diff --git a/AMITT_MASTER_DATA/AMITT_TTPs_MASTER.xlsx b/AMITT_MASTER_DATA/AMITT_TTPs_MASTER.xlsx
index fe3f5f4..d64c336 100644
Binary files a/AMITT_MASTER_DATA/AMITT_TTPs_MASTER.xlsx and b/AMITT_MASTER_DATA/AMITT_TTPs_MASTER.xlsx differ
diff --git a/AMITT_MASTER_DATA/~$AMITT_TTPs_MASTER.xlsx b/AMITT_MASTER_DATA/~$AMITT_TTPs_MASTER.xlsx
deleted file mode 100644
index 5a93205..0000000
Binary files a/AMITT_MASTER_DATA/~$AMITT_TTPs_MASTER.xlsx and /dev/null differ
diff --git a/HTML_GENERATING_CODE/.ipynb_checkpoints/AMITT_create_website_sql-checkpoint.ipynb b/HTML_GENERATING_CODE/.ipynb_checkpoints/AMITT_create_website_sql-checkpoint.ipynb
index 68a2eba..033dc74 100644
--- a/HTML_GENERATING_CODE/.ipynb_checkpoints/AMITT_create_website_sql-checkpoint.ipynb
+++ b/HTML_GENERATING_CODE/.ipynb_checkpoints/AMITT_create_website_sql-checkpoint.ipynb
@@ -11,14 +11,14 @@
},
{
"cell_type": "code",
- "execution_count": 1,
+ "execution_count": 2,
"metadata": {},
"outputs": [
{
"name": "stdout",
"output_type": "stream",
"text": [
- "dict_keys(['df_phases', 'df_frameworks', 'df_techniques', 'df_tasks', 'df_incidents', 'df_counters', 'df_detections', 'df_actortypes', 'df_resources', 'df_responsetypes', 'df_metatechniques', 'it', 'df_tactics', 'df_techniques_per_tactic', 'df_counters_per_tactic', 'phases', 'tactics', 'techniques', 'counters', 'metatechniques', 'actortypes', 'resources', 'num_tactics', 'cross_counterid_techniqueid', 'cross_counterid_resourceid', 'cross_counterid_actortypeid'])\n"
+ "dict_keys(['df_phases', 'df_frameworks', 'df_techniques', 'df_tasks', 'df_incidents', 'df_counters', 'df_detections', 'df_actortypes', 'df_resources', 'df_responsetypes', 'df_metatechniques', 'it', 'df_tactics', 'df_techniques_per_tactic', 'df_counters_per_tactic', 'phases', 'tactics', 'techniques', 'counters', 'metatechniques', 'actortypes', 'resources', 'num_tactics', 'cross_counterid_techniqueid', 'cross_counterid_resourceid', 'cross_counterid_actortypeid', 'cross_detectionid_techniqueid', 'cross_detectionid_resourceid', 'cross_detectionid_actortypeid'])\n"
]
},
{
@@ -5509,7 +5509,7 @@
"139 C00223 "
]
},
- "execution_count": 1,
+ "execution_count": 2,
"metadata": {},
"output_type": "execute_result"
}
@@ -5533,7 +5533,7 @@
},
{
"cell_type": "code",
- "execution_count": 23,
+ "execution_count": 3,
"metadata": {},
"outputs": [
{
@@ -5557,7 +5557,2717 @@
" \n",
" \n",
" | \n",
- " counter_id | \n",
+ " amitt_id | \n",
+ " name | \n",
+ " metatechnique | \n",
+ " summary | \n",
+ " actors | \n",
+ " resources_needed | \n",
+ " how_found | \n",
+ " references | \n",
+ " incidents | \n",
+ " tactic | \n",
+ " responsetype | \n",
+ " notes | \n",
+ " techniques | \n",
+ " longname | \n",
+ " tactic_id | \n",
+ " tactic_name | \n",
+ "
\n",
+ " \n",
+ "
\n",
+ " \n",
+ " | 0 | \n",
+ " F00001 | \n",
+ " Analyse aborted / failed campaigns | \n",
+ " | \n",
+ " Examine failed campaigns. How did they fail? C... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA01 Strategic Planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " All | \n",
+ " F00001 - Analyse aborted / failed campaigns | \n",
+ " TA01 | \n",
+ " Strategic Planning | \n",
+ "
\n",
+ " \n",
+ " | 1 | \n",
+ " F00002 | \n",
+ " Analyse viral fizzle | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA01 Strategic Planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0049 - Flooding\\nT0052 - Tertiary sites ampli... | \n",
+ " F00002 - Analyse viral fizzle | \n",
+ " TA01 | \n",
+ " Strategic Planning | \n",
+ "
\n",
+ " \n",
+ " | 2 | \n",
+ " F00003 | \n",
+ " Exploit counter-intelligence vs bad actors | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA01 Strategic Planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA06 - Develop Content\\nTA08 - Pump Priming\\nT... | \n",
+ " F00003 - Exploit counter-intelligence vs bad a... | \n",
+ " TA01 | \n",
+ " Strategic Planning | \n",
+ "
\n",
+ " \n",
+ " | 3 | \n",
+ " F00004 | \n",
+ " Recruit like-minded converts \"people who used ... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA01 Strategic Planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0057 - Organise remote rallies and events\\nT0... | \n",
+ " F00004 - Recruit like-minded converts \"people ... | \n",
+ " TA01 | \n",
+ " Strategic Planning | \n",
+ "
\n",
+ " \n",
+ " | 4 | \n",
+ " F00005 | \n",
+ " SWOT Analysis of Cognition in Various Groups | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA01 Strategic Planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " All | \n",
+ " F00005 - SWOT Analysis of Cognition in Various... | \n",
+ " TA01 | \n",
+ " Strategic Planning | \n",
+ "
\n",
+ " \n",
+ " | 5 | \n",
+ " F00006 | \n",
+ " SWOT analysis of tech platforms | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA01 Strategic Planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA05 - Microtargeting\\nTA07 - Channel Selectio... | \n",
+ " F00006 - SWOT analysis of tech platforms | \n",
+ " TA01 | \n",
+ " Strategic Planning | \n",
+ "
\n",
+ " \n",
+ " | 6 | \n",
+ " F00007 | \n",
+ " Monitor account level activity in social networks | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA02 Objective Planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " All | \n",
+ " F00007 - Monitor account level activity in soc... | \n",
+ " TA02 | \n",
+ " Objective Planning | \n",
+ "
\n",
+ " \n",
+ " | 7 | \n",
+ " F00008 | \n",
+ " Detect abnormal amplification | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0052 - Tertiary sites amplify news\\nT0053 - T... | \n",
+ " F00008 - Detect abnormal amplification | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 8 | \n",
+ " F00009 | \n",
+ " Detect abnormal events | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0007 - Create fake Social Media Profiles / Pa... | \n",
+ " F00009 - Detect abnormal events | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 9 | \n",
+ " F00010 | \n",
+ " Detect abnormal groups | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0007 - Create fake Social Media Profiles / Pa... | \n",
+ " F00010 - Detect abnormal groups | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 10 | \n",
+ " F00011 | \n",
+ " Detect abnormal pages | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0007 - Create fake Social Media Profiles / Pa... | \n",
+ " F00011 - Detect abnormal pages | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 11 | \n",
+ " F00012 | \n",
+ " Detect abnormal profiles, e.g. prolific pages/... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0007 - Create fake Social Media Profiles / Pa... | \n",
+ " F00012 - Detect abnormal profiles, e.g. prolif... | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 12 | \n",
+ " F00013 | \n",
+ " Identify fake news sites | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0008 | \n",
+ " F00013 - Identify fake news sites | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 13 | \n",
+ " F00014 | \n",
+ " Trace connections | \n",
+ " | \n",
+ " for e.g. fake news sites | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0008 | \n",
+ " F00014 - Trace connections | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 14 | \n",
+ " F00015 | \n",
+ " Detect anomalies in membership growth patterns | \n",
+ " | \n",
+ " I include Fake Experts as they may use funding... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA07 - Channel Selection\\n\\nT0007 - Create fak... | \n",
+ " F00015 - Detect anomalies in membership growth... | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 15 | \n",
+ " F00016 | \n",
+ " Identify fence-sitters | \n",
+ " | \n",
+ " Note: In each case, depending on the platform ... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA08 - Pump Priming\\nTA09 - Exposure\\nTA10 - G... | \n",
+ " F00016 - Identify fence-sitters | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 16 | \n",
+ " F00017 | \n",
+ " Measure emotional valence | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0001 - 5Ds (dismiss, distort, distract, disma... | \n",
+ " F00017 - Measure emotional valence | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 17 | \n",
+ " F00018 | \n",
+ " Follow the money | \n",
+ " | \n",
+ " track funding sources | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0009 | \n",
+ " F00018 - Follow the money | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 18 | \n",
+ " F00019 | \n",
+ " Activity resurgence detection (alarm when dorm... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA04 Develop Networks | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0011 - Hijack accounts | \n",
+ " F00019 - Activity resurgence detection (alarm ... | \n",
+ " TA04 | \n",
+ " Develop Networks | \n",
+ "
\n",
+ " \n",
+ " | 19 | \n",
+ " F00020 | \n",
+ " Detect anomalous activity | \n",
+ " | \n",
+ " | \n",
