": "identity--d73680d8-ac62-4c21-856a-58a0ac2b8ed9",
|
|
"created": "2022-07-02T19:37:33.879208Z",
|
|
"modified": "2022-07-02T19:37:33.879208Z",
|
|
"name": "Exploit Data Voids",
|
|
"description": "TA05",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "microtarget"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0102.003.md",
|
|
"external_id": "T0102.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--9e7615bb-94e2-4a8c-835a-d44f7166ec3c"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--c3c41284-4e23-4b05-aa9e-a595acbf0d61",
|
|
"created_by_ref": "identity--a5869b26-37d2-4f1f-b4ff-ffa531495248",
|
|
"created": "2022-07-02T19:37:33.879624Z",
|
|
"modified": "2022-07-02T19:37:33.879624Z",
|
|
"name": "Livestream",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0103.md",
|
|
"external_id": "T0103"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--3acff58a-78f1-4c75-be69-e35e935b574f"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--2e931c4c-9c3b-4188-8ce3-ae6e8ca53db9",
|
|
"created_by_ref": "identity--92655b09-2ad0-4d08-80ee-c4c0b26dd889",
|
|
"created": "2022-07-02T19:37:33.880044Z",
|
|
"modified": "2022-07-02T19:37:33.880044Z",
|
|
"name": "Video Livestream",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0103.001.md",
|
|
"external_id": "T0103.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--e25112b4-3da0-4a48-b46b-e1811b009a4c"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--fcbe2259-8da5-45ff-a50e-b6405cf67f61",
|
|
"created_by_ref": "identity--1aa10762-2111-40cb-bb76-e53db04dddc1",
|
|
"created": "2022-07-02T19:37:33.880491Z",
|
|
"modified": "2022-07-02T19:37:33.880491Z",
|
|
"name": "Audio Livestream",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0103.002.md",
|
|
"external_id": "T0103.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--fd34a3a8-0e17-4f89-87f9-423fb4ec8c9c"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--c2587109-d212-4ffc-a344-998a8d901d4a",
|
|
"created_by_ref": "identity--b7ccec3a-8bc1-43d0-8c21-fecd4c190f9f",
|
|
"created": "2022-07-02T19:37:33.880913Z",
|
|
"modified": "2022-07-02T19:37:33.880913Z",
|
|
"name": "Social Networks",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0104.md",
|
|
"external_id": "T0104"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--4aae27b9-fe73-4735-a39e-c25f477f2c48"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--d014ffec-14b7-4de1-a219-de64f06a10ad",
|
|
"created_by_ref": "identity--5c86c925-e169-4843-8b0b-f1bb04df119c",
|
|
"created": "2022-07-02T19:37:33.881331Z",
|
|
"modified": "2022-07-02T19:37:33.881331Z",
|
|
"name": "Mainstream Social Networks",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0104.001.md",
|
|
"external_id": "T0104.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--0a3003a9-83fd-4adc-a586-106f5ccd2c2c"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--dbf9dc65-6dc5-469e-85c8-e6f7973fba1c",
|
|
"created_by_ref": "identity--1795d14d-872b-4a57-a338-fc1b72276c9a",
|
|
"created": "2022-07-02T19:37:33.881751Z",
|
|
"modified": "2022-07-02T19:37:33.881751Z",
|
|
"name": "Dating Apps",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0104.002.md",
|
|
"external_id": "T0104.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--999fcb16-b172-4d4c-b3aa-1c52f5d2927a"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--c8c75b45-8889-4c41-ba09-436588e9fafc",
|
|
"created_by_ref": "identity--de3580d1-5a73-46fd-b0f6-8c99472152c2",
|
|
"created": "2022-07-02T19:37:33.88218Z",
|
|
"modified": "2022-07-02T19:37:33.88218Z",
|
|
"name": "Private/Closed Social Networks",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0104.003.md",
|
|
"external_id": "T0104.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f7181424-1eb3-4f4a-8617-42db325a3cec"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--13bfd1a4-d2a5-4f0b-b344-f43402240288",
|
|
"created_by_ref": "identity--74079e16-c7eb-4be5-bdca-b2f705162d7e",
|
|
"created": "2022-07-02T19:37:33.882595Z",
|
|
"modified": "2022-07-02T19:37:33.882595Z",
|
|
"name": "Interest-Based Networks",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0104.004.md",
|
|
"external_id": "T0104.004"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1182e302-7b74-4794-afdb-fb3c2af5d839"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--1074bd71-5cce-4b9e-a3f5-74d3bad21773",
|
|
"created_by_ref": "identity--ae78af37-53a7-4231-ad16-fff9552f93bb",
|
|
"created": "2022-07-02T19:37:33.883014Z",
|
|
"modified": "2022-07-02T19:37:33.883014Z",
|
|
"name": "Use hashtags",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0104.005.md",
|
|
"external_id": "T0104.005"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--8e7c940f-5ca4-4d04-8f02-bb2c9b88739a"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--b8667ffa-fae8-4d7d-a59a-28b9fccd37a1",
|
|
"created_by_ref": "identity--5d403f77-3f5c-44b6-a9af-d479a59317a9",
|
|
"created": "2022-07-02T19:37:33.883432Z",
|
|
"modified": "2022-07-02T19:37:33.883432Z",
|
|
"name": "Create dedicated hashtag",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0104.006.md",
|
|
"external_id": "T0104.006"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--53975a71-d625-47ee-8c8e-73d9274e6769"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--90964b9c-b4fc-424a-a08c-c67c3cf83285",
|
|
"created_by_ref": "identity--8d4adecc-dd39-460d-b2e4-3dac9ca04cab",
|
|
"created": "2022-07-02T19:37:33.883855Z",
|
|
"modified": "2022-07-02T19:37:33.883855Z",
|
|
"name": "Media Sharing Networks",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0105.md",
|
|
"external_id": "T0105"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--d6b009ab-21bc-4104-92e4-2ee79a01dd30"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--3ae5c480-138a-4de6-9bda-40602b60882f",
|
|
"created_by_ref": "identity--3524277a-976f-4ce8-8b8e-174d25f26623",
|
|
"created": "2022-07-02T19:37:33.884279Z",
|
|
"modified": "2022-07-02T19:37:33.884279Z",
|
|
"name": "Photo Sharing",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0105.001.md",
|
|
"external_id": "T0105.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--d7cf651b-2928-4bde-9c4c-5482ddfad77d"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--bffc0e1d-00e9-4b01-b463-97e34bbacf61",
|
|
"created_by_ref": "identity--d28a5920-dcab-4604-8bfd-5d9393114919",
|
|
"created": "2022-07-02T19:37:33.884695Z",
|
|
"modified": "2022-07-02T19:37:33.884695Z",
|
|
"name": "Video Sharing",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0105.002.md",
|
|
"external_id": "T0105.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--48221221-577f-41e9-b295-eaa1a3620419"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--7ff06022-3741-413e-9093-50028e93dfb5",
|
|
"created_by_ref": "identity--c19421fa-06bc-4b7e-80fa-4b55463506cf",
|
|
"created": "2022-07-02T19:37:33.885116Z",
|
|
"modified": "2022-07-02T19:37:33.885116Z",
|
|
"name": "Audio sharing",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0105.003.md",
|
|
"external_id": "T0105.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--5aae22d1-03b1-47b6-854d-6c49a59c50d8"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--96fe9c29-f81f-4588-ab2c-7b082062c68d",
|
|
"created_by_ref": "identity--6581694e-acb5-4b54-ae30-a9e984f8e559",
|
|
"created": "2022-07-02T19:37:33.885535Z",
|
|
"modified": "2022-07-02T19:37:33.885535Z",
|
|
"name": "Discussion Forums",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0106.md",
|
|
"external_id": "T0106"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--57cb4e90-51fa-41e5-af70-87f1fa6e755d"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--d3d90249-56e0-4885-892d-9244af526bed",
|
|
"created_by_ref": "identity--a0198973-8871-4a2f-a002-e9b10d2372eb",
|
|
"created": "2022-07-02T19:37:33.885949Z",
|
|
"modified": "2022-07-02T19:37:33.885949Z",
|
|
"name": "Anonymous Message Boards",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0106.001.md",
|
|
"external_id": "T0106.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c97baecd-7315-4df5-a308-4b747e4967b6"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--06499ed8-73ec-4fc3-ade4-d4a01b27004d",
|
|
"created_by_ref": "identity--99a338cd-77df-42aa-9b47-e94a5f0a95b7",
|
|
"created": "2022-07-02T19:37:33.886371Z",
|
|
"modified": "2022-07-02T19:37:33.886371Z",
|
|
"name": "Bookmarking and Content Curation",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0107.md",
|
|
"external_id": "T0107"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--cd006f47-4cda-4065-91cd-dcef0229cdc0"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--0e370748-3447-4f47-ae55-2d73b68c8e68",
|
|
"created_by_ref": "identity--fc1f0ca1-8ae2-4457-89b8-e2934840c738",
|
|
"created": "2022-07-02T19:37:33.88679Z",
|
|
"modified": "2022-07-02T19:37:33.88679Z",
|
|
"name": "Blogging and Publishing Networks",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0108.md",
|
|
"external_id": "T0108"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--33a50807-7b1d-469c-926a-e33dfa3e94c7"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--40d50bb1-6cea-492a-a4e6-9e1af67e2c3e",
|
|
"created_by_ref": "identity--3477f978-5b8b-4fcf-b1f3-599514859eda",
|
|
"created": "2022-07-02T19:37:33.88721Z",
|
|
"modified": "2022-07-02T19:37:33.88721Z",
|
|
"name": "Consumer Review Networks",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0109.md",
|
|
"external_id": "T0109"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--8e626bb8-d356-4670-9790-ef5407fcb02a"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--a2f153d1-8e74-4aa1-9e5b-5b958316c884",
|
|
"created_by_ref": "identity--3d27d5e7-85a1-4a92-8985-29cd87dba0ce",
|
|
"created": "2022-07-02T19:37:33.887631Z",
|
|
"modified": "2022-07-02T19:37:33.887631Z",
|
|
"name": "Formal Diplomatic Channels",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0110.md",
|
|
"external_id": "T0110"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--cf3475aa-a62c-4783-ad97-0625cb975640"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--28677f05-619a-43fa-bf90-5e1ec6092ce3",
|
|
"created_by_ref": "identity--3200d257-b91d-4e0b-8fb4-a35da7eced65",
|
|
"created": "2022-07-02T19:37:33.888046Z",
|
|
"modified": "2022-07-02T19:37:33.888046Z",
|
|
"name": "Traditional Media",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0111.md",
|
|
"external_id": "T0111"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--808ff8d9-5eb9-4681-8785-201b6237ca8c"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--eed01fd7-c799-46f4-bf43-23b14bc7b2c0",
|
|
"created_by_ref": "identity--bd99679e-6128-4c78-ac9c-6c5001d83426",
|
|
"created": "2022-07-02T19:37:33.888463Z",
|
|
"modified": "2022-07-02T19:37:33.888463Z",
|
|
"name": "TV",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0111.001.md",
|
|
"external_id": "T0111.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--5e4a556d-3204-4669-bca2-ac618e10f89f"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--4bcf6f16-207d-47c4-8459-951cb6366002",
|
|
"created_by_ref": "identity--55963dfc-7a04-48da-adad-ecf7a9719c5d",
|
|
"created": "2022-07-02T19:37:33.888875Z",
|
|
"modified": "2022-07-02T19:37:33.888875Z",
|
|
"name": "Newspaper",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0111.002.md",
|
|
"external_id": "T0111.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--3d7475f1-41ae-44ec-90b8-860deb52f702"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--e1dacd01-4d8d-41eb-8fbe-e9c895ab42db",
|
|
"created_by_ref": "identity--c5c42d81-6fb7-42c6-9506-d9973d1600b2",
|
|
"created": "2022-07-02T19:37:33.889295Z",
|
|
"modified": "2022-07-02T19:37:33.889295Z",
|
|
"name": "Radio",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0111.003.md",
|
|
"external_id": "T0111.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--16f83816-b1d8-4193-8beb-a48874ee98b0"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--d47152fb-0fb7-4a4e-937a-616a5dc10212",
|
|
"created_by_ref": "identity--9cce50b5-e4e1-48c7-94ef-bbb979bccede",
|
|
"created": "2022-07-02T19:37:33.889715Z",
|
|
"modified": "2022-07-02T19:37:33.889715Z",
|
|
"name": "Email",
|
|
"description": "TA07",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "select-channels-and-affordances"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0112.md",
|
|
"external_id": "T0112"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--86ed3d34-6b86-4bdd-9cd7-a0f6996cbc98"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--c1de126f-2ce1-4b43-9955-be407c7f9369",
|
|
"created_by_ref": "identity--e2fe3708-e9ca-48a4-90c5-4fa512018117",
|
|
"created": "2022-07-02T19:37:33.890141Z",
|
|
"modified": "2022-07-02T19:37:33.890141Z",
|
|
"name": "Employ Commercial Analytic Firms",
|
|
"description": "TA08",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "conduct-pump-priming"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0113.md",
|
|
"external_id": "T0113"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--88bb9555-227d-47dc-aba7-3ae1321f658e"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--3a789c82-8041-413f-8c11-ba9506f755d4",
|
|
"created_by_ref": "identity--580d5765-58fa-4626-9e73-307e7b90a7bc",
|
|
"created": "2022-07-02T19:37:33.890565Z",
|
|
"modified": "2022-07-02T19:37:33.890565Z",
|
|
"name": "Deliver Ads",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "deliver-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0114.md",
|
|
"external_id": "T0114"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--38076451-aeef-4cd2-aaf8-a9add5a65c1b"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--016005b5-49bc-4862-8329-c772540b0554",
|
|
"created_by_ref": "identity--0fd22e27-d4f7-494b-894b-d0a3ed94e57a",
|
|
"created": "2022-07-02T19:37:33.890983Z",
|
|
"modified": "2022-07-02T19:37:33.890983Z",
|
|
"name": "Social media",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "deliver-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0114.001.md",
|
|
"external_id": "T0114.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--3ee1e88d-b3c0-435d-a92d-8f6818c55e94"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--50fad0cf-e233-46eb-86fb-8c013f51dc62",
|
|
"created_by_ref": "identity--5226b6ba-ce57-4181-a237-400a0c293607",
|
|
"created": "2022-07-02T19:37:33.891399Z",
|
|
"modified": "2022-07-02T19:37:33.891399Z",
|
|
"name": "Traditional Media",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "deliver-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0114.002.md",
|
|
"external_id": "T0114.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--7d2aacf9-15e7-4fd1-8b1c-ed3a4ac82111"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--dc4814ee-4512-49db-86e5-6f4a3e6da77b",
|
|
"created_by_ref": "identity--cbbbb902-55d3-4fce-bb6d-c30415c5e358",
|
|
"created": "2022-07-02T19:37:33.891847Z",
|
|
"modified": "2022-07-02T19:37:33.891847Z",
|
|
"name": "Post Content",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "deliver-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0115.md",
|
|
"external_id": "T0115"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c29f5656-49bc-47a2-95dd-ce1ddf7de95e"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--91d4253c-5bd1-44e4-9fb1-5e2823df568d",
|
|
"created_by_ref": "identity--a4c200b9-9c60-471b-8962-5a4f992e303e",
|
|
"created": "2022-07-02T19:37:33.892269Z",
|
|
"modified": "2022-07-02T19:37:33.892269Z",
|
|
"name": "Share Memes",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "deliver-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0115.001.md",
|
|
"external_id": "T0115.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--3059f9a0-3e48-4c9f-abd7-eae2212bcf96"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--26e71dc7-967b-4e91-8115-c3ef95965a85",
|
|
"created_by_ref": "identity--c0f3f687-e325-4e68-999d-9ffd0a104bd6",
|
|
"created": "2022-07-02T19:37:33.892685Z",
|
|
"modified": "2022-07-02T19:37:33.892685Z",
|
|
"name": "Post Violative Content to Provoke Takedown and Backlash",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "deliver-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0115.002.md",
|
|
"external_id": "T0115.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--15d3aa3a-26e8-4862-bd0f-60cd8dd03c5e"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--9cca04f5-06b3-43b7-9fb4-ca5d5388c2b2",
|
|
"created_by_ref": "identity--d42cf709-b9c6-4a02-99eb-91f8e1c64077",
|
|
"created": "2022-07-02T19:37:33.893111Z",
|
|
"modified": "2022-07-02T19:37:33.893111Z",
|
|
"name": "One-Way Direct Posting",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "deliver-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0115.003.md",
|
|
"external_id": "T0115.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--169c5989-338c-4766-8295-1e09f97a971d"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--cf0296da-61a4-451f-9359-2c31920c7ca4",
|
|
"created_by_ref": "identity--e83e7bfa-7e54-4432-9a38-2901ad245421",
|
|
"created": "2022-07-02T19:37:33.893539Z",
|
|
"modified": "2022-07-02T19:37:33.893539Z",
|
|
"name": "Comment or Reply on Content",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "deliver-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0116.md",
|
|
"external_id": "T0116"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--d1668327-c01c-42eb-b57d-ef51bf8b2081"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--7e81a600-4f62-456b-9a6e-d3cf98109066",
|
|
"created_by_ref": "identity--c894ea29-36e1-483d-8b22-f832ee346e6f",
|
|
"created": "2022-07-02T19:37:33.893959Z",
|
|
"modified": "2022-07-02T19:37:33.893959Z",
|
|
"name": "Post inauthentic social media comment",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "deliver-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0116.001.md",
|
|
"external_id": "T0116.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a7c97e3a-96ac-4b94-b6ca-0b571be3d103"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--6550fcfb-1675-4154-b476-00a73a9d5375",
|
|
"created_by_ref": "identity--c132248e-125f-4279-bd75-a536574d2677",
|
|
"created": "2022-07-02T19:37:33.894376Z",
|
|
"modified": "2022-07-02T19:37:33.894376Z",
|
|
"name": "Attract Traditional Media",
|
|
"description": "TA09",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "deliver-content"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0117.md",
|
|
"external_id": "T0117"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--3da73f53-eba5-44a2-99da-4c68780d60dc"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--f3d1bcd1-a3bb-419c-810c-09fae4570029",
|
|
"created_by_ref": "identity--712af04d-b747-4f99-8827-266dbe76d9ee",
|
|
"created": "2022-07-02T19:37:33.894792Z",
|
|
"modified": "2022-07-02T19:37:33.894792Z",
|
|
"name": "Amplify Existing Narrative",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0118.md",
|
|
"external_id": "T0118"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1477081d-30e0-4b29-b63f-7cf8ad6ca372"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--358ff467-07ec-44ef-a446-b801734c1e63",
|
|
"created_by_ref": "identity--1fad493a-9908-405e-a08d-10d3af4bcb0a",
|
|
"created": "2022-07-02T19:37:33.895209Z",
|
|
"modified": "2022-07-02T19:37:33.895209Z",
|
|
"name": "Cross-Posting",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0119.md",
|
|
"external_id": "T0119"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1a510ef5-b73d-47d5-aee0-e2e69850ef55"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--738d3ec1-c937-483d-bc3f-0c0f5d8e2a67",
|
|
"created_by_ref": "identity--ce8f2aad-f687-4d48-b3fa-dd7275f3bd32",
|
|
"created": "2022-07-02T19:37:33.895626Z",
|
|
"modified": "2022-07-02T19:37:33.895626Z",
|
|
"name": "Post Across Groups",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0119.001.md",
|
|
"external_id": "T0119.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--217d4676-1f1d-4e6e-8ffc-b5d058a4d308"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--e4f261c9-e688-4b12-b84b-073475977fe5",
|
|
"created_by_ref": "identity--47a260c5-baa5-4adb-a354-f8ba1750c283",
|
|
"created": "2022-07-02T19:37:33.896043Z",
|
|
"modified": "2022-07-02T19:37:33.896043Z",
|
|
"name": "Post Across Platform",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0119.002.md",
|
|
"external_id": "T0119.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--5eae649c-dc07-4ddb-bd46-8d521cb1881b"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--1291465b-22f5-446f-b5a5-135024b390e9",
|
|
"created_by_ref": "identity--4aaa6851-f302-4c91-8e19-3796c70b1598",
|
|
"created": "2022-07-02T19:37:33.896465Z",
|
|
"modified": "2022-07-02T19:37:33.896465Z",
|
|
"name": "Post Across Disciplines",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0119.003.md",
|
|
"external_id": "T0119.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--22f60d0c-e396-4e34-a9f0-361d9c25c0ea"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--c2ec8691-88b2-4a59-9d14-700de3aa455e",
|
|
"created_by_ref": "identity--04f5eaac-a3fd-4e13-8fb7-a644e2c08473",
|
|
"created": "2022-07-02T19:37:33.896885Z",
|
|
"modified": "2022-07-02T19:37:33.896885Z",
|
|
"name": "Incentivize Sharing",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0120.md",
|
|
"external_id": "T0120"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--5360ae48-490d-4bec-ae4d-c3ecb17236e5"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--1c47140e-8a76-4dfc-a2ac-66606a0839e8",
|
|
"created_by_ref": "identity--9020f39c-a7c6-4efa-9d44-527b24f4d39d",
|
|
"created": "2022-07-02T19:37:33.897301Z",
|
|
"modified": "2022-07-02T19:37:33.897301Z",
|
|
"name": "Use Affiliate Marketing Programs",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0120.001.md",
|
|
"external_id": "T0120.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--64ee366b-e995-4090-af71-42488e04a67e"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--67b0bd11-c8d2-480f-8320-1313b07135eb",
|
|
"created_by_ref": "identity--adb0dd49-5545-476d-aa06-14e11529e4d4",
|
|
"created": "2022-07-02T19:37:33.897715Z",
|
|
"modified": "2022-07-02T19:37:33.897715Z",
|
|
"name": "Use Contests and Prizes",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0120.002.md",
|
|
"external_id": "T0120.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--b8d336fd-9f5d-48d7-9c5e-b932fe5ef1b8"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--d22a211f-30fd-4273-bd7d-ab39e5a1b6c9",
|
|
"created_by_ref": "identity--3c2c0405-6e17-407c-aa4e-877d360f6b19",
|
|
"created": "2022-07-02T19:37:33.898132Z",
|
|
"modified": "2022-07-02T19:37:33.898132Z",
|
|
"name": "Manipulate Platform Algorithm",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0121.md",
|
|
"external_id": "T0121"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--fb7d68dc-4d10-427e-a1e6-4d356ff50e30"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--9fd6675d-a037-43c6-a307-5bb8af2a1b76",
|
|
"created_by_ref": "identity--2d5ad00d-78a0-4bdd-8a57-e9605938edb3",
|
|
"created": "2022-07-02T19:37:33.898554Z",
|
|
"modified": "2022-07-02T19:37:33.898554Z",
|
|
"name": "Bypass Content Blocking",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0121.001.md",
|
|
"external_id": "T0121.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--9258578e-a098-4038-ad71-1e6ea85fb9da"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--4bde1313-8318-4a51-b4c5-191a666cdab4",
|
|
"created_by_ref": "identity--b944f8b8-d054-435d-90a3-0702d4b49458",
|
|
"created": "2022-07-02T19:37:33.898969Z",
|
|
"modified": "2022-07-02T19:37:33.898969Z",
|
|
"name": "Direct Users to Alternative Platforms",
|
|
"description": "TA17",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "maximize-exposure"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0122.md",
|
|
"external_id": "T0122"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--96d95bc4-ca1a-4566-89f2-429522954ccf"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--0a29ae3a-c165-494c-913d-d26029664f8d",
|
|
"created_by_ref": "identity--982d9d60-5c8d-4764-8ecc-8e186383b717",
|
|
"created": "2022-07-02T19:37:33.899389Z",
|
|
"modified": "2022-07-02T19:37:33.899389Z",
|
|
"name": "Control Information Environment through Offensive Cyberspace Operations",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0123.md",
|
|
"external_id": "T0123"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--48dbb9bc-5b1a-4517-953b-6ccf5acd21a2"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--17076e50-3aca-4681-820f-908bd9b43e0e",
|
|
"created_by_ref": "identity--2847de8f-961d-447e-9c97-d5c2c9097359",
|
|
"created": "2022-07-02T19:37:33.899808Z",
|
|
"modified": "2022-07-02T19:37:33.899808Z",
|
|
"name": "Delete Opposing Content",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0123.001.md",
|
|
"external_id": "T0123.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--10cf8289-ad45-48a3-87c9-a755ed59aca7"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--cfd4aaca-ef36-43f6-9db7-f0923f54cce5",
|
|
"created_by_ref": "identity--1feebe40-12be-4eba-b6fd-eed55a029b1a",
|
|
"created": "2022-07-02T19:37:33.900227Z",
|
|
"modified": "2022-07-02T19:37:33.900227Z",
|
|
"name": "Block Content",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0123.002.md",
|
|
"external_id": "T0123.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a4494d42-a939-413f-b198-d3cf5587df5c"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--861e797f-6b28-4ba5-b424-6ddb8d184aa3",
|
|
"created_by_ref": "identity--3877c9b7-6236-4b47-8102-ee9af478e1e6",
|
|
"created": "2022-07-02T19:37:33.900643Z",
|
|
"modified": "2022-07-02T19:37:33.900643Z",
|
|
"name": "Destroy Information Generation Capabilities",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0123.003.md",
|
|
"external_id": "T0123.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--eff73ab9-6d8e-47f8-9893-77012f12d8aa"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--a180a8ea-997c-4e2a-a35d-703735524843",
|
|
"created_by_ref": "identity--b826b864-de89-4ef7-882a-9124a5d2f85b",
|
|
"created": "2022-07-02T19:37:33.901057Z",
|
|
"modified": "2022-07-02T19:37:33.901057Z",
|
|
"name": "Conduct Server Redirect",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0123.004.md",
|
|
"external_id": "T0123.004"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--5f90047d-e563-4b2b-beb2-3652228510aa"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--18d23eda-bc3c-4684-b684-3e3341f449ad",
|
|
"created_by_ref": "identity--8cafd61c-f655-4e4b-8930-d52edc67576b",
|
|
"created": "2022-07-02T19:37:33.901479Z",
|
|
"modified": "2022-07-02T19:37:33.901479Z",
|
|
"name": "Suppress Opposition",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0124.md",
|
|
"external_id": "T0124"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--10e253df-c521-4aff-a34f-5f911aa77aa7"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--0462b73a-aeff-499d-8225-28c3b2b597dd",
|
|
"created_by_ref": "identity--1951e8a0-8be6-478d-87c0-253744c2b5de",
|
|
"created": "2022-07-02T19:37:33.901896Z",
|
|
"modified": "2022-07-02T19:37:33.901896Z",
|
|
"name": "Report Non-Violative Opposing Content",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0124.001.md",
|
|
"external_id": "T0124.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--239d058e-b04f-4bae-9366-009340fb06da"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--04b81e80-3d7d-416a-b86e-8e9d3d2b4ddf",
|
|