+ " A015 - general public,A001 - data scientist,A0... | \n",
+ " R004 - platform algorithms | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA04 Develop Networks | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0011 - Hijack accounts | \n",
+ " F00020 - Detect anomalous activity | \n",
+ " TA04 | \n",
+ " Develop Networks | \n",
+ "
\n",
+ " \n",
+ " | 20 | \n",
+ " F00021 | \n",
+ " AI/ML automated early detection of campaign pl... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA04 Develop Networks | \n",
+ " D1 Detect | \n",
+ " Automated Detection of Campaign | \n",
+ " TA03 - Develop People\\nTA04 - Develop Networks... | \n",
+ " F00021 - AI/ML automated early detection of ca... | \n",
+ " TA04 | \n",
+ " Develop Networks | \n",
+ "
\n",
+ " \n",
+ " | 21 | \n",
+ " F00022 | \n",
+ " Digital authority - regulating body (united st... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA04 Develop Networks | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00022 - Digital authority - regulating body (... | \n",
+ " TA04 | \n",
+ " Develop Networks | \n",
+ "
\n",
+ " \n",
+ " | 22 | \n",
+ " F00023 | \n",
+ " Periodic verification (counter to hijack legit... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA04 Develop Networks | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0011 - Hijack accounts | \n",
+ " F00023 - Periodic verification (counter to hij... | \n",
+ " TA04 | \n",
+ " Develop Networks | \n",
+ "
\n",
+ " \n",
+ " | 23 | \n",
+ " F00024 | \n",
+ " Teach civics to kids/ adults/ seniors | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA04 Develop Networks | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00024 - Teach civics to kids/ adults/ seniors | \n",
+ " TA04 | \n",
+ " Develop Networks | \n",
+ "
\n",
+ " \n",
+ " | 24 | \n",
+ " F00025 | \n",
+ " Boots-on-the-ground early narrative detection | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA05 Microtargeting | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA01 - Strategic Planning\\nTA02 - Objective Pl... | \n",
+ " F00025 - Boots-on-the-ground early narrative d... | \n",
+ " TA05 | \n",
+ " Microtargeting | \n",
+ "
\n",
+ " \n",
+ " | 25 | \n",
+ " F00026 | \n",
+ " Language anomoly detection | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA05 Microtargeting | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00026 - Language anomoly detection | \n",
+ " TA05 | \n",
+ " Microtargeting | \n",
+ "
\n",
+ " \n",
+ " | 26 | \n",
+ " F00027 | \n",
+ " Unlikely correlation of sentiment on same topics | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA05 Microtargeting | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00027 - Unlikely correlation of sentiment on ... | \n",
+ " TA05 | \n",
+ " Microtargeting | \n",
+ "
\n",
+ " \n",
+ " | 27 | \n",
+ " F00028 | \n",
+ " Associate a public key signature with governme... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0025 - Leak altered documents | \n",
+ " F00028 - Associate a public key signature with... | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 28 | \n",
+ " F00029 | \n",
+ " Detect proto narratives, i.e. RT, Sputnik | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA01 - Strategic Planning\\n\\nT0006 - Create Ma... | \n",
+ " F00029 - Detect proto narratives, i.e. RT, Spu... | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 29 | \n",
+ " F00030 | \n",
+ " Early detection and warning - reporting of sus... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA03 - Develop People\\nTA04 - Develop Networks... | \n",
+ " F00030 - Early detection and warning - reporti... | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 30 | \n",
+ " F00031 | \n",
+ " Educate on how to identify information pollution | \n",
+ " | \n",
+ " Strategic planning included as innoculating po... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA01 - Strategic Planning\\n\\nT0019 - Generate ... | \n",
+ " F00031 - Educate on how to identify informatio... | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 31 | \n",
+ " F00032 | \n",
+ " Educate on how to identify to pollution | \n",
+ " | \n",
+ " DUPLICATE - DELETE | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " DUPLICATE - DELETE | \n",
+ " F00032 - Educate on how to identify to pollution | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 32 | \n",
+ " F00033 | \n",
+ " Fake websites: add transparency on business model | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0013 - Create fake websites | \n",
+ " F00033 - Fake websites: add transparency on bu... | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 33 | \n",
+ " F00034 | \n",
+ " Flag the information spaces so people know abo... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0049 - Flooding | \n",
+ " F00034 - Flag the information spaces so people... | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 34 | \n",
+ " F00035 | \n",
+ " Identify repeated narrative DNA | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA01 - Strategic Planning\\n\\nT0006 - Create Ma... | \n",
+ " F00035 - Identify repeated narrative DNA | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 35 | \n",
+ " F00036 | \n",
+ " Looking for AB testing in unregulated channels | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0020 - Trial content | \n",
+ " F00036 - Looking for AB testing in unregulated... | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 36 | \n",
+ " F00037 | \n",
+ " News content provenance certification. | \n",
+ " | \n",
+ " Original Comment: Shortcomings: intentional fa... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA01 - Strategic Planning* (non-existent techn... | \n",
+ " F00037 - News content provenance certification. | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 37 | \n",
+ " F00038 | \n",
+ " Social capital as attack vector | \n",
+ " | \n",
+ " Unsure I understood the original intention or ... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0010 - Cultivate ignorant agents\\nT0039 - Bai... | \n",
+ " F00038 - Social capital as attack vector | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 38 | \n",
+ " F00039 | \n",
+ " standards to track image/ video deep fakes - i... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0024 - Create fake videos and images | \n",
+ " F00039 - standards to track image/ video deep ... | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 39 | \n",
+ " F00040 | \n",
+ " Unalterable metadata signature on origins of i... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0024 - Create fake videos and images | \n",
+ " F00040 - Unalterable metadata signature on ori... | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 40 | \n",
+ " F00041 | \n",
+ " Bias detection | \n",
+ " | \n",
+ " Not technically left of boom | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA07 Channel Selection | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T00029 | \n",
+ " F00041 - Bias detection | \n",
+ " TA07 | \n",
+ " Channel Selection | \n",
+ "
\n",
+ " \n",
+ " | 41 | \n",
+ " F00042 | \n",
+ " Categorize polls by intent | \n",
+ " | \n",
+ " Use T00029, but against the creators | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA07 Channel Selection | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T00029 | \n",
+ " F00042 - Categorize polls by intent | \n",
+ " TA07 | \n",
+ " Channel Selection | \n",
+ "
\n",
+ " \n",
+ " | 42 | \n",
+ " F00043 | \n",
+ " Monitor for creation of fake known personas | \n",
+ " | \n",
+ " Platform companies and some information securi... | \n",
+ " A031 - social media platform administrator,A01... | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA07 Channel Selection | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T00030 | \n",
+ " F00043 - Monitor for creation of fake known pe... | \n",
+ " TA07 | \n",
+ " Channel Selection | \n",
+ "
\n",
+ " \n",
+ " | 43 | \n",
+ " F00044 | \n",
+ " Forensic analysis | \n",
+ " | \n",
+ " Can be used in all phases for all techniques. | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA08 Pump Priming | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " All | \n",
+ " F00044 - Forensic analysis | \n",
+ " TA08 | \n",
+ " Pump Priming | \n",
+ "
\n",
+ " \n",
+ " | 44 | \n",
+ " F00045 | \n",
+ " Forensic linguistic analysis | \n",
+ " | \n",
+ " Can be used in all phases for all techniques. | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA08 Pump Priming | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " All | \n",
+ " F00045 - Forensic linguistic analysis | \n",
+ " TA08 | \n",
+ " Pump Priming | \n",
+ "
\n",
+ " \n",
+ " | 45 | \n",
+ " F00046 | \n",
+ " Pump priming analytics | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA08 Pump Priming | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA08 - Pump Priming | \n",
+ " F00046 - Pump priming analytics | \n",
+ " TA08 | \n",
+ " Pump Priming | \n",
+ "
\n",
+ " \n",
+ " | 46 | \n",
+ " F00047 | \n",
+ " trace involved parties | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA08 Pump Priming | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00047 - trace involved parties | \n",
+ " TA08 | \n",
+ " Pump Priming | \n",
+ "
\n",
+ " \n",
+ " | 47 | \n",
+ " F00048 | \n",
+ " Trace known operations and connection | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA08 Pump Priming | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00048 - Trace known operations and connection | \n",
+ " TA08 | \n",
+ " Pump Priming | \n",
+ "
\n",
+ " \n",
+ " | 48 | \n",
+ " F00049 | \n",
+ " trace money | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA08 Pump Priming | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00049 - trace money | \n",
+ " TA08 | \n",
+ " Pump Priming | \n",
+ "
\n",
+ " \n",
+ " | 49 | \n",
+ " F00050 | \n",
+ " Web cache analytics | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA08 Pump Priming | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00050 - Web cache analytics | \n",
+ " TA08 | \n",
+ " Pump Priming | \n",
+ "
\n",
+ " \n",
+ " | 50 | \n",
+ " F00051 | \n",
+ " Challenge expertise | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA09 Exposure | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0009 - Create fake experts\\nT0045 - Use fake ... | \n",
+ " F00051 - Challenge expertise | \n",
+ " TA09 | \n",
+ " Exposure | \n",
+ "
\n",
+ " \n",
+ " | 51 | \n",
+ " F00052 | \n",
+ " Discover sponsors | \n",
+ " | \n",
+ " Discovering the sponsors behind a campaign, na... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA09 Exposure | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " All | \n",
+ " F00052 - Discover sponsors | \n",
+ " TA09 | \n",
+ " Exposure | \n",
+ "
\n",
+ " \n",
+ " | 52 | \n",
+ " F00053 | \n",
+ " Government rumour control office (what can we ... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA09 Exposure | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0049\\nT0050\\nT0052\\nT0053\\nT0054\\nT0055\\nT0056 | \n",
+ " F00053 - Government rumour control office (wha... | \n",
+ " TA09 | \n",
+ " Exposure | \n",
+ "
\n",
+ " \n",
+ " | 53 | \n",
+ " F00054 | \n",
+ " Restrict people who can @ you on social networks | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA09 Exposure | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00054 - Restrict people who can @ you on soci... | \n",
+ " TA09 | \n",
+ " Exposure | \n",
+ "
\n",
+ " \n",
+ " | 54 | \n",
+ " F00055 | \n",
+ " Verify credentials | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA09 Exposure | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00055 - Verify credentials | \n",
+ " TA09 | \n",
+ " Exposure | \n",
+ "
\n",
+ " \n",
+ " | 55 | \n",
+ " F00056 | \n",
+ " Verify organisation legitimacy | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA09 Exposure | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00056 - Verify organisation legitimacy | \n",
+ " TA09 | \n",
+ " Exposure | \n",
+ "
\n",
+ " \n",
+ " | 56 | \n",
+ " F00057 | \n",
+ " Verify personal credentials of experts | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA09 Exposure | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00057 - Verify personal credentials of experts | \n",
+ " TA09 | \n",
+ " Exposure | \n",
+ "
\n",
+ " \n",
+ " | 57 | \n",
+ " F00058 | \n",
+ " Deplatform (cancel culture) | \n",
+ " | \n",
+ " *Deplatform People: This technique needs to be... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA10 Go Physical | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA07 - Channel Selection\\nTA09 - Exposure\\nTA1... | \n",
+ " F00058 - Deplatform (cancel culture) | \n",
+ " TA10 | \n",
+ " Go Physical | \n",
+ "
\n",
+ " \n",
+ " | 58 | \n",
+ " F00059 | \n",
+ " Identify susceptible demographics | \n",
+ " | \n",
+ " All techniques provide or are susceptible to b... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA10 Go Physical | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " All | \n",
+ " F00059 - Identify susceptible demographics | \n",
+ " TA10 | \n",
+ " Go Physical | \n",
+ "
\n",
+ " \n",
+ " | 59 | \n",
+ " F00060 | \n",
+ " Identify susceptible influencers | \n",
+ " | \n",
+ " I assume this was a transcript error. Otherwis... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA10 Go Physical | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0039 - Bait legitimate influencers | \n",
+ " F00060 - Identify susceptible influencers | \n",
+ " TA10 | \n",
+ " Go Physical | \n",
+ "
\n",
+ " \n",
+ " | 60 | \n",
+ " F00061 | \n",
+ " Microtargeting | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA10 Go Physical | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " All | \n",
+ " F00061 - Microtargeting | \n",
+ " TA10 | \n",
+ " Go Physical | \n",
+ "
\n",
+ " \n",
+ " | 61 | \n",
+ " F00062 | \n",
+ " Detect when Dormant account turns active | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA11 Persistence | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA09 - Exposure\\n\\nT0007 - Create fake Social ... | \n",
+ " F00062 - Detect when Dormant account turns active | \n",
+ " TA11 | \n",
+ " Persistence | \n",
+ "
\n",
+ " \n",
+ " | 62 | \n",
+ " F00063 | \n",
+ " Linguistic change analysis | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA11 Persistence | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00063 - Linguistic change analysis | \n",
+ " TA11 | \n",
+ " Persistence | \n",
+ "
\n",
+ " \n",
+ " | 63 | \n",
+ " F00064 | \n",
+ " Monitor reports of account takeover | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA11 Persistence | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0011 - Hijack legitimate account | \n",
+ " F00064 - Monitor reports of account takeover | \n",
+ " TA11 | \n",
+ " Persistence | \n",
+ "
\n",
+ " \n",
+ " | 64 | \n",
+ " F00065 | \n",
+ " Sentiment change analysis | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA11 Persistence | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00065 - Sentiment change analysis | \n",
+ " TA11 | \n",
+ " Persistence | \n",
+ "
\n",
+ " \n",
+ " | 65 | \n",
+ " F00066 | \n",
+ " Use language errors, time to respond to accoun... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA11 Persistence | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00066 - Use language errors, time to respond ... | \n",
+ " TA11 | \n",
+ " Persistence | \n",
+ "
\n",
+ " \n",
+ " | 66 | \n",
+ " F00067 | \n",
+ " Data forensics | \n",
+ " | \n",
+ " | \n",
+ " A001 - data scientist | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " | \n",
+ " I00029,I00045 | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00067 - Data forensics | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 67 | \n",
+ " F00068 | \n",
+ " Resonance analysis | \n",
+ " | \n",
+ " a developing methodology for identifying stati... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Rand2237 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00068 - Resonance analysis | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 68 | \n",
+ " F00069 | \n",
+ " Track Russian media and develop analytic methods. | \n",
+ " | \n",
+ " To effectively counter Russian propaganda, it ... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Rand2237 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00069 - Track Russian media and develop analy... | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 69 | \n",
+ " F00070 | \n",
+ " Full spectrum analytics | \n",
+ " | \n",
+ " | \n",
+ " A001 - data scientist | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " ALL | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00070 - Full spectrum analytics | \n",
+ " ALL | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 70 | \n",
+ " F00071 | \n",
+ " Network analysis Identify/cultivate/support in... | \n",
+ " | \n",
+ " Local influencers detected via Twitter network... | \n",
+ " A001 - data scientist | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Rand2237 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00071 - Network analysis Identify/cultivate/s... | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 71 | \n",
+ " F00072 | \n",
+ " network analysis to identify central users in ... | \n",
+ " | \n",
+ " It is possible that some of these are bots or ... | \n",
+ " A001 - data scientist | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Rand2237 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00072 - network analysis to identify central ... | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 72 | \n",
+ " F00073 | \n",