"created_by_ref": "identity--93fe88f0-bf36-4de8-b855-07729b5fcea7",
|
|
"created": "2022-07-02T19:37:33.902326Z",
|
|
"modified": "2022-07-02T19:37:33.902326Z",
|
|
"name": "Goad People into Harmful Action (Stop Hitting Yourself)",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0124.002.md",
|
|
"external_id": "T0124.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--7c6f0f6e-d62b-497b-b029-c37cfff4fdb4"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--51239901-cfe6-4565-9ddb-b884ddcb4490",
|
|
"created_by_ref": "identity--1106a9c5-988c-4aa3-b377-229f862f7222",
|
|
"created": "2022-07-02T19:37:33.902747Z",
|
|
"modified": "2022-07-02T19:37:33.902747Z",
|
|
"name": "Exploit Platform TOS/Content Moderation",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0124.003.md",
|
|
"external_id": "T0124.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--6d8db0af-f92c-4359-8f57-1ca3da2ebfb5"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--d13641e1-177e-4469-b90f-3ec69e4f0632",
|
|
"created_by_ref": "identity--487faac6-1de4-40c7-9f80-4c1dc8200d1d",
|
|
"created": "2022-07-02T19:37:33.903197Z",
|
|
"modified": "2022-07-02T19:37:33.903197Z",
|
|
"name": "Platform Filtering",
|
|
"description": "TA18",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-online-harms"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0125.md",
|
|
"external_id": "T0125"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--b41f91db-c2dd-4d51-99cb-38371f8ec1bc"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--b32934a3-9ace-45f5-8b6f-93145f6e6edd",
|
|
"created_by_ref": "identity--0c64da7f-e3fb-4787-aa6f-de354545a5ea",
|
|
"created": "2022-07-02T19:37:33.903618Z",
|
|
"modified": "2022-07-02T19:37:33.903618Z",
|
|
"name": "Encourage Attendance at Events",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0126.md",
|
|
"external_id": "T0126"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--edce1789-cf82-4792-ba9e-b69f95f00f6b"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--c5b3678c-efc0-4e2b-9cfa-672c55335753",
|
|
"created_by_ref": "identity--f8adebf6-48e3-4c6b-9eae-1d53a20bb056",
|
|
"created": "2022-07-02T19:37:33.904036Z",
|
|
"modified": "2022-07-02T19:37:33.904036Z",
|
|
"name": "Call to action to attend ",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0126.001.md",
|
|
"external_id": "T0126.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--828e92df-d308-440b-b20d-cf31b47010a3"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--c0fd0235-3c3b-4e51-b4f3-7af7b301c659",
|
|
"created_by_ref": "identity--e3754bd1-829b-4b4b-9bf0-7caa06bc25d1",
|
|
"created": "2022-07-02T19:37:33.904457Z",
|
|
"modified": "2022-07-02T19:37:33.904457Z",
|
|
"name": "Facilitate logistics or support for attendance",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0126.002.md",
|
|
"external_id": "T0126.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--843bd0a3-cd3a-41a8-8112-05b70c453e37"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--76adf1e7-e3b7-41ce-9449-ca541f9bacaf",
|
|
"created_by_ref": "identity--d6087833-d423-4155-b295-c88fa5d0c05a",
|
|
"created": "2022-07-02T19:37:33.904871Z",
|
|
"modified": "2022-07-02T19:37:33.904871Z",
|
|
"name": "Physical Violence",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0127.md",
|
|
"external_id": "T0127"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--13077a54-604e-4efb-932f-74bfbc786d14"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--1ed01ac5-1581-4170-8fff-b29952ca192d",
|
|
"created_by_ref": "identity--bbee316d-5ee7-4748-aa94-c9c1589c1a7d",
|
|
"created": "2022-07-02T19:37:33.905287Z",
|
|
"modified": "2022-07-02T19:37:33.905287Z",
|
|
"name": "Conduct Physical Violence",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0127.001.md",
|
|
"external_id": "T0127.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--4cd49be9-a1ec-40a4-b77b-ba43ef0e8e48"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--86f72dc9-e768-4d69-883d-65ba5a17700c",
|
|
"created_by_ref": "identity--686c48f7-e8aa-4b22-94a9-5800d404ed83",
|
|
"created": "2022-07-02T19:37:33.905701Z",
|
|
"modified": "2022-07-02T19:37:33.905701Z",
|
|
"name": "Encourage Physical Violence",
|
|
"description": "TA10",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "drive-offline-activity"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0127.002.md",
|
|
"external_id": "T0127.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c862d51c-56f3-4a02-9696-bb96f44537b3"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--9af345e5-efde-4c73-a8f2-802e6ffa1e61",
|
|
"created_by_ref": "identity--fc1b9bb4-b3fe-431e-ab15-cc8f01e4b11c",
|
|
"created": "2022-07-02T19:37:33.906123Z",
|
|
"modified": "2022-07-02T19:37:33.906123Z",
|
|
"name": "Conceal People",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0128.md",
|
|
"external_id": "T0128"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--07b58d45-f97b-4ee9-913c-bb1fcf7ae576"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--a9f4f62a-9687-4550-a053-3b640d455cc5",
|
|
"created_by_ref": "identity--2ff34dd0-60a8-41ff-af3a-2330ce26add7",
|
|
"created": "2022-07-02T19:37:33.906542Z",
|
|
"modified": "2022-07-02T19:37:33.906542Z",
|
|
"name": "Use Pseudonyms",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0128.001.md",
|
|
"external_id": "T0128.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a456bb1e-d171-44b6-9f22-49053e4141d6"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--e0e66b49-511e-457f-8a84-00263cae2d2d",
|
|
"created_by_ref": "identity--2525981e-81de-45ba-842b-4e2813682617",
|
|
"created": "2022-07-02T19:37:33.90696Z",
|
|
"modified": "2022-07-02T19:37:33.90696Z",
|
|
"name": "Conceal Network Identity",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0128.002.md",
|
|
"external_id": "T0128.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--0cf198ec-4414-4ff2-9065-3c515fe478da"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--9690b54b-2d7a-4bf6-bda0-fa03108d1373",
|
|
"created_by_ref": "identity--27001eb6-2d89-4689-b5ca-5069b9106223",
|
|
"created": "2022-07-02T19:37:33.907374Z",
|
|
"modified": "2022-07-02T19:37:33.907374Z",
|
|
"name": "Distance Reputable Individuals from Operation",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0128.003.md",
|
|
"external_id": "T0128.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--5bacfe3a-274a-4db9-8627-4e736e3556ba"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--d6bd33eb-fdad-4ac1-b072-20bfa30a47a2",
|
|
"created_by_ref": "identity--c26f55bd-61b2-49ed-b355-2fea5bd043ae",
|
|
"created": "2022-07-02T19:37:33.907791Z",
|
|
"modified": "2022-07-02T19:37:33.907791Z",
|
|
"name": "Launder Accounts",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0128.004.md",
|
|
"external_id": "T0128.004"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--1bdd20b7-57ca-4cb0-b42e-da46a3264bfb"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--b5fa46b3-bea6-4c22-abc1-8148a74ff144",
|
|
"created_by_ref": "identity--1918f5a0-1fea-4ab4-8780-8e0d36b59903",
|
|
"created": "2022-07-02T19:37:33.908206Z",
|
|
"modified": "2022-07-02T19:37:33.908206Z",
|
|
"name": "Change Names of Accounts",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0128.005.md",
|
|
"external_id": "T0128.005"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--e87c4dc1-a9f3-4299-bd7a-4ca96a79cbb1"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--3dc0c8ec-0552-4c7d-9301-a9705b962bb5",
|
|
"created_by_ref": "identity--776c5d28-6785-437a-a128-8f653c93d03f",
|
|
"created": "2022-07-02T19:37:33.908625Z",
|
|
"modified": "2022-07-02T19:37:33.908625Z",
|
|
"name": "Conceal Operational Activity",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0129.md",
|
|
"external_id": "T0129"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--3d78ca99-19c4-4f5e-bbe4-70c66cd24338"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--09754b27-b5d6-4613-bb21-c29a64808436",
|
|
"created_by_ref": "identity--ca020ef7-803b-41c9-8d93-1cf62e358a92",
|
|
"created": "2022-07-02T19:37:33.909047Z",
|
|
"modified": "2022-07-02T19:37:33.909047Z",
|
|
"name": "Conceal Network Identity",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0129.001.md",
|
|
"external_id": "T0129.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--9659076c-7366-4ebb-b69e-83211c05e1b6"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--66a99773-eb1b-4a08-9e80-e36ecc74fb4d",
|
|
"created_by_ref": "identity--2156fee0-aacb-4016-bb82-f77d02327593",
|
|
"created": "2022-07-02T19:37:33.909463Z",
|
|
"modified": "2022-07-02T19:37:33.909463Z",
|
|
"name": "Generate Content Unrelated to Narrative",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0129.002.md",
|
|
"external_id": "T0129.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--bbce33e5-9db0-4ab9-96d4-f39a2f3ca212"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--83e6303e-dd9a-4d90-9eed-3c480ce1603e",
|
|
"created_by_ref": "identity--b756a543-2681-440c-a1e3-72a5dd84493f",
|
|
"created": "2022-07-02T19:37:33.909903Z",
|
|
"modified": "2022-07-02T19:37:33.909903Z",
|
|
"name": "Break Association with Content",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0129.003.md",
|
|
"external_id": "T0129.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--834a65fc-e305-4fe1-bca1-37dea2564a22"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--5823e6ed-e27c-4b0b-8e5c-47fd2787c789",
|
|
"created_by_ref": "identity--34f7b742-9440-4cad-8814-e982e947cb4d",
|
|
"created": "2022-07-02T19:37:33.910325Z",
|
|
"modified": "2022-07-02T19:37:33.910325Z",
|
|
"name": "Delete URLs",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0129.004.md",
|
|
"external_id": "T0129.004"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--b78731d1-299e-4139-8495-d0b02c7f0481"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--495dc711-0327-4367-a414-0290eeac4f4b",
|
|
"created_by_ref": "identity--f56b27bf-a6eb-4b6c-9523-109f76dad201",
|
|
"created": "2022-07-02T19:37:33.910744Z",
|
|
"modified": "2022-07-02T19:37:33.910744Z",
|
|
"name": "Coordinate on encrypted/closed networks",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0129.005.md",
|
|
"external_id": "T0129.005"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f0c48a04-5dad-4e40-b927-36906325e24a"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--c63a7119-3ae3-48ed-9bf3-24ad6f413c44",
|
|
"created_by_ref": "identity--a30ead4e-5981-4fbe-9667-8cdb6ae39631",
|
|
"created": "2022-07-02T19:37:33.911163Z",
|
|
"modified": "2022-07-02T19:37:33.911163Z",
|
|
"name": "Deny involvement",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0129.006.md",
|
|
"external_id": "T0129.006"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--974dcd79-0031-4f5f-8d06-5a6fe48e191e"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--6b176c9d-770b-4bca-adc9-f01c4778ecdf",
|
|
"created_by_ref": "identity--7c21f823-1874-4b35-a378-5e299f0f4cfb",
|
|
"created": "2022-07-02T19:37:33.911586Z",
|
|
"modified": "2022-07-02T19:37:33.911586Z",
|
|
"name": "Delete Accounts/Account Activity",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0129.007.md",
|
|
"external_id": "T0129.007"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--aa350b16-efc5-4b0c-8de9-84bd6cc34b7b"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--d9e22f98-e5fb-4db2-9ee0-f7d3548e237b",
|
|
"created_by_ref": "identity--d7938d62-c21c-4b3c-acab-13842d9ad0ed",
|
|
"created": "2022-07-02T19:37:33.912005Z",
|
|
"modified": "2022-07-02T19:37:33.912005Z",
|
|
"name": "Redirect URLs",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0129.008.md",
|
|
"external_id": "T0129.008"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--d5076903-2e9b-4ba8-b4a0-8d4483784956"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--bce7329c-2d3a-493e-a076-818e487c5dc4",
|
|
"created_by_ref": "identity--ebe59029-4573-4d2a-93e6-7f8dcb19109a",
|
|
"created": "2022-07-02T19:37:33.912428Z",
|
|
"modified": "2022-07-02T19:37:33.912428Z",
|
|
"name": "Remove Post Origins",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0129.009.md",
|
|
"external_id": "T0129.009"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--7636a788-9bc1-42b4-ad15-34439c9c5898"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--12c1e2de-2948-43e2-91f5-d6d6287fcb81",
|
|
"created_by_ref": "identity--1d886c1b-0338-4453-a267-8e81f44e5a3a",
|
|
"created": "2022-07-02T19:37:33.912846Z",
|
|
"modified": "2022-07-02T19:37:33.912846Z",
|
|
"name": "Misattribute Activity",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0129.010.md",
|
|
"external_id": "T0129.010"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--cfdde26f-a0ff-4ab9-b5fa-a71bfaaf1c36"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ded03b01-9147-4e4a-a1c2-47110b5be178",
|
|
"created_by_ref": "identity--4ee09df4-24a7-4578-a20b-d08327f1e224",
|
|
"created": "2022-07-02T19:37:33.91327Z",
|
|
"modified": "2022-07-02T19:37:33.91327Z",
|
|
"name": "Conceal Infrastructure",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0130.md",
|
|
"external_id": "T0130"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--6759bae7-efff-401c-953e-327754120cef"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--41b909fa-d9b2-46ea-911d-ff82bb3f9149",
|
|
"created_by_ref": "identity--197ea789-ec4c-4bde-a1de-07723c6d72ca",
|
|
"created": "2022-07-02T19:37:33.913688Z",
|
|
"modified": "2022-07-02T19:37:33.913688Z",
|
|
"name": "Conceal Sponsorship",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0130.001.md",
|
|
"external_id": "T0130.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--9563edd9-173d-4899-9acb-3114b83c3bc9"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--a15cae9d-c883-4f06-813d-15f3ff18307b",