+ " collect intel/recon on black/covert content cr... | \n",
+ " | \n",
+ " Players at the level of covert attribution, re... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Rand2237 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00073 - collect intel/recon on black/covert c... | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 73 | \n",
+ " F00074 | \n",
+ " identify relevant fence-sitter communities | \n",
+ " | \n",
+ " brand ambassador programs could be used with i... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Rand2237 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00074 - identify relevant fence-sitter commun... | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 74 | \n",
+ " F00075 | \n",
+ " leverage open-source information | \n",
+ " | \n",
+ " significant amounts of quality open-source inf... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Dalton19 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00075 - leverage open-source information | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 75 | \n",
+ " F00076 | \n",
+ " Monitor/collect audience engagement data conne... | \n",
+ " | \n",
+ " Target audience connected to \"useful idiots ra... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Rand2237 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00076 - Monitor/collect audience engagement d... | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 76 | \n",
+ " F00077 | \n",
+ " Model for bot account behavior | \n",
+ " | \n",
+ " Bot account: action based, people. Unsure whic... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00077 - Model for bot account behavior | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 77 | \n",
+ " F00078 | \n",
+ " Monitor account level activity in social networks | \n",
+ " | \n",
+ " All techniques benefit from careful analysis a... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " All | \n",
+ " F00078 - Monitor account level activity in soc... | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 78 | \n",
+ " F00079 | \n",
+ " Network anomaly detection | \n",
+ " | \n",
+ " | \n",
+ " A001 - data scientist | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA05 Microtargeting | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0029 - Manipulate online polls\\nT0047 - Muzzl... | \n",
+ " F00079 - Network anomaly detection | \n",
+ " TA05 | \n",
+ " Microtargeting | \n",
+ "
\n",
+ " \n",
+ " | 79 | \n",
+ " F00080 | \n",
+ " Hack the polls/ content yourself | \n",
+ " | \n",
+ " Two wrongs don't make a right? But if you hack... | \n",
+ " A015 - general public | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA07 Channel Selection | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0029 - Manipulate online polls | \n",
+ " F00080 - Hack the polls/ content yourself | \n",
+ " TA07 | \n",
+ " Channel Selection | \n",
+ "
\n",
+ " \n",
+ " | 80 | \n",
+ " F00081 | \n",
+ " Need way for end user to report operations | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA09 Exposure | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0049\\nT0050\\nT0052\\nT0053\\nT0054\\nT0055\\nT0056 | \n",
+ " F00081 - Need way for end user to report opera... | \n",
+ " TA09 | \n",
+ " Exposure | \n",
+ "
\n",
+ " \n",
+ " | 81 | \n",
+ " F00082 | \n",
+ " Control the US \"slang\" translation boards | \n",
+ " | \n",
+ " | \n",
+ " A028 - platform administrator | \n",
+ " R005 - slang translation | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA11 Persistence | \n",
+ " D3 Disrupt | \n",
+ " | \n",
+ " | \n",
+ " F00082 - Control the US \"slang\" translation bo... | \n",
+ " TA11 | \n",
+ " Persistence | \n",
+ "
\n",
+ " \n",
+ " | 82 | \n",
+ " F00083 | \n",
+ " Build and own meme generator, then track and w... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA11 Persistence | \n",
+ " D5 Deceive | \n",
+ " | \n",
+ " T0012 - Use concealment\\nT0021 - Memes | \n",
+ " F00083 - Build and own meme generator, then tr... | \n",
+ " TA11 | \n",
+ " Persistence | \n",
+ "
\n",
+ " \n",
+ " | 83 | \n",
+ " F00084 | \n",
+ " Track individual bad actors | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00084 - Track individual bad actors | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 84 | \n",
+ " F00085 | \n",
+ " detection of a weak signal through global noise | \n",
+ " | \n",
+ " Gray zone threats are challenging given that w... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Dalton19 | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " F00085 - detection of a weak signal through gl... | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 85 | \n",
+ " F00086 | \n",
+ " Outpace Competitor Intelligence Capabilities | \n",
+ " | \n",
+ " Develop an intelligence-based understanding of... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Hicks19 | \n",
+ " | \n",
+ " TA02 Objective planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00086 - Outpace Competitor Intelligence Capab... | \n",
+ " TA02 | \n",
+ " Objective planning | \n",
+ "
\n",
+ " \n",
+ " | 86 | \n",
+ " F00087 | \n",
+ " Improve Indications and Warning | \n",
+ " | \n",
+ " United States has not adequately adapted its i... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Hicks19 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00087 - Improve Indications and Warning | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 87 | \n",
+ " F00088 | \n",
+ " Revitalize an “active measures working group,” | \n",
+ " | \n",
+ " Recognize campaigns from weak signals, includi... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Dalton19 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00088 - Revitalize an “active measures workin... | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 88 | \n",
+ " F00089 | \n",
+ " target/name/flag \"grey zone\" website content | \n",
+ " | \n",
+ " \"Gray zone\" is second level of content produce... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Rand2237 | \n",
+ " | \n",
+ " TA04 Develop Networks | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00089 - target/name/flag \"grey zone\" website ... | \n",
+ " TA04 | \n",
+ " Develop Networks | \n",
+ "
\n",
+ " \n",
+ " | 89 | \n",
+ " F00090 | \n",
+ " Match Punitive Tools with Third-Party Inducements | \n",
+ " | \n",
+ " Bring private sector and civil society into ac... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Hicks19 | \n",
+ " | \n",
+ " TA01 Strategic Planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00090 - Match Punitive Tools with Third-Party... | \n",
+ " TA01 | \n",
+ " Strategic Planning | \n",
+ "
\n",
+ " \n",
+ " | 90 | \n",
+ " F00091 | \n",
+ " Partner to develop analytic methods & tools | \n",
+ " | \n",
+ " This might include working with relevant techn... | \n",
+ " A001 data scientist,A024 developer | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Rand2237 | \n",
+ " | \n",
+ " TA01 Strategic Planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00091 - Partner to develop analytic methods &... | \n",
+ " TA01 | \n",
+ " Strategic Planning | \n",
+ "
\n",
+ " \n",
+ " | 91 | \n",
+ " F00092 | \n",
+ " daylight | \n",
+ " | \n",
+ " Warn social media companies about an ongoing c... | \n",
+ " A015 - general public | \n",
+ " R006 - disinformation datasets | \n",
+ " 2019-11-search | \n",
+ " | \n",
+ " I00002 | \n",
+ " TA09 Exposure | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00092 - daylight | \n",
+ " TA09 | \n",
+ " Exposure | \n",
+ "
\n",
+ " \n",
+ " | 92 | \n",
+ " F00093 | \n",
+ " S4d detection and re-allocation approaches | \n",
+ " M004 - friction | \n",
+ " S4D is a way to separate out different speaker... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D3 Disrupt | \n",
+ " | \n",
+ " T0011 - Hijack legitimate account | \n",
+ " F00093 - S4d detection and re-allocation appro... | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 93 | \n",
+ " F00094 | \n",
+ " Registries alert when large batches of newsy U... | \n",
+ " M003 - daylight | \n",
+ " | \n",
+ " A028 - platform administrator | \n",
+ " | \n",
+ " grugq | \n",
+ " | \n",
+ " | \n",
+ " TA07 Channel Selection | \n",
+ " D2 Deny | \n",
+ " | \n",
+ " T0013 - Create fake websites\\nT0008 - Create f... | \n",
+ " F00094 - Registries alert when large batches o... | \n",
+ " TA07 | \n",
+ " Channel Selection | \n",
+ "
\n",
+ " \n",
+ "\n",
+ ""
+ ],
+ "text/plain": [
+ " amitt_id name \\\n",
+ "0 F00001 Analyse aborted / failed campaigns \n",
+ "1 F00002 Analyse viral fizzle \n",
+ "2 F00003 Exploit counter-intelligence vs bad actors \n",
+ "3 F00004 Recruit like-minded converts \"people who used ... \n",
+ "4 F00005 SWOT Analysis of Cognition in Various Groups \n",
+ "5 F00006 SWOT analysis of tech platforms \n",
+ "6 F00007 Monitor account level activity in social networks \n",