|
|
"created_by_ref": "identity--1ca5cd1a-95fc-4ee3-8aa9-f1f773c19147",
|
|
"created": "2022-07-02T19:37:33.914101Z",
|
|
"modified": "2022-07-02T19:37:33.914101Z",
|
|
"name": "Utilize Bulletproof Hosting",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0130.002.md",
|
|
"external_id": "T0130.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--3d4b1112-cfdb-47e2-a9c8-762aafb1ee54"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--08bc4a54-b46a-4ab6-aebd-ed4849cfb8c2",
|
|
"created_by_ref": "identity--737f8961-a94c-4ec1-9232-13ac5b96db28",
|
|
"created": "2022-07-02T19:37:33.914556Z",
|
|
"modified": "2022-07-02T19:37:33.914556Z",
|
|
"name": "Use Shell Organizations",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0130.003.md",
|
|
"external_id": "T0130.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--9521f0ff-49e1-4cdd-9182-7637fb3c7b27"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--4c1031b1-7563-4bb7-9f02-ab4e1cb9f2e4",
|
|
"created_by_ref": "identity--5549947a-450b-40bc-8ecf-28c6af4deeba",
|
|
"created": "2022-07-02T19:37:33.914977Z",
|
|
"modified": "2022-07-02T19:37:33.914977Z",
|
|
"name": "Use Cryptocurrency",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0130.004.md",
|
|
"external_id": "T0130.004"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c7877167-8d8f-4368-8e77-efbe7ea7c903"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--7ab7c20d-e442-4dd5-a6ca-da37f0ed9f8c",
|
|
"created_by_ref": "identity--9b2a87d0-69b1-4a39-9db3-3fdee71bf195",
|
|
"created": "2022-07-02T19:37:33.915393Z",
|
|
"modified": "2022-07-02T19:37:33.915393Z",
|
|
"name": "Obfuscate Payment",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0130.005.md",
|
|
"external_id": "T0130.005"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--83974aed-6d98-4f0f-8d86-b8de9f97ff2d"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--6ce27265-a3f2-424c-83d2-152e082253d1",
|
|
"created_by_ref": "identity--b54016db-f613-4823-97b6-a539bb495053",
|
|
"created": "2022-07-02T19:37:33.91581Z",
|
|
"modified": "2022-07-02T19:37:33.91581Z",
|
|
"name": "Exploit TOS/Content Moderation",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0131.md",
|
|
"external_id": "T0131"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c0b41ac0-6dcf-48fe-b76c-ceb7a57b0c0c"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--43f1053e-fc27-4507-9140-ecb96f11ea62",
|
|
"created_by_ref": "identity--64897106-d45f-4455-aef7-1d53c156bce9",
|
|
"created": "2022-07-02T19:37:33.916229Z",
|
|
"modified": "2022-07-02T19:37:33.916229Z",
|
|
"name": "Legacy web content",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0131.001.md",
|
|
"external_id": "T0131.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--daa75d39-dcc1-4296-a05a-1b9f07d8ce7e"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--1fa970eb-0e7c-43fe-91c9-f515371c73c6",
|
|
"created_by_ref": "identity--bffdb144-5ef1-44bd-9ebd-d1b3b86be8e3",
|
|
"created": "2022-07-02T19:37:33.916653Z",
|
|
"modified": "2022-07-02T19:37:33.916653Z",
|
|
"name": "Post Borderline Content",
|
|
"description": "TA11",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "persist-in-the-information-environment"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0131.002.md",
|
|
"external_id": "T0131.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--6ec95ac1-2bdb-4440-95ad-e2a581609d06"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--0c7572f3-a9d0-40c5-ad28-7e1741675f71",
|
|
"created_by_ref": "identity--3302e1fa-5821-4f0a-abc5-fa2dcdf165b4",
|
|
"created": "2022-07-02T19:37:33.91707Z",
|
|
"modified": "2022-07-02T19:37:33.91707Z",
|
|
"name": "Measure Performance",
|
|
"description": "TA12",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "assess-effectiveness"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0132.md",
|
|
"external_id": "T0132"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--aadcdd10-9716-49fc-905f-f6ea0aad954e"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--66eaf134-ca5d-47f0-9710-d72cbd1ca5b5",
|
|
"created_by_ref": "identity--22ebb242-9fc5-45b4-8a0e-62e7773037ad",
|
|
"created": "2022-07-02T19:37:33.917488Z",
|
|
"modified": "2022-07-02T19:37:33.917488Z",
|
|
"name": "People Focused",
|
|
"description": "TA12",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "assess-effectiveness"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0132.001.md",
|
|
"external_id": "T0132.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--f3bd3460-08ee-40c4-a4de-0e8bee7bc375"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--8225e0f1-6458-4954-97a1-955b9595869a",
|
|
"created_by_ref": "identity--d9506b5a-4358-4147-b9c0-a9f0cab255d2",
|
|
"created": "2022-07-02T19:37:33.917904Z",
|
|
"modified": "2022-07-02T19:37:33.917904Z",
|
|
"name": "Content Focused",
|
|
"description": "TA12",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "assess-effectiveness"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0132.002.md",
|
|
"external_id": "T0132.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--0e9a54ad-ce2e-496b-a3a3-b01481930f12"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--ce09d47a-80bd-47a6-b07b-a27022ee5e8c",
|
|
"created_by_ref": "identity--275c7be0-ef6f-4300-bdfe-457c982e0ae7",
|
|
"created": "2022-07-02T19:37:33.918321Z",
|
|
"modified": "2022-07-02T19:37:33.918321Z",
|
|
"name": "View Focused",
|
|
"description": "TA12",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "assess-effectiveness"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0132.003.md",
|
|
"external_id": "T0132.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c370b0b0-1f43-4861-bb83-ec40bd163986"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--7fb05fc4-d1dc-45f1-ae4d-1b0142c7aed9",
|
|
"created_by_ref": "identity--2753afe1-ca54-44c7-b978-7a6b255b4c29",
|
|
"created": "2022-07-02T19:37:33.918748Z",
|
|
"modified": "2022-07-02T19:37:33.918748Z",
|
|
"name": "Measure Effectiveness",
|
|
"description": "TA12",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "assess-effectiveness"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0133.md",
|
|
"external_id": "T0133"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--aebfba72-86b0-456d-886d-9b6fd4e97a7a"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--86d16670-b37a-4847-8f6c-d8767a4f3203",
|
|
"created_by_ref": "identity--e4a1deb2-8119-4aea-9304-725fbdbbb99a",
|
|
"created": "2022-07-02T19:37:33.919167Z",
|
|
"modified": "2022-07-02T19:37:33.919167Z",
|
|
"name": "Behavior changes",
|
|
"description": "TA12",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "assess-effectiveness"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0133.001.md",
|
|
"external_id": "T0133.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--79b9815f-47d9-4a23-8166-1417b0ee6312"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--9cb81dc8-f500-49a7-9bca-940e87759ff1",
|
|
"created_by_ref": "identity--52903931-e08c-442e-9ea4-3b30483ef7a4",
|
|
"created": "2022-07-02T19:37:33.919586Z",
|
|
"modified": "2022-07-02T19:37:33.919586Z",
|
|
"name": "Content",
|
|
"description": "TA12",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "assess-effectiveness"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0133.002.md",
|
|
"external_id": "T0133.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--a4a77e2b-a0f8-4d7f-b3ec-3fa326821feb"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--f3d9c378-fd20-439c-84f3-42cc3344e24a",
|
|
"created_by_ref": "identity--e403f91c-ef13-4bfd-b282-f5774f816972",
|
|
"created": "2022-07-02T19:37:33.920004Z",
|
|
"modified": "2022-07-02T19:37:33.920004Z",
|
|
"name": "Awareness",
|
|
"description": "TA12",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "assess-effectiveness"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0133.003.md",
|
|
"external_id": "T0133.003"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--59431e41-6baa-495f-af01-9d54eafa1e35"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--a9513c7e-e23a-4501-a316-f454ea1110c8",
|
|
"created_by_ref": "identity--23174366-0033-480c-979e-a00927c8b55e",
|
|
"created": "2022-07-02T19:37:33.920424Z",
|
|
"modified": "2022-07-02T19:37:33.920424Z",
|
|
"name": "Knowledge",
|
|
"description": "TA12",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "assess-effectiveness"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0133.004.md",
|
|
"external_id": "T0133.004"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--c93fbf9e-06a0-4b5c-90c7-9a85602a2831"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--8ef44397-7420-4c28-8185-4c3abb173fb6",
|
|
"created_by_ref": "identity--eb02548d-15c4-4049-9c49-bd3073c37c6d",
|
|
"created": "2022-07-02T19:37:33.920841Z",
|
|
"modified": "2022-07-02T19:37:33.920841Z",
|
|
"name": "Action/attitude",
|
|
"description": "TA12",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "assess-effectiveness"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0133.005.md",
|
|
"external_id": "T0133.005"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--ca1a181c-6be4-400e-858a-4ae5dd5273b4"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--526a5783-273a-41c8-ba53-adc24ae485f8",
|
|
"created_by_ref": "identity--ddc46522-8ce7-41f7-839c-0a002e202321",
|
|
"created": "2022-07-02T19:37:33.921257Z",
|
|
"modified": "2022-07-02T19:37:33.921257Z",
|
|
"name": "Measure Effectiveness Indicators (or KPIs)",
|
|
"description": "TA12",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "assess-effectiveness"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0134.md",
|
|
"external_id": "T0134"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--05e6d40e-de1c-4cc7-8437-f65e42e91e1f"
|
|
],
|
|
"x_mitre_is_subtechnique": false,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--8b15e9c8-db45-4657-b27b-d7ca8ae19606",
|
|
"created_by_ref": "identity--08cbcd96-6eb7-4058-96c8-8870818e3d2f",
|
|
"created": "2022-07-02T19:37:33.921673Z",
|
|
"modified": "2022-07-02T19:37:33.921673Z",
|
|
"name": "Message reach",
|
|
"description": "TA12",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "assess-effectiveness"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0134.001.md",
|
|
"external_id": "T0134.001"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--be6e1060-8667-4361-876e-55eef7657fef"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "attack-pattern",
|
|
"spec_version": "2.1",
|
|
"id": "attack-pattern--5be6298a-c908-4b31-a7e2-7c0f3954330c",
|
|
"created_by_ref": "identity--3d692b01-7dce-4903-8f8a-2c65c56fa19a",
|
|
"created": "2022-07-02T19:37:33.922094Z",
|
|
"modified": "2022-07-02T19:37:33.922094Z",
|
|
"name": "Social media engagement",
|
|
"description": "TA12",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-attack",
|
|
"phase_name": "assess-effectiveness"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0134.002.md",
|
|
"external_id": "T0134.002"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--908e700f-f2de-45e4-8374-253ec735f0ae"
|
|
],
|
|
"x_mitre_is_subtechnique": true,
|
|
"x_mitre_platforms": [
|
|
"Windows",
|
|
"Linux",
|
|
"Mac"
|
|
],
|
|
"x_mitre_version": "1.0"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--48a67a03-6a7f-4319-a5c1-40b51687aaaf",
|
|
"created": "2022-07-02T19:37:33.922374Z",
|
|
"modified": "2022-07-02T19:37:33.922374Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--19f58260-f8b6-48d4-aaa5-c41b46df9f54",
|
|
"target_ref": "attack-pattern--1dbe8aab-313e-4be1-ba6e-841803f6cb5e"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3e2ed5b0-4dc6-4ad9-959f-7023e02e03bf",
|
|
"created": "2022-07-02T19:37:33.922607Z",
|
|
"modified": "2022-07-02T19:37:33.922607Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--94e8af0b-a38f-41cb-8c89-059e04f3c926",
|
|
"target_ref": "attack-pattern--da940163-8ead-4c97-b980-4865c3ab5934"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--bc907682-75a5-4933-beec-10184ff3a4a5",
|
|
"created": "2022-07-02T19:37:33.922707Z",
|
|
"modified": "2022-07-02T19:37:33.922707Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--ec4ace20-522f-4584-96d2-1ae397b3334b",
|
|
"target_ref": "attack-pattern--da940163-8ead-4c97-b980-4865c3ab5934"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4e1f6add-cfa4-4433-9887-39be4659aa7c",
|
|
"created": "2022-07-02T19:37:33.922803Z",
|
|
"modified": "2022-07-02T19:37:33.922803Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--7ac296f8-0cb3-42f3-b685-668665b3ea4f",
|
|
"target_ref": "attack-pattern--8512c144-df5c-434b-85cd-e399e167bc80"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--74f17aa1-b7bc-4078-9c33-00dde349c37f",
|
|
"created": "2022-07-02T19:37:33.922896Z",
|
|
"modified": "2022-07-02T19:37:33.922896Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--23859f93-6c0b-4aea-9b03-fb6cc031b923",
|
|
"target_ref": "attack-pattern--f9d37d7b-effb-498b-9edc-d3f761a32e4e"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--43ae24a4-038d-4ac6-85f0-3f5b6dfefbd5",
|
|
"created": "2022-07-02T19:37:33.922989Z",
|
|
"modified": "2022-07-02T19:37:33.922989Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--4cd10da2-d15f-46f9-959a-e0f08228e89f",
|
|
"target_ref": "attack-pattern--f9d37d7b-effb-498b-9edc-d3f761a32e4e"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--784389af-4157-4860-b933-899fb1522a7e",
|
|
"created": "2022-07-02T19:37:33.923081Z",
|
|
"modified": "2022-07-02T19:37:33.923081Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--0a4c73f6-5175-432d-b76a-76148316c86f",
|
|