+ "7 F00008 Detect abnormal amplification \n",
+ "8 F00009 Detect abnormal events \n",
+ "9 F00010 Detect abnormal groups \n",
+ "10 F00011 Detect abnormal pages \n",
+ "11 F00012 Detect abnormal profiles, e.g. prolific pages/... \n",
+ "12 F00013 Identify fake news sites \n",
+ "13 F00014 Trace connections \n",
+ "14 F00015 Detect anomalies in membership growth patterns \n",
+ "15 F00016 Identify fence-sitters \n",
+ "16 F00017 Measure emotional valence \n",
+ "17 F00018 Follow the money \n",
+ "18 F00019 Activity resurgence detection (alarm when dorm... \n",
+ "19 F00020 Detect anomalous activity \n",
+ "20 F00021 AI/ML automated early detection of campaign pl... \n",
+ "21 F00022 Digital authority - regulating body (united st... \n",
+ "22 F00023 Periodic verification (counter to hijack legit... \n",
+ "23 F00024 Teach civics to kids/ adults/ seniors \n",
+ "24 F00025 Boots-on-the-ground early narrative detection \n",
+ "25 F00026 Language anomoly detection \n",
+ "26 F00027 Unlikely correlation of sentiment on same topics \n",
+ "27 F00028 Associate a public key signature with governme... \n",
+ "28 F00029 Detect proto narratives, i.e. RT, Sputnik \n",
+ "29 F00030 Early detection and warning - reporting of sus... \n",
+ "30 F00031 Educate on how to identify information pollution \n",
+ "31 F00032 Educate on how to identify to pollution \n",
+ "32 F00033 Fake websites: add transparency on business model \n",
+ "33 F00034 Flag the information spaces so people know abo... \n",
+ "34 F00035 Identify repeated narrative DNA \n",
+ "35 F00036 Looking for AB testing in unregulated channels \n",
+ "36 F00037 News content provenance certification. \n",
+ "37 F00038 Social capital as attack vector \n",
+ "38 F00039 standards to track image/ video deep fakes - i... \n",
+ "39 F00040 Unalterable metadata signature on origins of i... \n",
+ "40 F00041 Bias detection \n",
+ "41 F00042 Categorize polls by intent \n",
+ "42 F00043 Monitor for creation of fake known personas \n",
+ "43 F00044 Forensic analysis \n",
+ "44 F00045 Forensic linguistic analysis \n",
+ "45 F00046 Pump priming analytics \n",
+ "46 F00047 trace involved parties \n",
+ "47 F00048 Trace known operations and connection \n",
+ "48 F00049 trace money \n",
+ "49 F00050 Web cache analytics \n",
+ "50 F00051 Challenge expertise \n",
+ "51 F00052 Discover sponsors \n",
+ "52 F00053 Government rumour control office (what can we ... \n",
+ "53 F00054 Restrict people who can @ you on social networks \n",
+ "54 F00055 Verify credentials \n",
+ "55 F00056 Verify organisation legitimacy \n",
+ "56 F00057 Verify personal credentials of experts \n",
+ "57 F00058 Deplatform (cancel culture) \n",
+ "58 F00059 Identify susceptible demographics \n",
+ "59 F00060 Identify susceptible influencers \n",
+ "60 F00061 Microtargeting \n",
+ "61 F00062 Detect when Dormant account turns active \n",
+ "62 F00063 Linguistic change analysis \n",
+ "63 F00064 Monitor reports of account takeover \n",
+ "64 F00065 Sentiment change analysis \n",
+ "65 F00066 Use language errors, time to respond to accoun... \n",
+ "66 F00067 Data forensics \n",
+ "67 F00068 Resonance analysis \n",
+ "68 F00069 Track Russian media and develop analytic methods. \n",
+ "69 F00070 Full spectrum analytics \n",
+ "70 F00071 Network analysis Identify/cultivate/support in... \n",
+ "71 F00072 network analysis to identify central users in ... \n",
+ "72 F00073 collect intel/recon on black/covert content cr... \n",
+ "73 F00074 identify relevant fence-sitter communities \n",
+ "74 F00075 leverage open-source information \n",
+ "75 F00076 Monitor/collect audience engagement data conne... \n",
+ "76 F00077 Model for bot account behavior \n",
+ "77 F00078 Monitor account level activity in social networks \n",
+ "78 F00079 Network anomaly detection \n",
+ "79 F00080 Hack the polls/ content yourself \n",
+ "80 F00081 Need way for end user to report operations \n",
+ "81 F00082 Control the US \"slang\" translation boards \n",
+ "82 F00083 Build and own meme generator, then track and w... \n",
+ "83 F00084 Track individual bad actors \n",
+ "84 F00085 detection of a weak signal through global noise \n",
+ "85 F00086 Outpace Competitor Intelligence Capabilities \n",
+ "86 F00087 Improve Indications and Warning \n",
+ "87 F00088 Revitalize an “active measures working group,” \n",
+ "88 F00089 target/name/flag \"grey zone\" website content \n",
+ "89 F00090 Match Punitive Tools with Third-Party Inducements \n",
+ "90 F00091 Partner to develop analytic methods & tools \n",
+ "91 F00092 daylight \n",
+ "92 F00093 S4d detection and re-allocation approaches \n",
+ "93 F00094 Registries alert when large batches of newsy U... \n",
+ "\n",
+ " metatechnique summary \\\n",
+ "0 Examine failed campaigns. How did they fail? C... \n",
+ "1 \n",
+ "2 \n",
+ "3 \n",
+ "4 \n",
+ "5 \n",
+ "6 \n",
+ "7 \n",
+ "8 \n",
+ "9 \n",
+ "10 \n",
+ "11 \n",
+ "12 \n",
+ "13 for e.g. fake news sites \n",
+ "14 I include Fake Experts as they may use funding... \n",
+ "15 Note: In each case, depending on the platform ... \n",
+ "16 \n",
+ "17 track funding sources \n",
+ "18 \n",
+ "19 \n",
+ "20 \n",
+ "21 \n",
+ "22 \n",
+ "23 \n",
+ "24 \n",
+ "25 \n",
+ "26 \n",
+ "27 \n",
+ "28 \n",
+ "29 \n",
+ "30 Strategic planning included as innoculating po... \n",
+ "31 DUPLICATE - DELETE \n",
+ "32 \n",
+ "33 \n",
+ "34 \n",
+ "35 \n",
+ "36 Original Comment: Shortcomings: intentional fa... \n",
+ "37 Unsure I understood the original intention or ... \n",
+ "38 \n",
+ "39 \n",
+ "40 Not technically left of boom \n",
+ "41 Use T00029, but against the creators \n",
+ "42 Platform companies and some information securi... \n",
+ "43 Can be used in all phases for all techniques. \n",
+ "44 Can be used in all phases for all techniques. \n",
+ "45 \n",
+ "46 \n",
+ "47 \n",
+ "48 \n",
+ "49 \n",
+ "50 \n",
+ "51 Discovering the sponsors behind a campaign, na... \n",
+ "52 \n",
+ "53 \n",
+ "54 \n",
+ "55 \n",
+ "56 \n",
+ "57 *Deplatform People: This technique needs to be... \n",
+ "58 All techniques provide or are susceptible to b... \n",
+ "59 I assume this was a transcript error. Otherwis... \n",
+ "60 \n",
+ "61 \n",
+ "62 \n",
+ "63 \n",
+ "64 \n",
+ "65 \n",
+ "66 \n",
+ "67 a developing methodology for identifying stati... \n",
+ "68 To effectively counter Russian propaganda, it ... \n",
+ "69 \n",
+ "70 Local influencers detected via Twitter network... \n",
+ "71 It is possible that some of these are bots or ... \n",
+ "72 Players at the level of covert attribution, re... \n",
+ "73 brand ambassador programs could be used with i... \n",
+ "74 significant amounts of quality open-source inf... \n",
+ "75 Target audience connected to \"useful idiots ra... \n",
+ "76 Bot account: action based, people. Unsure whic... \n",
+ "77 All techniques benefit from careful analysis a... \n",
+ "78 \n",
+ "79 Two wrongs don't make a right? But if you hack... \n",
+ "80 \n",
+ "81 \n",
+ "82 \n",
+ "83 \n",
+ "84 Gray zone threats are challenging given that w... \n",
+ "85 Develop an intelligence-based understanding of... \n",
+ "86 United States has not adequately adapted its i... \n",
+ "87 Recognize campaigns from weak signals, includi... \n",
+ "88 \"Gray zone\" is second level of content produce... \n",
+ "89 Bring private sector and civil society into ac... \n",
+ "90 This might include working with relevant techn... \n",
+ "91 Warn social media companies about an ongoing c... \n",
+ "92 M004 - friction S4D is a way to separate out different speaker... \n",
+ "93 M003 - daylight \n",
+ "\n",
+ " actors \\\n",
+ "0 \n",
+ "1 \n",
+ "2 \n",
+ "3 \n",
+ "4 \n",
+ "5 \n",
+ "6 \n",
+ "7 \n",
+ "8 \n",
+ "9 \n",
+ "10 \n",
+ "11 \n",
+ "12 \n",
+ "13 \n",
+ "14 \n",
+ "15 \n",
+ "16 \n",
+ "17 \n",
+ "18 \n",
+ "19 A015 - general public,A001 - data scientist,A0... \n",
+ "20 \n",
+ "21 \n",
+ "22 \n",
+ "23 \n",
+ "24 \n",
+ "25 \n",
+ "26 \n",
+ "27 \n",
+ "28 \n",
+ "29 \n",
+ "30 \n",
+ "31 \n",
+ "32 \n",
+ "33 \n",
+ "34 \n",
+ "35 \n",
+ "36 \n",
+ "37 \n",
+ "38 \n",
+ "39 \n",
+ "40 \n",
+ "41 \n",
+ "42 A031 - social media platform administrator,A01... \n",
+ "43 \n",
+ "44 \n",
+ "45 \n",
+ "46 \n",
+ "47 \n",
+ "48 \n",
+ "49 \n",
+ "50 \n",
+ "51 \n",
+ "52 \n",
+ "53 \n",
+ "54 \n",
+ "55 \n",
+ "56 \n",
+ "57 \n",
+ "58 \n",
+ "59 \n",
+ "60 \n",
+ "61 \n",
+ "62 \n",
+ "63 \n",
+ "64 \n",
+ "65 \n",
+ "66 A001 - data scientist \n",
+ "67 \n",
+ "68 \n",
+ "69 A001 - data scientist \n",
+ "70 A001 - data scientist \n",
+ "71 A001 - data scientist \n",
+ "72 \n",
+ "73 \n",
+ "74 \n",
+ "75 \n",
+ "76 \n",
+ "77 \n",
+ "78 A001 - data scientist \n",
+ "79 A015 - general public \n",
+ "80 \n",
+ "81 A028 - platform administrator \n",
+ "82 \n",
+ "83 \n",
+ "84 \n",
+ "85 \n",
+ "86 \n",
+ "87 \n",
+ "88 \n",