"target_ref": "attack-pattern--6f1024c4-ce62-4fe0-8505-caf689ea9b79"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7b62c08c-5d1d-4561-99d4-dd640314eadf",
|
|
"created": "2022-07-02T19:37:33.923209Z",
|
|
"modified": "2022-07-02T19:37:33.923209Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--88087955-834b-432b-89f8-d4ce55c051e8",
|
|
"target_ref": "attack-pattern--6f1024c4-ce62-4fe0-8505-caf689ea9b79"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--956e0fe4-4e71-456d-9bb4-529335fd2cec",
|
|
"created": "2022-07-02T19:37:33.923302Z",
|
|
"modified": "2022-07-02T19:37:33.923302Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--0408630c-c29f-4235-b7fc-7215bbf46456",
|
|
"target_ref": "attack-pattern--41dad847-900a-4c74-aca5-7f0227800f42"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c1493843-a499-4b4d-aca9-6114ff926d79",
|
|
"created": "2022-07-02T19:37:33.923396Z",
|
|
"modified": "2022-07-02T19:37:33.923396Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--5b6b3472-c1d2-4a13-bfd5-9111ff1fd4ba",
|
|
"target_ref": "attack-pattern--41dad847-900a-4c74-aca5-7f0227800f42"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--be968c8a-b3d8-4699-8615-8a4f8a1b2d0e",
|
|
"created": "2022-07-02T19:37:33.923487Z",
|
|
"modified": "2022-07-02T19:37:33.923487Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--229eb6d0-a4ad-4335-a5eb-2fcc91003d55",
|
|
"target_ref": "attack-pattern--a5cf7d6c-79cf-49e7-90c5-b4e17f5da1f1"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--fb5a03c0-a210-4d58-9fd0-5b4e598568d4",
|
|
"created": "2022-07-02T19:37:33.923578Z",
|
|
"modified": "2022-07-02T19:37:33.923578Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--efd168a1-f067-4d53-ae65-e7bc624fb6f6",
|
|
"target_ref": "attack-pattern--a5cf7d6c-79cf-49e7-90c5-b4e17f5da1f1"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--29b40a75-2892-4704-9464-916a086951e9",
|
|
"created": "2022-07-02T19:37:33.92367Z",
|
|
"modified": "2022-07-02T19:37:33.92367Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--fe829401-86a6-41f5-a1ed-599d09b47561",
|
|
"target_ref": "attack-pattern--37ae4113-66c1-4ae3-82a2-a6d0b8d9fefc"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4ec66200-1781-4eed-b3a0-785900582d9a",
|
|
"created": "2022-07-02T19:37:33.92376Z",
|
|
"modified": "2022-07-02T19:37:33.92376Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--1f21fab1-27f8-4e09-ab3e-270c539a1443",
|
|
"target_ref": "attack-pattern--37ae4113-66c1-4ae3-82a2-a6d0b8d9fefc"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--687ac4af-1abc-431e-b9f2-7b8bfe926932",
|
|
"created": "2022-07-02T19:37:33.923851Z",
|
|
"modified": "2022-07-02T19:37:33.923851Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--b3f45d94-43fb-4095-be5f-3ce7dc7fed34",
|
|
"target_ref": "attack-pattern--37ae4113-66c1-4ae3-82a2-a6d0b8d9fefc"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--abb1e96d-da8a-4108-857e-e3403680fbba",
|
|
"created": "2022-07-02T19:37:33.923944Z",
|
|
"modified": "2022-07-02T19:37:33.923944Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--05c604a8-1f99-4d72-a827-8729b9e260ab",
|
|
"target_ref": "attack-pattern--37ae4113-66c1-4ae3-82a2-a6d0b8d9fefc"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--dd1dc105-f957-4a9e-b130-e0d60bcfb1ba",
|
|
"created": "2022-07-02T19:37:33.924035Z",
|
|
"modified": "2022-07-02T19:37:33.924035Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--594f5a85-b578-425b-82ee-9bba74d56c7c",
|
|
"target_ref": "attack-pattern--3400fe54-b861-4820-a9ad-784a38740492"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9ae72e1a-3834-415b-a0c1-1463776da205",
|
|
"created": "2022-07-02T19:37:33.924126Z",
|
|
"modified": "2022-07-02T19:37:33.924126Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--47e69cce-3c4f-43a9-9c8b-72fa9a648a0f",
|
|
"target_ref": "attack-pattern--3400fe54-b861-4820-a9ad-784a38740492"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--468efc14-2b4c-47e9-a0cb-e81d43ca6d77",
|
|
"created": "2022-07-02T19:37:33.924217Z",
|
|
"modified": "2022-07-02T19:37:33.924217Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--b66eb6a2-e0f4-473b-9b96-7c9c8afad51b",
|
|
"target_ref": "attack-pattern--3400fe54-b861-4820-a9ad-784a38740492"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f4fbe5cd-562a-47e0-9236-ae895cb0496c",
|
|
"created": "2022-07-02T19:37:33.924308Z",
|
|
"modified": "2022-07-02T19:37:33.924308Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--0acaace6-ed59-4fbb-a334-a6107279893e",
|
|
"target_ref": "attack-pattern--3400fe54-b861-4820-a9ad-784a38740492"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9a27f4fc-9f39-496c-ab55-8513dec8d985",
|
|
"created": "2022-07-02T19:37:33.924399Z",
|
|
"modified": "2022-07-02T19:37:33.924399Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--a4216780-4301-49c9-81b5-a3ccef87bd9b",
|
|
"target_ref": "attack-pattern--3400fe54-b861-4820-a9ad-784a38740492"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d24e288d-7b36-461e-adbc-89d5e4bb88a0",
|
|
"created": "2022-07-02T19:37:33.92449Z",
|
|
"modified": "2022-07-02T19:37:33.92449Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--ad6707e6-d861-4403-88a3-7fbc59af0cd6",
|
|
"target_ref": "attack-pattern--3400fe54-b861-4820-a9ad-784a38740492"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3e35dcc2-a91f-4e12-8cbe-f5e70637ca8b",
|
|
"created": "2022-07-02T19:37:33.924581Z",
|
|
"modified": "2022-07-02T19:37:33.924581Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--294a0fc6-e1c0-4207-ad7d-02739a4d2585",
|
|
"target_ref": "attack-pattern--3400fe54-b861-4820-a9ad-784a38740492"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d756c7db-2b68-43f7-a967-d71531c8ef60",
|
|
"created": "2022-07-02T19:37:33.924672Z",
|
|
"modified": "2022-07-02T19:37:33.924672Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--58ce7f79-cddc-4da1-a2c2-daffb7c968f8",
|
|
"target_ref": "attack-pattern--ea801f99-8842-42a9-8ca8-49a943d70b8c"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--73fdffd4-45c6-4f88-8d33-ca8eb1ed62d6",
|
|
"created": "2022-07-02T19:37:33.924762Z",
|
|
"modified": "2022-07-02T19:37:33.924762Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--73ad4a21-0baa-41ae-8b94-44b897f2a5e0",
|
|
"target_ref": "attack-pattern--ea801f99-8842-42a9-8ca8-49a943d70b8c"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--798e5313-17ec-42aa-8645-626a1cae1069",
|
|
"created": "2022-07-02T19:37:33.924852Z",
|
|
"modified": "2022-07-02T19:37:33.924852Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--4266be95-78ce-4761-ad72-e0701c326db2",
|
|
"target_ref": "attack-pattern--54821f53-96b6-4bbc-a3c4-61d708c96c63"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3ab38190-92f6-4868-8fc2-9e5c19d30e75",
|
|
"created": "2022-07-02T19:37:33.924943Z",
|
|
"modified": "2022-07-02T19:37:33.924943Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--377a21e0-870a-4fac-a93d-46489fd32d1c",
|
|
"target_ref": "attack-pattern--2263c28c-24f6-463c-b580-0cf7fa0130f9"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6d662f1f-3e01-4175-957c-69f5f4b927f5",
|
|
"created": "2022-07-02T19:37:33.925033Z",
|
|
"modified": "2022-07-02T19:37:33.925033Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--5f34d97b-88d8-416f-9585-a0e94378b9e5",
|
|
"target_ref": "attack-pattern--2263c28c-24f6-463c-b580-0cf7fa0130f9"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8468f261-1499-4ce7-bdf8-c48074ad7a1e",
|
|
"created": "2022-07-02T19:37:33.925123Z",
|
|
"modified": "2022-07-02T19:37:33.925123Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--5749117a-940b-475d-96d2-62a8af9f13d3",
|
|
"target_ref": "attack-pattern--2263c28c-24f6-463c-b580-0cf7fa0130f9"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--573e67f0-444a-42a7-9458-f79877a4ba77",
|
|
"created": "2022-07-02T19:37:33.925213Z",
|
|
"modified": "2022-07-02T19:37:33.925213Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--5b832fd9-0643-4435-84b6-83fc66d497b6",
|
|
"target_ref": "attack-pattern--2263c28c-24f6-463c-b580-0cf7fa0130f9"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8a2d5704-49f9-4599-a661-d62dfe1607df",
|
|
"created": "2022-07-02T19:37:33.925303Z",
|
|
"modified": "2022-07-02T19:37:33.925303Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--3c77b6f0-c00c-4d25-b466-903f3ad3146a",
|
|
"target_ref": "attack-pattern--2263c28c-24f6-463c-b580-0cf7fa0130f9"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--95a85881-a13f-497d-99d4-ff79efa7e218",
|
|
"created": "2022-07-02T19:37:33.925394Z",
|
|
"modified": "2022-07-02T19:37:33.925394Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--0dd3c381-c219-4cba-afb8-875aca4b1f41",
|
|
"target_ref": "attack-pattern--40858431-0c70-4bb5-b55c-591005eed696"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9419b34c-9d1b-4f79-b817-bb406f100b12",
|
|
"created": "2022-07-02T19:37:33.925487Z",
|
|
"modified": "2022-07-02T19:37:33.925487Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--316f6fab-480d-4902-bcb8-0a3d43dd5acd",
|
|
"target_ref": "attack-pattern--57046318-f21a-490b-85bd-0445878e1a01"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--33a11fe4-de35-44fc-815d-8d6cf6b10611",
|
|
"created": "2022-07-02T19:37:33.925579Z",
|
|
"modified": "2022-07-02T19:37:33.925579Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--e2fc406d-688f-45ab-b8b5-416ca7cb8625",
|
|
"target_ref": "attack-pattern--57046318-f21a-490b-85bd-0445878e1a01"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--df4c13f0-71ff-48f2-ab41-d2d5d70a20b1",
|
|
"created": "2022-07-02T19:37:33.92567Z",
|
|
"modified": "2022-07-02T19:37:33.92567Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--be08cd38-1ba3-4743-bbdf-a6bf96c33a72",
|
|
"target_ref": "attack-pattern--57046318-f21a-490b-85bd-0445878e1a01"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--beea476b-4985-44c9-b59b-ac841b81e7db",
|
|
"created": "2022-07-02T19:37:33.925762Z",
|
|
"modified": "2022-07-02T19:37:33.925762Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--8a132fc1-f33b-4110-89a2-86dc083b57d7",
|
|
"target_ref": "attack-pattern--57046318-f21a-490b-85bd-0445878e1a01"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--0462f040-e2e2-4b61-8a36-95b6320b0156",
|
|
"created": "2022-07-02T19:37:33.925853Z",
|
|
"modified": "2022-07-02T19:37:33.925853Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--ca742cc1-d49b-4c82-be17-ce4cc1676758",
|
|
"target_ref": "attack-pattern--57046318-f21a-490b-85bd-0445878e1a01"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c04f881b-3210-4b67-bde7-65d12ba3eaec",
|
|
"created": "2022-07-02T19:37:33.925945Z",
|
|
"modified": "2022-07-02T19:37:33.925945Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--6e084581-218d-4818-94c6-8dfa21c1a87e",
|
|
"target_ref": "attack-pattern--84a47a2a-d814-45ed-80dd-945b752ab746"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f21f6e0e-b667-49d4-ae25-439274d9c000",
|
|
"created": "2022-07-02T19:37:33.926036Z",
|
|
"modified": "2022-07-02T19:37:33.926036Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--35a7b256-4f20-4fcc-9d63-1d76f8bfbfdf",
|
|
"target_ref": "attack-pattern--84a47a2a-d814-45ed-80dd-945b752ab746"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6c8c9206-bd92-419a-a09b-aeb9b9ec0482",
|
|
"created": "2022-07-02T19:37:33.926127Z",
|
|
"modified": "2022-07-02T19:37:33.926127Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--07568c40-2b9d-4d73-aea0-9b423672dd65",
|
|
"target_ref": "attack-pattern--84a47a2a-d814-45ed-80dd-945b752ab746"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8b413a7a-1ac3-48dd-a583-dd975cb2d06b",
|
|
"created": "2022-07-02T19:37:33.926217Z",
|
|
"modified": "2022-07-02T19:37:33.926217Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--0a86f02a-7cd0-42b9-bc49-969c12b79f5f",
|
|
"target_ref": "attack-pattern--84a47a2a-d814-45ed-80dd-945b752ab746"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7db13e0b-641e-4639-98a1-d30b7a7d8ec2",
|
|
"created": "2022-07-02T19:37:33.926309Z",
|
|
"modified": "2022-07-02T19:37:33.926309Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--13d33e6a-9372-4bff-91e8-6d101840daf6",
|
|
"target_ref": "attack-pattern--84a47a2a-d814-45ed-80dd-945b752ab746"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--10acc292-aa21-4d3b-be27-6921d2d41374",
|
|
"created": "2022-07-02T19:37:33.9264Z",
|
|
"modified": "2022-07-02T19:37:33.9264Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--26029561-89fa-4a78-84b8-c1d8c1867578",
|
|
"target_ref": "attack-pattern--84a47a2a-d814-45ed-80dd-945b752ab746"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--9b522745-1c77-4ebf-a44c-aa1f46d5fdbb",
|
|
"created": "2022-07-02T19:37:33.926502Z",
|
|
"modified": "2022-07-02T19:37:33.926502Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--98c15838-7027-47e6-81bf-384c1dc2e48a",
|
|
"target_ref": "attack-pattern--84a47a2a-d814-45ed-80dd-945b752ab746"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--12e0637f-c1de-4430-ba8e-650028f610ab",
|
|
"created": "2022-07-02T19:37:33.926592Z",
|
|
"modified": "2022-07-02T19:37:33.926592Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--5e2a73fb-28d1-4818-9eed-e83ccaa7d6ed",
|
|
"target_ref": "attack-pattern--84a47a2a-d814-45ed-80dd-945b752ab746"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b5eb9b99-5019-4dcf-a563-26d46ec4c902",
|
|
"created": "2022-07-02T19:37:33.926684Z",
|
|
"modified": "2022-07-02T19:37:33.926684Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--ce09340c-cb19-4ceb-8b12-d201d112b997",
|
|
"target_ref": "attack-pattern--e733ca10-2e05-4b0e-aa51-8cfa95d0a949"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4f70461b-f6f4-4fc5-9137-ed243d0e64f3",
|
|
"created": "2022-07-02T19:37:33.926775Z",
|
|
"modified": "2022-07-02T19:37:33.926775Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--30f7c204-ad16-4b50-bb86-d79789f998cc",
|
|
"target_ref": "attack-pattern--e733ca10-2e05-4b0e-aa51-8cfa95d0a949"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b935aa7c-565a-4ffc-bcd2-b8e3b3afb297",
|
|
"created": "2022-07-02T19:37:33.926873Z",
|
|
"modified": "2022-07-02T19:37:33.926873Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--8e3e4dd0-3594-4fed-9db9-74b506e00c5d",
|
|
"target_ref": "attack-pattern--e733ca10-2e05-4b0e-aa51-8cfa95d0a949"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f4e32e9b-ce7d-4e34-bbd9-7b19f97f8548",
|
|
"created": "2022-07-02T19:37:33.926962Z",
|
|
"modified": "2022-07-02T19:37:33.926962Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--2ab24152-cfc1-4aff-8b6f-9b1d7fc5d634",
|
|
"target_ref": "attack-pattern--e733ca10-2e05-4b0e-aa51-8cfa95d0a949"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b6d8ff3f-f8fe-473c-a15f-5cd800b69a0a",
|
|
"created": "2022-07-02T19:37:33.927056Z",
|
|
"modified": "2022-07-02T19:37:33.927056Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--8dae3cdc-dad5-42d5-9f78-a69eaa8ebfd6",
|
|
"target_ref": "attack-pattern--eef8629d-f9fa-4a36-b9c1-8c66ede3d595"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4e726514-47a9-429b-8144-f04b4247ac89",
|
|
"created": "2022-07-02T19:37:33.927147Z",
|
|
"modified": "2022-07-02T19:37:33.927147Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--004999ac-269c-482f-9d1a-6a249feff43c",
|
|
"target_ref": "attack-pattern--eef8629d-f9fa-4a36-b9c1-8c66ede3d595"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e481e401-f9ba-41c8-943b-3140fe442424",
|
|
"created": "2022-07-02T19:37:33.927239Z",
|
|
"modified": "2022-07-02T19:37:33.927239Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--c97b807e-6795-43ce-a2ae-3e9861636d42",
|
|
"target_ref": "attack-pattern--eef8629d-f9fa-4a36-b9c1-8c66ede3d595"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--058aaede-2d5f-48a5-bc33-5a4202d14062",
|
|
"created": "2022-07-02T19:37:33.92733Z",
|
|
"modified": "2022-07-02T19:37:33.92733Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--8b540502-10df-401b-8186-4cb563900f22",
|
|
"target_ref": "attack-pattern--c7710e63-b56a-4fbc-a84b-cab31476ffe6"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b658ef8f-b7d2-4666-bce3-93b6cbc85929",
|
|
"created": "2022-07-02T19:37:33.927421Z",
|
|
"modified": "2022-07-02T19:37:33.927421Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--6b236705-3281-4016-879e-495b90cf5748",
|
|
"target_ref": "attack-pattern--c7710e63-b56a-4fbc-a84b-cab31476ffe6"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f6bd4687-b156-44ab-bba9-d9136360c027",
|
|
"created": "2022-07-02T19:37:33.927511Z",
|
|
"modified": "2022-07-02T19:37:33.927511Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--0653256e-fda6-4cda-bb34-5464b2ea4713",
|
|
"target_ref": "attack-pattern--c7710e63-b56a-4fbc-a84b-cab31476ffe6"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e8bde6ce-05ad-4bfe-82fc-932706e99fa7",
|
|
"created": "2022-07-02T19:37:33.927602Z",
|
|
"modified": "2022-07-02T19:37:33.927602Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--0154002e-3609-4a0f-8495-15b7e433df4b",
|
|
"target_ref": "attack-pattern--c7710e63-b56a-4fbc-a84b-cab31476ffe6"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--605e23e3-50c2-4046-a5d7-623e15cea035",
|
|
"created": "2022-07-02T19:37:33.927692Z",
|
|
"modified": "2022-07-02T19:37:33.927692Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--62f717da-4d1b-4f31-a0b4-3fcba13a5b87",
|
|
"target_ref": "attack-pattern--b8e999f5-dc25-4969-b949-cfb350440e64"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--29cf6b1a-2a25-428c-828d-77845b2ca405",
|
|
"created": "2022-07-02T19:37:33.927782Z",
|
|
"modified": "2022-07-02T19:37:33.927782Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--ebd8f8d0-d7db-40a2-b2ad-618a50d5459f",
|
|
"target_ref": "attack-pattern--b8e999f5-dc25-4969-b949-cfb350440e64"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ea88886d-6188-4072-9d1b-0fe3a2aef41f",
|
|
"created": "2022-07-02T19:37:33.927873Z",
|
|
"modified": "2022-07-02T19:37:33.927873Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--76f88607-8506-4926-8096-19fe7083dc8d",
|
|
"target_ref": "attack-pattern--e91c0e56-47ba-4f9d-99bc-992041352ac3"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1162e58a-35c1-4af5-8a94-99c8c2ac6b9f",
|
|
"created": "2022-07-02T19:37:33.927963Z",
|
|
"modified": "2022-07-02T19:37:33.927963Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--043470b6-4d18-43cf-925a-68d05c536eb4",
|
|
"target_ref": "attack-pattern--e91c0e56-47ba-4f9d-99bc-992041352ac3"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--93a8aa0a-0043-4a66-a7fd-01839b32b21e",
|
|
"created": "2022-07-02T19:37:33.928054Z",
|
|
"modified": "2022-07-02T19:37:33.928054Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--8fe7fdd1-9621-4e6c-9a98-7e117b5a294f",
|
|
"target_ref": "attack-pattern--6fb878ba-15cb-41b2-905d-bd8eeaee83ca"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c20fcb85-c18b-45b6-88cb-a53d1375de71",
|
|
"created": "2022-07-02T19:37:33.928144Z",
|
|
"modified": "2022-07-02T19:37:33.928144Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--ffefefbd-5175-47b0-9805-4959f5aeb3e9",
|
|
"target_ref": "attack-pattern--6fb878ba-15cb-41b2-905d-bd8eeaee83ca"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--471aaf83-6742-4c0f-9996-8ea1d773250e",
|
|
"created": "2022-07-02T19:37:33.928235Z",
|
|
"modified": "2022-07-02T19:37:33.928235Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--747c5c84-a11f-4862-b5ae-6e779f5d4527",
|
|
"target_ref": "attack-pattern--6fb878ba-15cb-41b2-905d-bd8eeaee83ca"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--be96064b-7596-42c8-bfc6-e0bbc718f02b",
|
|
"created": "2022-07-02T19:37:33.928326Z",
|
|
"modified": "2022-07-02T19:37:33.928326Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--f7c26d55-3174-4467-9f72-0b988e8cb16c",
|
|
"target_ref": "attack-pattern--ce1f507e-58e4-47ec-88f1-16aaaf2e1305"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4ec7c84c-8350-4ded-8c72-6a6062404dea",
|
|
"created": "2022-07-02T19:37:33.928419Z",
|
|
"modified": "2022-07-02T19:37:33.928419Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--314ec4eb-6397-487e-86c5-3cb3f617ba04",
|
|
"target_ref": "attack-pattern--ce1f507e-58e4-47ec-88f1-16aaaf2e1305"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--cd15e007-8497-409f-b278-a90f4555c7b6",
|
|
"created": "2022-07-02T19:37:33.92851Z",
|
|
"modified": "2022-07-02T19:37:33.92851Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--1cb66d7b-d806-4f99-b2ac-28dca3994d36",
|
|
"target_ref": "attack-pattern--ce1f507e-58e4-47ec-88f1-16aaaf2e1305"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8b90e549-c1d7-43af-9382-75b261f6126b",
|
|
"created": "2022-07-02T19:37:33.928602Z",
|
|
"modified": "2022-07-02T19:37:33.928602Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--78bc180a-06c6-4f9e-9e48-19a7c1cd81ac",
|
|
"target_ref": "attack-pattern--ce1f507e-58e4-47ec-88f1-16aaaf2e1305"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--719c732d-9746-4577-bada-af3981de45b5",
|
|
"created": "2022-07-02T19:37:33.928693Z",
|
|
"modified": "2022-07-02T19:37:33.928693Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--e70bbb18-4493-4974-859a-4798ca7e6606",
|
|
"target_ref": "attack-pattern--a5825430-8e76-42e5-9ff4-86e95873143e"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f3d28033-4c4e-4f97-bb16-4bb6da74ddd1",
|
|
"created": "2022-07-02T19:37:33.928783Z",
|
|
"modified": "2022-07-02T19:37:33.928783Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--26162c87-c9ac-445f-8d88-68335f9a3197",
|
|
"target_ref": "attack-pattern--a5825430-8e76-42e5-9ff4-86e95873143e"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--983f7a00-4a7d-492e-8a37-b260fbf7f958",
|
|
"created": "2022-07-02T19:37:33.928874Z",
|
|
"modified": "2022-07-02T19:37:33.928874Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--ec4782e3-ff29-4fc3-8040-bad6dcee8174",
|
|
"target_ref": "attack-pattern--a5825430-8e76-42e5-9ff4-86e95873143e"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5d0fb3a1-c78c-4344-926d-0c8d119a4114",
|
|
"created": "2022-07-02T19:37:33.928964Z",
|
|
"modified": "2022-07-02T19:37:33.928964Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--619b95a1-167c-4ff3-86ab-b7ebc2b13b43",
|
|
"target_ref": "attack-pattern--ff7191a5-5a67-4d2c-9b4b-89b9b9ba8782"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--0f173280-ed53-495e-8b23-6848069286b3",
|
|
"created": "2022-07-02T19:37:33.929055Z",
|
|
"modified": "2022-07-02T19:37:33.929055Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--8e4c5820-7bff-4ec5-9715-40719666da71",
|
|
"target_ref": "attack-pattern--ff7191a5-5a67-4d2c-9b4b-89b9b9ba8782"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3ac40c33-1f1b-4963-ae36-a3f0d73ea520",
|
|
"created": "2022-07-02T19:37:33.929145Z",
|
|
"modified": "2022-07-02T19:37:33.929145Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--ad4751a2-109e-4796-8722-dce77aaa643a",
|
|
"target_ref": "attack-pattern--ff7191a5-5a67-4d2c-9b4b-89b9b9ba8782"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3480d619-da60-4def-a61c-57e543222b17",
|
|
"created": "2022-07-02T19:37:33.929236Z",
|
|
"modified": "2022-07-02T19:37:33.929236Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--4a78b2bf-0ab4-4478-a06a-6938e709da36",
|
|
"target_ref": "attack-pattern--7c8a9541-c05f-40fc-ac52-b89ad8d9a2f4"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--11857ac0-c2e0-47ae-9e61-0c137b5a62f7",
|
|
"created": "2022-07-02T19:37:33.929327Z",
|
|
"modified": "2022-07-02T19:37:33.929327Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--135f88a1-1d17-4fc7-8c14-88ecf2160f29",
|
|
"target_ref": "attack-pattern--7c8a9541-c05f-40fc-ac52-b89ad8d9a2f4"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e700a1e7-958a-4955-93b9-47d995944d7e",
|
|
"created": "2022-07-02T19:37:33.929418Z",
|
|
"modified": "2022-07-02T19:37:33.929418Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--a37bdf98-3cb9-473a-b913-876ff9133a6b",
|
|
"target_ref": "attack-pattern--96b4fe73-ff37-4a1a-8be2-4750735d0441"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--83d9b236-7abe-4a23-acba-c4c9ee410b78",
|
|
"created": "2022-07-02T19:37:33.929536Z",
|
|
"modified": "2022-07-02T19:37:33.929536Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--3cece475-02b2-4671-8e2f-c916bbf14958",
|
|
"target_ref": "attack-pattern--96b4fe73-ff37-4a1a-8be2-4750735d0441"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--89813884-5bc1-4441-8b25-8d3a19ea581a",
|
|
"created": "2022-07-02T19:37:33.929627Z",
|
|
"modified": "2022-07-02T19:37:33.929627Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--f7fb4759-cf9f-472f-babf-5a8654e18d32",
|
|
"target_ref": "attack-pattern--e94c61d4-dcbb-45a9-b1fd-c3fe794aa09a"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f2842a4a-cab8-4cfd-b94c-1f270daa7b09",
|
|
"created": "2022-07-02T19:37:33.92972Z",
|
|
"modified": "2022-07-02T19:37:33.92972Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--413c3407-ef08-42be-a894-36b192314ccb",
|
|
"target_ref": "attack-pattern--e94c61d4-dcbb-45a9-b1fd-c3fe794aa09a"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--83680963-6219-48fa-bb59-96021488947a",
|
|
"created": "2022-07-02T19:37:33.929812Z",
|
|
"modified": "2022-07-02T19:37:33.929812Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--a1bce136-1a63-48ab-8c8b-6011e6e8e722",
|
|
"target_ref": "attack-pattern--31a6f5d8-748f-4135-8451-a360daa7d534"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d1071c91-b074-41a5-99f6-4aba94c5bcc6",
|
|
"created": "2022-07-02T19:37:33.929903Z",
|
|
"modified": "2022-07-02T19:37:33.929903Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--a379fb89-012d-45fa-924b-9015c09255ad",
|
|
"target_ref": "attack-pattern--1e4ba283-1658-4fb7-b565-6132c093a6ad"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--bf0c8d2a-6b85-431a-869a-bb50af359f67",
|
|
"created": "2022-07-02T19:37:33.929994Z",
|
|
"modified": "2022-07-02T19:37:33.929994Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--c81d58e7-413f-4e62-9c82-ff482e7a79c6",
|
|
"target_ref": "attack-pattern--1e4ba283-1658-4fb7-b565-6132c093a6ad"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e1d6682f-3331-4cd3-9495-0f772f004d44",
|
|
"created": "2022-07-02T19:37:33.930087Z",
|
|
"modified": "2022-07-02T19:37:33.930087Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--fe29b144-2129-46f4-a908-8aac1f176c45",
|
|
"target_ref": "attack-pattern--ca0e5dde-0b14-492c-9fcf-b4c16569ebf2"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--62396014-3d66-47c0-96ef-b3c1b7e5881f",
|
|
"created": "2022-07-02T19:37:33.930179Z",
|
|
"modified": "2022-07-02T19:37:33.930179Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--3b1a05af-f77a-4ebd-ba0f-140eef9ab57b",
|
|
"target_ref": "attack-pattern--ca0e5dde-0b14-492c-9fcf-b4c16569ebf2"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8a09d462-4b4b-451c-a4c9-a77cf3934e67",
|
|
"created": "2022-07-02T19:37:33.93027Z",
|
|
"modified": "2022-07-02T19:37:33.93027Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--7ce04f53-2904-4ebc-aa21-7adb6b05b3cd",
|
|
"target_ref": "attack-pattern--f33e19e4-8f79-4170-8d1a-93052b6097f6"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--da7b69a2-46ad-4efa-8288-a46ba4e8b0e1",
|
|
"created": "2022-07-02T19:37:33.93036Z",
|
|
"modified": "2022-07-02T19:37:33.93036Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--5e9ea2d3-4861-4332-a10f-7b047127eae9",
|
|