+ "89 \n",
+ "90 A001 data scientist,A024 developer \n",
+ "91 A015 - general public \n",
+ "92 \n",
+ "93 A028 - platform administrator \n",
+ "\n",
+ " resources_needed how_found references \\\n",
+ "0 2019-11-workshop \n",
+ "1 2019-11-workshop \n",
+ "2 2019-11-workshop \n",
+ "3 2019-11-workshop \n",
+ "4 2019-11-workshop \n",
+ "5 2019-11-workshop \n",
+ "6 2019-11-workshop \n",
+ "7 2019-11-workshop \n",
+ "8 2019-11-workshop \n",
+ "9 2019-11-workshop \n",
+ "10 2019-11-workshop \n",
+ "11 2019-11-workshop \n",
+ "12 2019-11-workshop \n",
+ "13 2019-11-workshop \n",
+ "14 2019-11-workshop \n",
+ "15 2019-11-workshop \n",
+ "16 2019-11-workshop \n",
+ "17 2019-11-workshop \n",
+ "18 2019-11-workshop \n",
+ "19 R004 - platform algorithms 2019-11-workshop \n",
+ "20 2019-11-workshop \n",
+ "21 2019-11-workshop \n",
+ "22 2019-11-workshop \n",
+ "23 2019-11-workshop \n",
+ "24 2019-11-workshop \n",
+ "25 2019-11-workshop \n",
+ "26 2019-11-workshop \n",
+ "27 2019-11-workshop \n",
+ "28 2019-11-workshop \n",
+ "29 2019-11-workshop \n",
+ "30 2019-11-workshop \n",
+ "31 2019-11-workshop \n",
+ "32 2019-11-workshop \n",
+ "33 2019-11-workshop \n",
+ "34 2019-11-workshop \n",
+ "35 2019-11-workshop \n",
+ "36 2019-11-workshop \n",
+ "37 2019-11-workshop \n",
+ "38 2019-11-workshop \n",
+ "39 2019-11-workshop \n",
+ "40 2019-11-workshop \n",
+ "41 2019-11-workshop \n",
+ "42 2019-11-workshop \n",
+ "43 2019-11-workshop \n",
+ "44 2019-11-workshop \n",
+ "45 2019-11-workshop \n",
+ "46 2019-11-workshop \n",
+ "47 2019-11-workshop \n",
+ "48 2019-11-workshop \n",
+ "49 2019-11-workshop \n",
+ "50 2019-11-workshop \n",
+ "51 2019-11-workshop \n",
+ "52 2019-11-workshop \n",
+ "53 2019-11-workshop \n",
+ "54 2019-11-workshop \n",
+ "55 2019-11-workshop \n",
+ "56 2019-11-workshop \n",
+ "57 2019-11-workshop \n",
+ "58 2019-11-workshop \n",
+ "59 2019-11-workshop \n",
+ "60 2019-11-workshop \n",
+ "61 2019-11-workshop \n",
+ "62 2019-11-workshop \n",
+ "63 2019-11-workshop \n",
+ "64 2019-11-workshop \n",
+ "65 2019-11-workshop \n",
+ "66 2019-11-search \n",
+ "67 2019-11-search Rand2237 \n",
+ "68 2019-11-search Rand2237 \n",
+ "69 2019-11-workshop \n",
+ "70 2019-11-search Rand2237 \n",
+ "71 2019-11-search Rand2237 \n",
+ "72 2019-11-search Rand2237 \n",
+ "73 2019-11-search Rand2237 \n",
+ "74 2019-11-search Dalton19 \n",
+ "75 2019-11-search Rand2237 \n",
+ "76 2019-11-workshop \n",
+ "77 2019-11-workshop \n",
+ "78 2019-11-workshop \n",
+ "79 2019-11-workshop \n",
+ "80 2019-11-workshop \n",
+ "81 R005 - slang translation 2019-11-workshop \n",
+ "82 2019-11-workshop \n",
+ "83 2019-11-workshop \n",
+ "84 2019-11-search Dalton19 \n",
+ "85 2019-11-search Hicks19 \n",
+ "86 2019-11-search Hicks19 \n",
+ "87 2019-11-search Dalton19 \n",
+ "88 2019-11-search Rand2237 \n",
+ "89 2019-11-search Hicks19 \n",
+ "90 2019-11-search Rand2237 \n",
+ "91 R006 - disinformation datasets 2019-11-search \n",
+ "92 2019-11-workshop \n",
+ "93 grugq \n",
+ "\n",
+ " incidents tactic responsetype \\\n",
+ "0 TA01 Strategic Planning D1 Detect \n",
+ "1 TA01 Strategic Planning D1 Detect \n",
+ "2 TA01 Strategic Planning D1 Detect \n",
+ "3 TA01 Strategic Planning D1 Detect \n",
+ "4 TA01 Strategic Planning D1 Detect \n",
+ "5 TA01 Strategic Planning D1 Detect \n",
+ "6 TA02 Objective Planning D1 Detect \n",
+ "7 TA03 Develop People D1 Detect \n",
+ "8 TA03 Develop People D1 Detect \n",
+ "9 TA03 Develop People D1 Detect \n",
+ "10 TA03 Develop People D1 Detect \n",
+ "11 TA03 Develop People D1 Detect \n",
+ "12 TA03 Develop People D1 Detect \n",
+ "13 TA03 Develop People D1 Detect \n",
+ "14 TA03 Develop People D1 Detect \n",
+ "15 TA03 Develop People D1 Detect \n",
+ "16 TA03 Develop People D1 Detect \n",
+ "17 TA03 Develop People D1 Detect \n",
+ "18 TA04 Develop Networks D1 Detect \n",
+ "19 TA04 Develop Networks D1 Detect \n",
+ "20 TA04 Develop Networks D1 Detect \n",
+ "21 TA04 Develop Networks D1 Detect \n",
+ "22 TA04 Develop Networks D1 Detect \n",
+ "23 TA04 Develop Networks D1 Detect \n",
+ "24 TA05 Microtargeting D1 Detect \n",
+ "25 TA05 Microtargeting D1 Detect \n",
+ "26 TA05 Microtargeting D1 Detect \n",
+ "27 TA06 Develop Content D1 Detect \n",
+ "28 TA06 Develop Content D1 Detect \n",
+ "29 TA06 Develop Content D1 Detect \n",
+ "30 TA06 Develop Content D1 Detect \n",
+ "31 TA06 Develop Content D1 Detect \n",
+ "32 TA06 Develop Content D1 Detect \n",
+ "33 TA06 Develop Content D1 Detect \n",
+ "34 TA06 Develop Content D1 Detect \n",
+ "35 TA06 Develop Content D1 Detect \n",
+ "36 TA06 Develop Content D1 Detect \n",
+ "37 TA06 Develop Content D1 Detect \n",
+ "38 TA06 Develop Content D1 Detect \n",
+ "39 TA06 Develop Content D1 Detect \n",
+ "40 TA07 Channel Selection D1 Detect \n",
+ "41 TA07 Channel Selection D1 Detect \n",
+ "42 TA07 Channel Selection D1 Detect \n",
+ "43 TA08 Pump Priming D1 Detect \n",
+ "44 TA08 Pump Priming D1 Detect \n",
+ "45 TA08 Pump Priming D1 Detect \n",
+ "46 TA08 Pump Priming D1 Detect \n",
+ "47 TA08 Pump Priming D1 Detect \n",
+ "48 TA08 Pump Priming D1 Detect \n",
+ "49 TA08 Pump Priming D1 Detect \n",
+ "50 TA09 Exposure D1 Detect \n",
+ "51 TA09 Exposure D1 Detect \n",
+ "52 TA09 Exposure D1 Detect \n",
+ "53 TA09 Exposure D1 Detect \n",
+ "54 TA09 Exposure D1 Detect \n",
+ "55 TA09 Exposure D1 Detect \n",
+ "56 TA09 Exposure D1 Detect \n",
+ "57 TA10 Go Physical D1 Detect \n",
+ "58 TA10 Go Physical D1 Detect \n",
+ "59 TA10 Go Physical D1 Detect \n",
+ "60 TA10 Go Physical D1 Detect \n",
+ "61 TA11 Persistence D1 Detect \n",
+ "62 TA11 Persistence D1 Detect \n",
+ "63 TA11 Persistence D1 Detect \n",
+ "64 TA11 Persistence D1 Detect \n",
+ "65 TA11 Persistence D1 Detect \n",
+ "66 I00029,I00045 D1 Detect \n",
+ "67 D1 Detect \n",
+ "68 D1 Detect \n",
+ "69 ALL D1 Detect \n",
+ "70 D1 Detect \n",
+ "71 D1 Detect \n",
+ "72 D1 Detect \n",
+ "73 D1 Detect \n",
+ "74 D1 Detect \n",
+ "75 D1 Detect \n",
+ "76 TA03 Develop People D1 Detect \n",
+ "77 TA03 Develop People D1 Detect \n",
+ "78 TA05 Microtargeting D1 Detect \n",
+ "79 TA07 Channel Selection D1 Detect \n",
+ "80 TA09 Exposure D1 Detect \n",
+ "81 TA11 Persistence D3 Disrupt \n",
+ "82 TA11 Persistence D5 Deceive \n",
+ "83 TA03 Develop People D1 Detect \n",
+ "84 \n",
+ "85 TA02 Objective planning D1 Detect \n",
+ "86 D1 Detect \n",
+ "87 D1 Detect \n",
+ "88 TA04 Develop Networks D1 Detect \n",
+ "89 TA01 Strategic Planning D1 Detect \n",
+ "90 TA01 Strategic Planning D1 Detect \n",
+ "91 I00002 TA09 Exposure D1 Detect \n",
+ "92 TA03 Develop People D3 Disrupt \n",
+ "93 TA07 Channel Selection D2 Deny \n",
+ "\n",
+ " notes \\\n",
+ "0 \n",
+ "1 \n",
+ "2 \n",
+ "3 \n",
+ "4 \n",
+ "5 \n",
+ "6 \n",
+ "7 \n",
+ "8 \n",
+ "9 \n",
+ "10 \n",
+ "11 \n",
+ "12 \n",
+ "13 \n",
+ "14 \n",
+ "15 \n",
+ "16 \n",
+ "17 \n",
+ "18 \n",
+ "19 \n",
+ "20 Automated Detection of Campaign \n",
+ "21 \n",
+ "22 \n",
+ "23 \n",
+ "24 \n",
+ "25 \n",
+ "26 \n",
+ "27 \n",
+ "28 \n",
+ "29 \n",
+ "30 \n",
+ "31 \n",
+ "32 \n",
+ "33 \n",
+ "34 \n",
+ "35 \n",
+ "36 \n",
+ "37 \n",
+ "38 \n",
+ "39 \n",
+ "40 \n",
+ "41 \n",
+ "42 \n",
+ "43 \n",
+ "44 \n",
+ "45 \n",
+ "46 \n",
+ "47 \n",
+ "48 \n",
+ "49 \n",
+ "50 \n",
+ "51 \n",
+ "52 \n",
+ "53 \n",
+ "54 \n",
+ "55 \n",
+ "56 \n",
+ "57 \n",
+ "58 \n",
+ "59 \n",
+ "60 \n",
+ "61 \n",
+ "62 \n",
+ "63 \n",
+ "64 \n",
+ "65 \n",
+ "66 \n",
+ "67 \n",
+ "68 \n",
+ "69 \n",
+ "70 \n",
+ "71 \n",
+ "72 \n",
+ "73 \n",
+ "74 \n",
+ "75 \n",
+ "76 \n",
+ "77 \n",
+ "78 \n",
+ "79 \n",
+ "80 \n",
+ "81 \n",
+ "82 \n",
+ "83 \n",
+ "84 \n",
+ "85 \n",
+ "86 \n",
+ "87 \n",
+ "88 \n",
+ "89 \n",
+ "90 \n",
+ "91 \n",
+ "92 \n",
+ "93 \n",
+ "\n",
+ " techniques \\\n",
+ "0 All \n",
+ "1 T0049 - Flooding\\nT0052 - Tertiary sites ampli... \n",
+ "2 TA06 - Develop Content\\nTA08 - Pump Priming\\nT... \n",
+ "3 T0057 - Organise remote rallies and events\\nT0... \n",
+ "4 All \n",
+ "5 TA05 - Microtargeting\\nTA07 - Channel Selectio... \n",
+ "6 All \n",
+ "7 T0052 - Tertiary sites amplify news\\nT0053 - T... \n",
+ "8 T0007 - Create fake Social Media Profiles / Pa... \n",
+ "9 T0007 - Create fake Social Media Profiles / Pa... \n",
+ "10 T0007 - Create fake Social Media Profiles / Pa... \n",
+ "11 T0007 - Create fake Social Media Profiles / Pa... \n",
+ "12 T0008 \n",
+ "13 T0008 \n",
+ "14 TA07 - Channel Selection\\n\\nT0007 - Create fak... \n",
+ "15 TA08 - Pump Priming\\nTA09 - Exposure\\nTA10 - G... \n",
+ "16 T0001 - 5Ds (dismiss, distort, distract, disma... \n",
+ "17 T0009 \n",
+ "18 T0011 - Hijack accounts \n",
+ "19 T0011 - Hijack accounts \n",
+ "20 TA03 - Develop People\\nTA04 - Develop Networks... \n",
+ "21 \n",
+ "22 T0011 - Hijack accounts \n",
+ "23 \n",
+ "24 TA01 - Strategic Planning\\nTA02 - Objective Pl... \n",
+ "25 \n",
+ "26 \n",