"target_ref": "attack-pattern--f33e19e4-8f79-4170-8d1a-93052b6097f6"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6611dd87-6474-4605-8591-f4f00dbbed23",
|
|
"created": "2022-07-02T19:37:33.930456Z",
|
|
"modified": "2022-07-02T19:37:33.930456Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--119de960-e1cf-4bcf-a2e8-5c17f1f856ef",
|
|
"target_ref": "attack-pattern--f33e19e4-8f79-4170-8d1a-93052b6097f6"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1c71797f-d31e-420f-902e-3f7e6b81feea",
|
|
"created": "2022-07-02T19:37:33.930548Z",
|
|
"modified": "2022-07-02T19:37:33.930548Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--8a72e5b3-f68e-43d7-9e89-6c53364ceb06",
|
|
"target_ref": "attack-pattern--52b1ecb9-deff-416f-9480-e38e48bf18ee"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--17b8fa7e-d126-4818-a310-2d0d9ccb4d20",
|
|
"created": "2022-07-02T19:37:33.930638Z",
|
|
"modified": "2022-07-02T19:37:33.930638Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--7cd31068-f7b2-4fb9-85b6-2f52333b9f0d",
|
|
"target_ref": "attack-pattern--52b1ecb9-deff-416f-9480-e38e48bf18ee"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--8207e87f-92e1-4497-b286-16cf2f9cf9cd",
|
|
"created": "2022-07-02T19:37:33.930729Z",
|
|
"modified": "2022-07-02T19:37:33.930729Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--ed49de26-e110-49ab-b45a-014ddcb923b7",
|
|
"target_ref": "attack-pattern--52b1ecb9-deff-416f-9480-e38e48bf18ee"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--75ae0635-ef3e-4478-8703-6ff337d7699c",
|
|
"created": "2022-07-02T19:37:33.930819Z",
|
|
"modified": "2022-07-02T19:37:33.930819Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--2e931c4c-9c3b-4188-8ce3-ae6e8ca53db9",
|
|
"target_ref": "attack-pattern--c3c41284-4e23-4b05-aa9e-a595acbf0d61"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--133885e0-f495-425c-bca0-5b6251e8e451",
|
|
"created": "2022-07-02T19:37:33.930909Z",
|
|
"modified": "2022-07-02T19:37:33.930909Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--fcbe2259-8da5-45ff-a50e-b6405cf67f61",
|
|
"target_ref": "attack-pattern--c3c41284-4e23-4b05-aa9e-a595acbf0d61"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1762fd02-f35c-42dd-b768-e9d5a7ea639d",
|
|
"created": "2022-07-02T19:37:33.930999Z",
|
|
"modified": "2022-07-02T19:37:33.930999Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--d014ffec-14b7-4de1-a219-de64f06a10ad",
|
|
"target_ref": "attack-pattern--c2587109-d212-4ffc-a344-998a8d901d4a"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d81b1684-9226-434b-a4e2-e293dadbdd6f",
|
|
"created": "2022-07-02T19:37:33.93109Z",
|
|
"modified": "2022-07-02T19:37:33.93109Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--dbf9dc65-6dc5-469e-85c8-e6f7973fba1c",
|
|
"target_ref": "attack-pattern--c2587109-d212-4ffc-a344-998a8d901d4a"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c0badd49-fab0-4cb5-a7b2-8f8d8922aa72",
|
|
"created": "2022-07-02T19:37:33.931179Z",
|
|
"modified": "2022-07-02T19:37:33.931179Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--c8c75b45-8889-4c41-ba09-436588e9fafc",
|
|
"target_ref": "attack-pattern--c2587109-d212-4ffc-a344-998a8d901d4a"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a1ab049b-3883-48a4-b9d5-09266d2fd6e0",
|
|
"created": "2022-07-02T19:37:33.931271Z",
|
|
"modified": "2022-07-02T19:37:33.931271Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--13bfd1a4-d2a5-4f0b-b344-f43402240288",
|
|
"target_ref": "attack-pattern--c2587109-d212-4ffc-a344-998a8d901d4a"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4003a224-5541-45de-8aaa-2f799cd6883f",
|
|
"created": "2022-07-02T19:37:33.931361Z",
|
|
"modified": "2022-07-02T19:37:33.931361Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--1074bd71-5cce-4b9e-a3f5-74d3bad21773",
|
|
"target_ref": "attack-pattern--c2587109-d212-4ffc-a344-998a8d901d4a"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--dfc71bea-986a-42de-a8f1-4c6c53e876eb",
|
|
"created": "2022-07-02T19:37:33.931452Z",
|
|
"modified": "2022-07-02T19:37:33.931452Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--b8667ffa-fae8-4d7d-a59a-28b9fccd37a1",
|
|
"target_ref": "attack-pattern--c2587109-d212-4ffc-a344-998a8d901d4a"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--698bf79e-d235-4ec1-829b-a1fa7e981a9d",
|
|
"created": "2022-07-02T19:37:33.931542Z",
|
|
"modified": "2022-07-02T19:37:33.931542Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--3ae5c480-138a-4de6-9bda-40602b60882f",
|
|
"target_ref": "attack-pattern--90964b9c-b4fc-424a-a08c-c67c3cf83285"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--220cd3a8-ebc4-4bff-831e-7e4beccc18cd",
|
|
"created": "2022-07-02T19:37:33.931635Z",
|
|
"modified": "2022-07-02T19:37:33.931635Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--bffc0e1d-00e9-4b01-b463-97e34bbacf61",
|
|
"target_ref": "attack-pattern--90964b9c-b4fc-424a-a08c-c67c3cf83285"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4f1c5295-4c7e-4e4a-855c-f9d199fef677",
|
|
"created": "2022-07-02T19:37:33.931726Z",
|
|
"modified": "2022-07-02T19:37:33.931726Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--7ff06022-3741-413e-9093-50028e93dfb5",
|
|
"target_ref": "attack-pattern--90964b9c-b4fc-424a-a08c-c67c3cf83285"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e3b730b9-0a3d-4423-94e4-dede08304234",
|
|
"created": "2022-07-02T19:37:33.931819Z",
|
|
"modified": "2022-07-02T19:37:33.931819Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--d3d90249-56e0-4885-892d-9244af526bed",
|
|
"target_ref": "attack-pattern--96fe9c29-f81f-4588-ab2c-7b082062c68d"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--71af8fd9-d3f5-4a3a-ab93-27796cbe96ac",
|
|
"created": "2022-07-02T19:37:33.931912Z",
|
|
"modified": "2022-07-02T19:37:33.931912Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--eed01fd7-c799-46f4-bf43-23b14bc7b2c0",
|
|
"target_ref": "attack-pattern--28677f05-619a-43fa-bf90-5e1ec6092ce3"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c8527e63-0cd1-4491-916b-d2281fb76436",
|
|
"created": "2022-07-02T19:37:33.932009Z",
|
|
"modified": "2022-07-02T19:37:33.932009Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--4bcf6f16-207d-47c4-8459-951cb6366002",
|
|
"target_ref": "attack-pattern--28677f05-619a-43fa-bf90-5e1ec6092ce3"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--06e7776b-241a-4b10-b18e-1865d144cfa9",
|
|
"created": "2022-07-02T19:37:33.932099Z",
|
|
"modified": "2022-07-02T19:37:33.932099Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--e1dacd01-4d8d-41eb-8fbe-e9c895ab42db",
|
|
"target_ref": "attack-pattern--28677f05-619a-43fa-bf90-5e1ec6092ce3"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e161a7b1-fa2d-46c1-b3a2-e01b83657677",
|
|
"created": "2022-07-02T19:37:33.93219Z",
|
|
"modified": "2022-07-02T19:37:33.93219Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--016005b5-49bc-4862-8329-c772540b0554",
|
|
"target_ref": "attack-pattern--3a789c82-8041-413f-8c11-ba9506f755d4"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--37727b81-2b23-46a4-a04f-d36cff9d4292",
|
|
"created": "2022-07-02T19:37:33.93228Z",
|
|
"modified": "2022-07-02T19:37:33.93228Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--50fad0cf-e233-46eb-86fb-8c013f51dc62",
|
|
"target_ref": "attack-pattern--3a789c82-8041-413f-8c11-ba9506f755d4"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ffc5fe69-f668-48d9-8a4d-79394351490a",
|
|
"created": "2022-07-02T19:37:33.932373Z",
|
|
"modified": "2022-07-02T19:37:33.932373Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--91d4253c-5bd1-44e4-9fb1-5e2823df568d",
|
|
"target_ref": "attack-pattern--dc4814ee-4512-49db-86e5-6f4a3e6da77b"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--43f95c97-37dc-4f44-a0ca-5fbb94e4b48f",
|
|
"created": "2022-07-02T19:37:33.932464Z",
|
|
"modified": "2022-07-02T19:37:33.932464Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--26e71dc7-967b-4e91-8115-c3ef95965a85",
|
|
"target_ref": "attack-pattern--dc4814ee-4512-49db-86e5-6f4a3e6da77b"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--32a1391d-688f-4030-b316-395d2957718b",
|
|
"created": "2022-07-02T19:37:33.932553Z",
|
|
"modified": "2022-07-02T19:37:33.932553Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--9cca04f5-06b3-43b7-9fb4-ca5d5388c2b2",
|
|
"target_ref": "attack-pattern--dc4814ee-4512-49db-86e5-6f4a3e6da77b"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--fbd70970-8d68-4fcd-abdf-1ca939e69ee9",
|
|
"created": "2022-07-02T19:37:33.932643Z",
|
|
"modified": "2022-07-02T19:37:33.932643Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--7e81a600-4f62-456b-9a6e-d3cf98109066",
|
|
"target_ref": "attack-pattern--cf0296da-61a4-451f-9359-2c31920c7ca4"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--4419ea3a-db5c-4e81-a54f-ca91e8c1594d",
|
|
"created": "2022-07-02T19:37:33.932734Z",
|
|
"modified": "2022-07-02T19:37:33.932734Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--738d3ec1-c937-483d-bc3f-0c0f5d8e2a67",
|
|
"target_ref": "attack-pattern--358ff467-07ec-44ef-a446-b801734c1e63"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d7b75446-8447-40fb-9ace-435280417661",
|
|
"created": "2022-07-02T19:37:33.932824Z",
|
|
"modified": "2022-07-02T19:37:33.932824Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--e4f261c9-e688-4b12-b84b-073475977fe5",
|
|
"target_ref": "attack-pattern--358ff467-07ec-44ef-a446-b801734c1e63"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7b8d72e8-a1b9-4633-896a-cf16d932c1c5",
|
|
"created": "2022-07-02T19:37:33.932915Z",
|
|
"modified": "2022-07-02T19:37:33.932915Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--1291465b-22f5-446f-b5a5-135024b390e9",
|
|
"target_ref": "attack-pattern--358ff467-07ec-44ef-a446-b801734c1e63"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3f109f4e-04b4-416e-9dd5-f092e669e4e5",
|
|
"created": "2022-07-02T19:37:33.933005Z",
|
|
"modified": "2022-07-02T19:37:33.933005Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--1c47140e-8a76-4dfc-a2ac-66606a0839e8",
|
|
"target_ref": "attack-pattern--c2ec8691-88b2-4a59-9d14-700de3aa455e"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f1dcdf26-d83a-4d6f-bfcb-acf98a417ec0",
|
|
"created": "2022-07-02T19:37:33.933096Z",
|
|
"modified": "2022-07-02T19:37:33.933096Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--67b0bd11-c8d2-480f-8320-1313b07135eb",
|
|
"target_ref": "attack-pattern--c2ec8691-88b2-4a59-9d14-700de3aa455e"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--994f0b33-7496-4d96-b920-384f426c52db",
|
|
"created": "2022-07-02T19:37:33.933189Z",
|
|
"modified": "2022-07-02T19:37:33.933189Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--9fd6675d-a037-43c6-a307-5bb8af2a1b76",
|
|
"target_ref": "attack-pattern--d22a211f-30fd-4273-bd7d-ab39e5a1b6c9"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a8785cbf-6d9a-4d00-8d5a-2dd3118b7c28",
|
|
"created": "2022-07-02T19:37:33.933281Z",
|
|
"modified": "2022-07-02T19:37:33.933281Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--17076e50-3aca-4681-820f-908bd9b43e0e",
|
|
"target_ref": "attack-pattern--0a29ae3a-c165-494c-913d-d26029664f8d"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--841ba795-566f-4807-8f74-674810c83cc7",
|
|
"created": "2022-07-02T19:37:33.933371Z",
|
|
"modified": "2022-07-02T19:37:33.933371Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--cfd4aaca-ef36-43f6-9db7-f0923f54cce5",
|
|
"target_ref": "attack-pattern--0a29ae3a-c165-494c-913d-d26029664f8d"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ea89f5bf-6626-4df0-b3b1-7b265baa97c6",
|
|
"created": "2022-07-02T19:37:33.933461Z",
|
|
"modified": "2022-07-02T19:37:33.933461Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--861e797f-6b28-4ba5-b424-6ddb8d184aa3",
|
|
"target_ref": "attack-pattern--0a29ae3a-c165-494c-913d-d26029664f8d"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--262a627d-a2d3-441f-8eaa-e5c1251758c6",
|
|
"created": "2022-07-02T19:37:33.933551Z",
|
|
"modified": "2022-07-02T19:37:33.933551Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--a180a8ea-997c-4e2a-a35d-703735524843",
|
|
"target_ref": "attack-pattern--0a29ae3a-c165-494c-913d-d26029664f8d"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f67da84c-2d51-4f50-a924-d72541dfe571",
|
|
"created": "2022-07-02T19:37:33.933641Z",
|
|
"modified": "2022-07-02T19:37:33.933641Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--0462b73a-aeff-499d-8225-28c3b2b597dd",
|
|
"target_ref": "attack-pattern--18d23eda-bc3c-4684-b684-3e3341f449ad"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5cac782b-d5eb-48e8-9fcc-872a7dae47f9",
|
|
"created": "2022-07-02T19:37:33.933731Z",
|
|
"modified": "2022-07-02T19:37:33.933731Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--04b81e80-3d7d-416a-b86e-8e9d3d2b4ddf",
|
|
"target_ref": "attack-pattern--18d23eda-bc3c-4684-b684-3e3341f449ad"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--225ca5ad-748e-48df-95df-609a275540f6",
|
|
"created": "2022-07-02T19:37:33.93382Z",
|
|
"modified": "2022-07-02T19:37:33.93382Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--51239901-cfe6-4565-9ddb-b884ddcb4490",
|
|
"target_ref": "attack-pattern--18d23eda-bc3c-4684-b684-3e3341f449ad"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--0a2e1327-7a59-4124-b3a5-0398344c5eca",
|
|
"created": "2022-07-02T19:37:33.933909Z",
|
|
"modified": "2022-07-02T19:37:33.933909Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--c5b3678c-efc0-4e2b-9cfa-672c55335753",
|
|
"target_ref": "attack-pattern--b32934a3-9ace-45f5-8b6f-93145f6e6edd"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1274991f-8d5d-409c-a020-3ec696c00092",
|
|
"created": "2022-07-02T19:37:33.934Z",
|
|
"modified": "2022-07-02T19:37:33.934Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--c0fd0235-3c3b-4e51-b4f3-7af7b301c659",
|
|
"target_ref": "attack-pattern--b32934a3-9ace-45f5-8b6f-93145f6e6edd"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--099c149b-6820-431c-bc9a-64f32080078c",
|
|
"created": "2022-07-02T19:37:33.934089Z",
|
|
"modified": "2022-07-02T19:37:33.934089Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--1ed01ac5-1581-4170-8fff-b29952ca192d",
|
|
"target_ref": "attack-pattern--76adf1e7-e3b7-41ce-9449-ca541f9bacaf"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5b73f949-2898-40d4-a240-83617a7f20d4",
|
|
"created": "2022-07-02T19:37:33.934181Z",
|
|
"modified": "2022-07-02T19:37:33.934181Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--86f72dc9-e768-4d69-883d-65ba5a17700c",
|
|
"target_ref": "attack-pattern--76adf1e7-e3b7-41ce-9449-ca541f9bacaf"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c876e8a2-93b0-4ff6-80b5-34ce10203481",
|
|
"created": "2022-07-02T19:37:33.934272Z",
|
|
"modified": "2022-07-02T19:37:33.934272Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--a9f4f62a-9687-4550-a053-3b640d455cc5",
|
|
"target_ref": "attack-pattern--9af345e5-efde-4c73-a8f2-802e6ffa1e61"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--c648e226-596c-4d66-b93e-ab189b99dbf7",
|
|
"created": "2022-07-02T19:37:33.934362Z",
|
|
"modified": "2022-07-02T19:37:33.934362Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--e0e66b49-511e-457f-8a84-00263cae2d2d",
|
|
"target_ref": "attack-pattern--9af345e5-efde-4c73-a8f2-802e6ffa1e61"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--96ce05df-5287-4065-aa69-fb70e64a2f60",
|
|
"created": "2022-07-02T19:37:33.934457Z",
|
|
"modified": "2022-07-02T19:37:33.934457Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--9690b54b-2d7a-4bf6-bda0-fa03108d1373",
|
|
"target_ref": "attack-pattern--9af345e5-efde-4c73-a8f2-802e6ffa1e61"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5ca754dc-68fb-42dd-a04a-70239ace1383",
|
|
"created": "2022-07-02T19:37:33.934546Z",
|
|
"modified": "2022-07-02T19:37:33.934546Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--d6bd33eb-fdad-4ac1-b072-20bfa30a47a2",
|
|
"target_ref": "attack-pattern--9af345e5-efde-4c73-a8f2-802e6ffa1e61"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3f7177a8-5d98-4d7d-a84f-09e10add2680",
|
|
"created": "2022-07-02T19:37:33.934636Z",
|
|
"modified": "2022-07-02T19:37:33.934636Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--b5fa46b3-bea6-4c22-abc1-8148a74ff144",
|
|
"target_ref": "attack-pattern--9af345e5-efde-4c73-a8f2-802e6ffa1e61"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--00beeb34-3765-4a69-8ebf-3ea85b3a99c1",
|
|
"created": "2022-07-02T19:37:33.934726Z",
|
|
"modified": "2022-07-02T19:37:33.934726Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--09754b27-b5d6-4613-bb21-c29a64808436",
|
|
"target_ref": "attack-pattern--3dc0c8ec-0552-4c7d-9301-a9705b962bb5"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b3b8f6b4-da22-4c76-90b6-f2024c8f1e08",
|
|
"created": "2022-07-02T19:37:33.934817Z",
|
|
"modified": "2022-07-02T19:37:33.934817Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--66a99773-eb1b-4a08-9e80-e36ecc74fb4d",
|
|
"target_ref": "attack-pattern--3dc0c8ec-0552-4c7d-9301-a9705b962bb5"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b7f58042-32bd-49fc-b1d1-2bc586799960",
|
|
"created": "2022-07-02T19:37:33.934907Z",
|
|
"modified": "2022-07-02T19:37:33.934907Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--83e6303e-dd9a-4d90-9eed-3c480ce1603e",
|
|
"target_ref": "attack-pattern--3dc0c8ec-0552-4c7d-9301-a9705b962bb5"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--38d8960e-3921-417e-aabf-cd101aab02c7",
|
|
"created": "2022-07-02T19:37:33.934997Z",
|
|
"modified": "2022-07-02T19:37:33.934997Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--5823e6ed-e27c-4b0b-8e5c-47fd2787c789",
|
|
"target_ref": "attack-pattern--3dc0c8ec-0552-4c7d-9301-a9705b962bb5"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b38e2f6c-43e7-42f8-9b4e-04d20b50eb35",
|
|
"created": "2022-07-02T19:37:33.935087Z",
|
|
"modified": "2022-07-02T19:37:33.935087Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--495dc711-0327-4367-a414-0290eeac4f4b",
|
|
"target_ref": "attack-pattern--3dc0c8ec-0552-4c7d-9301-a9705b962bb5"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--3e871c17-a570-43c6-9a09-665a4570a7dd",
|
|
"created": "2022-07-02T19:37:33.935177Z",
|
|
"modified": "2022-07-02T19:37:33.935177Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--c63a7119-3ae3-48ed-9bf3-24ad6f413c44",
|
|
"target_ref": "attack-pattern--3dc0c8ec-0552-4c7d-9301-a9705b962bb5"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b8ce3a1a-f2cb-4b2c-827b-ecaafd58d001",
|
|
"created": "2022-07-02T19:37:33.935266Z",
|
|
"modified": "2022-07-02T19:37:33.935266Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--6b176c9d-770b-4bca-adc9-f01c4778ecdf",
|
|
"target_ref": "attack-pattern--3dc0c8ec-0552-4c7d-9301-a9705b962bb5"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d0a583ec-696d-4f76-a987-25709176fa11",
|
|
"created": "2022-07-02T19:37:33.935356Z",
|
|
"modified": "2022-07-02T19:37:33.935356Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--d9e22f98-e5fb-4db2-9ee0-f7d3548e237b",
|
|
"target_ref": "attack-pattern--3dc0c8ec-0552-4c7d-9301-a9705b962bb5"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--2318765e-6b7a-4afc-aeb5-b6c8c913ce69",
|
|
"created": "2022-07-02T19:37:33.935448Z",
|
|
"modified": "2022-07-02T19:37:33.935448Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--bce7329c-2d3a-493e-a076-818e487c5dc4",
|
|
"target_ref": "attack-pattern--3dc0c8ec-0552-4c7d-9301-a9705b962bb5"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--7619395e-e3e1-47f3-b396-4c8eea420db4",
|
|
"created": "2022-07-02T19:37:33.935539Z",
|
|
"modified": "2022-07-02T19:37:33.935539Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--12c1e2de-2948-43e2-91f5-d6d6287fcb81",
|
|
"target_ref": "attack-pattern--3dc0c8ec-0552-4c7d-9301-a9705b962bb5"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--77cf4240-aade-45da-9487-981c2928c527",
|
|
"created": "2022-07-02T19:37:33.93563Z",
|
|
"modified": "2022-07-02T19:37:33.93563Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--41b909fa-d9b2-46ea-911d-ff82bb3f9149",
|
|
"target_ref": "attack-pattern--ded03b01-9147-4e4a-a1c2-47110b5be178"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--98804142-baae-42dd-9f03-bf3d9175862f",
|
|
"created": "2022-07-02T19:37:33.935722Z",
|
|
"modified": "2022-07-02T19:37:33.935722Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--a15cae9d-c883-4f06-813d-15f3ff18307b",
|
|
"target_ref": "attack-pattern--ded03b01-9147-4e4a-a1c2-47110b5be178"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--ac2d43e9-171d-4a46-9c3b-cf53f2ea25f4",
|
|
"created": "2022-07-02T19:37:33.935836Z",
|
|
"modified": "2022-07-02T19:37:33.935836Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--08bc4a54-b46a-4ab6-aebd-ed4849cfb8c2",
|
|
"target_ref": "attack-pattern--ded03b01-9147-4e4a-a1c2-47110b5be178"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--1679e627-b8ba-4bf6-bf00-bba38ebc3632",
|
|
"created": "2022-07-02T19:37:33.935926Z",
|
|
"modified": "2022-07-02T19:37:33.935926Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--4c1031b1-7563-4bb7-9f02-ab4e1cb9f2e4",
|
|
"target_ref": "attack-pattern--ded03b01-9147-4e4a-a1c2-47110b5be178"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--0a3f7311-3c37-4a16-9c59-b5503750e397",
|
|
"created": "2022-07-02T19:37:33.936016Z",
|
|
"modified": "2022-07-02T19:37:33.936016Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--7ab7c20d-e442-4dd5-a6ca-da37f0ed9f8c",
|
|
"target_ref": "attack-pattern--ded03b01-9147-4e4a-a1c2-47110b5be178"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--63ec31e2-25f5-46b0-b00c-443b2951b8f2",
|
|
"created": "2022-07-02T19:37:33.936106Z",
|
|
"modified": "2022-07-02T19:37:33.936106Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--43f1053e-fc27-4507-9140-ecb96f11ea62",
|
|
"target_ref": "attack-pattern--6ce27265-a3f2-424c-83d2-152e082253d1"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--bc49386c-615d-4ca4-836d-097ee87a83bc",
|
|
"created": "2022-07-02T19:37:33.936197Z",
|
|
"modified": "2022-07-02T19:37:33.936197Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--1fa970eb-0e7c-43fe-91c9-f515371c73c6",
|
|
"target_ref": "attack-pattern--6ce27265-a3f2-424c-83d2-152e082253d1"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--98b6bafa-a3cb-4dac-aa29-787fd50ec4a5",
|
|
"created": "2022-07-02T19:37:33.936288Z",
|
|
"modified": "2022-07-02T19:37:33.936288Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--66eaf134-ca5d-47f0-9710-d72cbd1ca5b5",
|
|
"target_ref": "attack-pattern--0c7572f3-a9d0-40c5-ad28-7e1741675f71"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--b4bda4d6-7a14-426e-a2f0-b810db10f21e",
|
|
"created": "2022-07-02T19:37:33.936384Z",
|
|
"modified": "2022-07-02T19:37:33.936384Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--8225e0f1-6458-4954-97a1-955b9595869a",
|
|
"target_ref": "attack-pattern--0c7572f3-a9d0-40c5-ad28-7e1741675f71"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--d96f09b6-2659-489b-9f32-341092ced7d1",
|
|
"created": "2022-07-02T19:37:33.936477Z",
|
|
"modified": "2022-07-02T19:37:33.936477Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--ce09d47a-80bd-47a6-b07b-a27022ee5e8c",
|
|
"target_ref": "attack-pattern--0c7572f3-a9d0-40c5-ad28-7e1741675f71"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--f3f34718-8204-442e-b5a9-0eb223c26672",
|
|
"created": "2022-07-02T19:37:33.936568Z",
|
|
"modified": "2022-07-02T19:37:33.936568Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--86d16670-b37a-4847-8f6c-d8767a4f3203",
|
|
"target_ref": "attack-pattern--7fb05fc4-d1dc-45f1-ae4d-1b0142c7aed9"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--6b84d6b1-b861-41aa-8937-d5945da3d761",
|
|
"created": "2022-07-02T19:37:33.936662Z",
|
|
"modified": "2022-07-02T19:37:33.936662Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--9cb81dc8-f500-49a7-9bca-940e87759ff1",
|
|
"target_ref": "attack-pattern--7fb05fc4-d1dc-45f1-ae4d-1b0142c7aed9"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--5a33e354-1243-4d87-b684-bf9b4d70db3f",
|
|
"created": "2022-07-02T19:37:33.936757Z",
|
|
"modified": "2022-07-02T19:37:33.936757Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--f3d9c378-fd20-439c-84f3-42cc3344e24a",
|
|
"target_ref": "attack-pattern--7fb05fc4-d1dc-45f1-ae4d-1b0142c7aed9"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--bd1733e9-b03f-43df-b925-18041e9c6802",
|
|
"created": "2022-07-02T19:37:33.936846Z",
|
|
"modified": "2022-07-02T19:37:33.936846Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--a9513c7e-e23a-4501-a316-f454ea1110c8",
|
|
"target_ref": "attack-pattern--7fb05fc4-d1dc-45f1-ae4d-1b0142c7aed9"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--e0367bbc-9d41-4c86-94f1-810fbd587b9e",
|
|
"created": "2022-07-02T19:37:33.936936Z",
|
|
"modified": "2022-07-02T19:37:33.936936Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--8ef44397-7420-4c28-8185-4c3abb173fb6",
|
|
"target_ref": "attack-pattern--7fb05fc4-d1dc-45f1-ae4d-1b0142c7aed9"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--52aec87f-aab7-43d7-b64b-6826721d55ab",
|
|
"created": "2022-07-02T19:37:33.937025Z",
|
|
"modified": "2022-07-02T19:37:33.937025Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--8b15e9c8-db45-4657-b27b-d7ca8ae19606",
|
|
"target_ref": "attack-pattern--526a5783-273a-41c8-ba53-adc24ae485f8"
|
|
},
|
|
{
|
|
"type": "relationship",
|
|
"spec_version": "2.1",
|
|
"id": "relationship--a618ace3-83a9-434d-8d97-66c83c0edc51",
|
|
"created": "2022-07-02T19:37:33.937115Z",
|
|
"modified": "2022-07-02T19:37:33.937115Z",
|
|
"relationship_type": "subtechnique-of",
|
|
"source_ref": "attack-pattern--5be6298a-c908-4b31-a7e2-7c0f3954330c",
|
|
"target_ref": "attack-pattern--526a5783-273a-41c8-ba53-adc24ae485f8"
|
|
},
|
|
{
|
|
"type": "x-mitre-matrix",
|
|
"spec_version": "2.1",
|
|
"id": "x-mitre-matrix--8a0708c0-153c-4823-94ac-33680d360d96",
|
|
"created": "2022-07-02T19:37:33.937221Z",
|
|
"modified": "2022-07-02T19:37:33.937221Z",
|
|
"name": "DISARM Framework",
|
|
"description": "DISARM is a framework designed for describing and understanding disinformation incidents.",
|
|
"tactic_refs": [
|
|
"x-mitre-tactic--7d0ab1db-b6fa-4be4-acc1-49d6de17835e",
|
|
"x-mitre-tactic--75ee5c1f-0d5f-4ae0-af72-79fb6ad99553",
|
|
"x-mitre-tactic--ff08ad89-689f-411d-93e7-958ea562ef02",
|
|
"x-mitre-tactic--70a7547e-a1cc-4883-a362-a09b4773a2f2",
|
|
"x-mitre-tactic--4afb4146-7d6d-407b-be8f-49a4831ff397",
|
|
"x-mitre-tactic--c068c80d-b032-43f0-aae1-6849e481e511",
|
|
"x-mitre-tactic--76f5f41d-a890-4c4e-8011-28ac6484956d",
|
|
"x-mitre-tactic--4a308bda-5256-415d-8502-1d21f81ad663",
|
|
"x-mitre-tactic--4f4b3036-b624-420d-bede-ebf462049d56",
|
|
"x-mitre-tactic--b289831d-3978-47c4-aeef-0551c83d119f",
|
|
"x-mitre-tactic--d62bebf4-5a41-4307-a98a-b1e96a519c90",
|
|
"x-mitre-tactic--3ba6c81a-d2c9-4891-9a3f-17879cdc9010",
|
|
"x-mitre-tactic--f66b1e2f-e556-4ad2-860a-7956d61f2517",
|
|
"x-mitre-tactic--f60dc935-0cd7-424e-a01d-5f5b9703d63e",
|
|
"x-mitre-tactic--836438d3-1ece-4c01-8cee-79a50f481c00",
|
|
"x-mitre-tactic--af40ad45-c8b4-4dda-a169-7ce361302b06"
|
|
],
|
|
"external_references": [
|
|
{
|
|
"source_name": "DISARM",
|
|
"url": "https://github.com/DISARMFoundation",
|
|
"external_id": "DISARM"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|