+ "27 T0025 - Leak altered documents \n",
+ "28 TA01 - Strategic Planning\\n\\nT0006 - Create Ma... \n",
+ "29 TA03 - Develop People\\nTA04 - Develop Networks... \n",
+ "30 TA01 - Strategic Planning\\n\\nT0019 - Generate ... \n",
+ "31 DUPLICATE - DELETE \n",
+ "32 T0013 - Create fake websites \n",
+ "33 T0049 - Flooding \n",
+ "34 TA01 - Strategic Planning\\n\\nT0006 - Create Ma... \n",
+ "35 T0020 - Trial content \n",
+ "36 TA01 - Strategic Planning* (non-existent techn... \n",
+ "37 T0010 - Cultivate ignorant agents\\nT0039 - Bai... \n",
+ "38 T0024 - Create fake videos and images \n",
+ "39 T0024 - Create fake videos and images \n",
+ "40 T00029 \n",
+ "41 T00029 \n",
+ "42 T00030 \n",
+ "43 All \n",
+ "44 All \n",
+ "45 TA08 - Pump Priming \n",
+ "46 \n",
+ "47 \n",
+ "48 \n",
+ "49 \n",
+ "50 T0009 - Create fake experts\\nT0045 - Use fake ... \n",
+ "51 All \n",
+ "52 T0049\\nT0050\\nT0052\\nT0053\\nT0054\\nT0055\\nT0056 \n",
+ "53 \n",
+ "54 \n",
+ "55 \n",
+ "56 \n",
+ "57 TA07 - Channel Selection\\nTA09 - Exposure\\nTA1... \n",
+ "58 All \n",
+ "59 T0039 - Bait legitimate influencers \n",
+ "60 All \n",
+ "61 TA09 - Exposure\\n\\nT0007 - Create fake Social ... \n",
+ "62 \n",
+ "63 T0011 - Hijack legitimate account \n",
+ "64 \n",
+ "65 \n",
+ "66 \n",
+ "67 \n",
+ "68 \n",
+ "69 \n",
+ "70 \n",
+ "71 \n",
+ "72 \n",
+ "73 \n",
+ "74 \n",
+ "75 \n",
+ "76 \n",
+ "77 All \n",
+ "78 T0029 - Manipulate online polls\\nT0047 - Muzzl... \n",
+ "79 T0029 - Manipulate online polls \n",
+ "80 T0049\\nT0050\\nT0052\\nT0053\\nT0054\\nT0055\\nT0056 \n",
+ "81 \n",
+ "82 T0012 - Use concealment\\nT0021 - Memes \n",
+ "83 \n",
+ "84 \n",
+ "85 \n",
+ "86 \n",
+ "87 \n",
+ "88 \n",
+ "89 \n",
+ "90 \n",
+ "91 \n",
+ "92 T0011 - Hijack legitimate account \n",
+ "93 T0013 - Create fake websites\\nT0008 - Create f... \n",
+ "\n",
+ " longname tactic_id \\\n",
+ "0 F00001 - Analyse aborted / failed campaigns TA01 \n",
+ "1 F00002 - Analyse viral fizzle TA01 \n",
+ "2 F00003 - Exploit counter-intelligence vs bad a... TA01 \n",
+ "3 F00004 - Recruit like-minded converts \"people ... TA01 \n",
+ "4 F00005 - SWOT Analysis of Cognition in Various... TA01 \n",
+ "5 F00006 - SWOT analysis of tech platforms TA01 \n",
+ "6 F00007 - Monitor account level activity in soc... TA02 \n",
+ "7 F00008 - Detect abnormal amplification TA03 \n",
+ "8 F00009 - Detect abnormal events TA03 \n",
+ "9 F00010 - Detect abnormal groups TA03 \n",
+ "10 F00011 - Detect abnormal pages TA03 \n",
+ "11 F00012 - Detect abnormal profiles, e.g. prolif... TA03 \n",
+ "12 F00013 - Identify fake news sites TA03 \n",
+ "13 F00014 - Trace connections TA03 \n",
+ "14 F00015 - Detect anomalies in membership growth... TA03 \n",
+ "15 F00016 - Identify fence-sitters TA03 \n",
+ "16 F00017 - Measure emotional valence TA03 \n",
+ "17 F00018 - Follow the money TA03 \n",
+ "18 F00019 - Activity resurgence detection (alarm ... TA04 \n",
+ "19 F00020 - Detect anomalous activity TA04 \n",
+ "20 F00021 - AI/ML automated early detection of ca... TA04 \n",
+ "21 F00022 - Digital authority - regulating body (... TA04 \n",
+ "22 F00023 - Periodic verification (counter to hij... TA04 \n",
+ "23 F00024 - Teach civics to kids/ adults/ seniors TA04 \n",
+ "24 F00025 - Boots-on-the-ground early narrative d... TA05 \n",
+ "25 F00026 - Language anomoly detection TA05 \n",
+ "26 F00027 - Unlikely correlation of sentiment on ... TA05 \n",
+ "27 F00028 - Associate a public key signature with... TA06 \n",
+ "28 F00029 - Detect proto narratives, i.e. RT, Spu... TA06 \n",
+ "29 F00030 - Early detection and warning - reporti... TA06 \n",
+ "30 F00031 - Educate on how to identify informatio... TA06 \n",
+ "31 F00032 - Educate on how to identify to pollution TA06 \n",
+ "32 F00033 - Fake websites: add transparency on bu... TA06 \n",
+ "33 F00034 - Flag the information spaces so people... TA06 \n",
+ "34 F00035 - Identify repeated narrative DNA TA06 \n",
+ "35 F00036 - Looking for AB testing in unregulated... TA06 \n",
+ "36 F00037 - News content provenance certification. TA06 \n",
+ "37 F00038 - Social capital as attack vector TA06 \n",
+ "38 F00039 - standards to track image/ video deep ... TA06 \n",
+ "39 F00040 - Unalterable metadata signature on ori... TA06 \n",
+ "40 F00041 - Bias detection TA07 \n",
+ "41 F00042 - Categorize polls by intent TA07 \n",
+ "42 F00043 - Monitor for creation of fake known pe... TA07 \n",
+ "43 F00044 - Forensic analysis TA08 \n",
+ "44 F00045 - Forensic linguistic analysis TA08 \n",
+ "45 F00046 - Pump priming analytics TA08 \n",
+ "46 F00047 - trace involved parties TA08 \n",
+ "47 F00048 - Trace known operations and connection TA08 \n",
+ "48 F00049 - trace money TA08 \n",
+ "49 F00050 - Web cache analytics TA08 \n",
+ "50 F00051 - Challenge expertise TA09 \n",
+ "51 F00052 - Discover sponsors TA09 \n",
+ "52 F00053 - Government rumour control office (wha... TA09 \n",
+ "53 F00054 - Restrict people who can @ you on soci... TA09 \n",
+ "54 F00055 - Verify credentials TA09 \n",
+ "55 F00056 - Verify organisation legitimacy TA09 \n",
+ "56 F00057 - Verify personal credentials of experts TA09 \n",
+ "57 F00058 - Deplatform (cancel culture) TA10 \n",
+ "58 F00059 - Identify susceptible demographics TA10 \n",
+ "59 F00060 - Identify susceptible influencers TA10 \n",
+ "60 F00061 - Microtargeting TA10 \n",
+ "61 F00062 - Detect when Dormant account turns active TA11 \n",
+ "62 F00063 - Linguistic change analysis TA11 \n",
+ "63 F00064 - Monitor reports of account takeover TA11 \n",
+ "64 F00065 - Sentiment change analysis TA11 \n",
+ "65 F00066 - Use language errors, time to respond ... TA11 \n",
+ "66 F00067 - Data forensics \n",
+ "67 F00068 - Resonance analysis \n",
+ "68 F00069 - Track Russian media and develop analy... \n",
+ "69 F00070 - Full spectrum analytics ALL \n",
+ "70 F00071 - Network analysis Identify/cultivate/s... \n",
+ "71 F00072 - network analysis to identify central ... \n",
+ "72 F00073 - collect intel/recon on black/covert c... \n",
+ "73 F00074 - identify relevant fence-sitter commun... \n",
+ "74 F00075 - leverage open-source information \n",
+ "75 F00076 - Monitor/collect audience engagement d... \n",
+ "76 F00077 - Model for bot account behavior TA03 \n",
+ "77 F00078 - Monitor account level activity in soc... TA03 \n",
+ "78 F00079 - Network anomaly detection TA05 \n",
+ "79 F00080 - Hack the polls/ content yourself TA07 \n",
+ "80 F00081 - Need way for end user to report opera... TA09 \n",
+ "81 F00082 - Control the US \"slang\" translation bo... TA11 \n",
+ "82 F00083 - Build and own meme generator, then tr... TA11 \n",
+ "83 F00084 - Track individual bad actors TA03 \n",
+ "84 F00085 - detection of a weak signal through gl... \n",
+ "85 F00086 - Outpace Competitor Intelligence Capab... TA02 \n",
+ "86 F00087 - Improve Indications and Warning \n",
+ "87 F00088 - Revitalize an “active measures workin... \n",
+ "88 F00089 - target/name/flag \"grey zone\" website ... TA04 \n",
+ "89 F00090 - Match Punitive Tools with Third-Party... TA01 \n",
+ "90 F00091 - Partner to develop analytic methods &... TA01 \n",
+ "91 F00092 - daylight TA09 \n",
+ "92 F00093 - S4d detection and re-allocation appro... TA03 \n",
+ "93 F00094 - Registries alert when large batches o... TA07 \n",
+ "\n",
+ " tactic_name \n",
+ "0 Strategic Planning \n",
+ "1 Strategic Planning \n",
+ "2 Strategic Planning \n",
+ "3 Strategic Planning \n",
+ "4 Strategic Planning \n",
+ "5 Strategic Planning \n",
+ "6 Objective Planning \n",
+ "7 Develop People \n",
+ "8 Develop People \n",
+ "9 Develop People \n",
+ "10 Develop People \n",
+ "11 Develop People \n",
+ "12 Develop People \n",
+ "13 Develop People \n",
+ "14 Develop People \n",
+ "15 Develop People \n",
+ "16 Develop People \n",
+ "17 Develop People \n",
+ "18 Develop Networks \n",
+ "19 Develop Networks \n",
+ "20 Develop Networks \n",
+ "21 Develop Networks \n",
+ "22 Develop Networks \n",
+ "23 Develop Networks \n",
+ "24 Microtargeting \n",
+ "25 Microtargeting \n",
+ "26 Microtargeting \n",
+ "27 Develop Content \n",
+ "28 Develop Content \n",
+ "29 Develop Content \n",
+ "30 Develop Content \n",
+ "31 Develop Content \n",
+ "32 Develop Content \n",
+ "33 Develop Content \n",
+ "34 Develop Content \n",
+ "35 Develop Content \n",
+ "36 Develop Content \n",
+ "37 Develop Content \n",
+ "38 Develop Content \n",
+ "39 Develop Content \n",
+ "40 Channel Selection \n",
+ "41 Channel Selection \n",
+ "42 Channel Selection \n",
+ "43 Pump Priming \n",
+ "44 Pump Priming \n",
+ "45 Pump Priming \n",
+ "46 Pump Priming \n",
+ "47 Pump Priming \n",
+ "48 Pump Priming \n",
+ "49 Pump Priming \n",
+ "50 Exposure \n",
+ "51 Exposure \n",
+ "52 Exposure \n",
+ "53 Exposure \n",
+ "54 Exposure \n",
+ "55 Exposure \n",
+ "56 Exposure \n",
+ "57 Go Physical \n",
+ "58 Go Physical \n",
+ "59 Go Physical \n",
+ "60 Go Physical \n",
+ "61 Persistence \n",
+ "62 Persistence \n",
+ "63 Persistence \n",
+ "64 Persistence \n",
+ "65 Persistence \n",
+ "66 None \n",
+ "67 None \n",
+ "68 None \n",
+ "69 None \n",
+ "70 None \n",
+ "71 None \n",
+ "72 None \n",
+ "73 None \n",
+ "74 None \n",
+ "75 None \n",
+ "76 Develop People \n",
+ "77 Develop People \n",
+ "78 Microtargeting \n",
+ "79 Channel Selection \n",
+ "80 Exposure \n",
+ "81 Persistence \n",
+ "82 Persistence \n",
+ "83 Develop People \n",
+ "84 None \n",
+ "85 Objective planning \n",
+ "86 None \n",
+ "87 None \n",
+ "88 Develop Networks \n",
+ "89 Strategic Planning \n",
+ "90 Strategic Planning \n",
+ "91 Exposure \n",
+ "92 Develop People \n",
+ "93 Channel Selection "
+ ]
+ },
+ "execution_count": 3,
+ "metadata": {},
+ "output_type": "execute_result"
+ }
+ ],
+ "source": [
+ "vars(amitt)['df_detections']"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 3,
+ "metadata": {},
+ "outputs": [
+ {
+ "data": {
+ "text/html": [
+ "\n",
+ " \n",
+ " | 0 | \n",
+ " F00001 | \n",
+ " Analyse aborted / failed campaigns | \n",
+ " | \n",
+ " Examine failed campaigns. How did they fail? C... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA01 Strategic Planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " All | \n",
+ " F00001 - Analyse aborted / failed campaigns | \n",
+ " TA01 | \n",
+ " Strategic Planning | \n",
+ "
\n",
+ " \n",
+ " | 1 | \n",
+ " F00002 | \n",
+ " Analyse viral fizzle | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA01 Strategic Planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0049 - Flooding\\nT0052 - Tertiary sites ampli... | \n",
+ " F00002 - Analyse viral fizzle | \n",
+ " TA01 | \n",
+ " Strategic Planning | \n",
+ "
\n",
+ " \n",
+ " | 2 | \n",
+ " F00003 | \n",
+ " Exploit counter-intelligence vs bad actors | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA01 Strategic Planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA06 - Develop Content\\nTA08 - Pump Priming\\nT... | \n",
+ " F00003 - Exploit counter-intelligence vs bad a... | \n",
+ " TA01 | \n",
+ " Strategic Planning | \n",
+ "
\n",
+ " \n",
+ " | 3 | \n",
+ " F00004 | \n",
+ " Recruit like-minded converts \"people who used ... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA01 Strategic Planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0057 - Organise remote rallies and events\\nT0... | \n",
+ " F00004 - Recruit like-minded converts \"people ... | \n",
+ " TA01 | \n",
+ " Strategic Planning | \n",
+ "
\n",
+ " \n",
+ " | 4 | \n",
+ " F00005 | \n",
+ " SWOT Analysis of Cognition in Various Groups | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA01 Strategic Planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " All | \n",
+ " F00005 - SWOT Analysis of Cognition in Various... | \n",
+ " TA01 | \n",
+ " Strategic Planning | \n",
+ "
\n",
+ " \n",
+ " | 5 | \n",
+ " F00006 | \n",
+ " SWOT analysis of tech platforms | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA01 Strategic Planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA05 - Microtargeting\\nTA07 - Channel Selectio... | \n",
+ " F00006 - SWOT analysis of tech platforms | \n",
+ " TA01 | \n",
+ " Strategic Planning | \n",
+ "
\n",
+ " \n",
+ " | 6 | \n",
+ " F00007 | \n",
+ " Monitor account level activity in social networks | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA02 Objective Planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " All | \n",
+ " F00007 - Monitor account level activity in soc... | \n",
+ " TA02 | \n",
+ " Objective Planning | \n",
+ "
\n",
+ " \n",
+ " | 7 | \n",
+ " F00008 | \n",
+ " Detect abnormal amplification | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0052 - Tertiary sites amplify news\\nT0053 - T... | \n",
+ " F00008 - Detect abnormal amplification | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 8 | \n",
+ " F00009 | \n",
+ " Detect abnormal events | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0007 - Create fake Social Media Profiles / Pa... | \n",
+ " F00009 - Detect abnormal events | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 9 | \n",
+ " F00010 | \n",
+ " Detect abnormal groups | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0007 - Create fake Social Media Profiles / Pa... | \n",
+ " F00010 - Detect abnormal groups | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 10 | \n",
+ " F00011 | \n",
+ " Detect abnormal pages | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0007 - Create fake Social Media Profiles / Pa... | \n",
+ " F00011 - Detect abnormal pages | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 11 | \n",
+ " F00012 | \n",
+ " Detect abnormal profiles, e.g. prolific pages/... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0007 - Create fake Social Media Profiles / Pa... | \n",
+ " F00012 - Detect abnormal profiles, e.g. prolif... | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 12 | \n",
+ " F00013 | \n",
+ " Identify fake news sites | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0008 | \n",
+ " F00013 - Identify fake news sites | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 13 | \n",
+ " F00014 | \n",
+ " Trace connections | \n",
+ " | \n",
+ " for e.g. fake news sites | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0008 | \n",
+ " F00014 - Trace connections | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 14 | \n",
+ " F00015 | \n",
+ " Detect anomalies in membership growth patterns | \n",
+ " | \n",
+ " I include Fake Experts as they may use funding... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA07 - Channel Selection\\n\\nT0007 - Create fak... | \n",
+ " F00015 - Detect anomalies in membership growth... | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 15 | \n",
+ " F00016 | \n",
+ " Identify fence-sitters | \n",
+ " | \n",
+ " Note: In each case, depending on the platform ... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA08 - Pump Priming\\nTA09 - Exposure\\nTA10 - G... | \n",
+ " F00016 - Identify fence-sitters | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 16 | \n",
+ " F00017 | \n",
+ " Measure emotional valence | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0001 - 5Ds (dismiss, distort, distract, disma... | \n",
+ " F00017 - Measure emotional valence | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 17 | \n",
+ " F00018 | \n",
+ " Follow the money | \n",
+ " | \n",
+ " track funding sources | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0009 | \n",
+ " F00018 - Follow the money | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 18 | \n",
+ " F00019 | \n",
+ " Activity resurgence detection (alarm when dorm... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA04 Develop Networks | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0011 - Hijack accounts | \n",
+ " F00019 - Activity resurgence detection (alarm ... | \n",
+ " TA04 | \n",
+ " Develop Networks | \n",
+ "
\n",
+ " \n",
+ " | 19 | \n",
+ " F00020 | \n",
+ " Detect anomalous activity | \n",
+ " | \n",
+ " | \n",
+ " A015 - general public,A001 - data scientist,A0... | \n",
+ " R004 - platform algorithms | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA04 Develop Networks | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0011 - Hijack accounts | \n",
+ " F00020 - Detect anomalous activity | \n",
+ " TA04 | \n",
+ " Develop Networks | \n",
+ "
\n",
+ " \n",
+ " | 20 | \n",
+ " F00021 | \n",
+ " AI/ML automated early detection of campaign pl... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA04 Develop Networks | \n",
+ " D1 Detect | \n",
+ " Automated Detection of Campaign | \n",
+ " TA03 - Develop People\\nTA04 - Develop Networks... | \n",
+ " F00021 - AI/ML automated early detection of ca... | \n",
+ " TA04 | \n",
+ " Develop Networks | \n",
+ "
\n",
+ " \n",
+ " | 21 | \n",
+ " F00022 | \n",
+ " Digital authority - regulating body (united st... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA04 Develop Networks | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00022 - Digital authority - regulating body (... | \n",
+ " TA04 | \n",
+ " Develop Networks | \n",
+ "
\n",
+ " \n",
+ " | 22 | \n",
+ " F00023 | \n",
+ " Periodic verification (counter to hijack legit... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA04 Develop Networks | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0011 - Hijack accounts | \n",
+ " F00023 - Periodic verification (counter to hij... | \n",
+ " TA04 | \n",
+ " Develop Networks | \n",
+ "
\n",
+ " \n",
+ " | 23 | \n",
+ " F00024 | \n",
+ " Teach civics to kids/ adults/ seniors | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA04 Develop Networks | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00024 - Teach civics to kids/ adults/ seniors | \n",
+ " TA04 | \n",
+ " Develop Networks | \n",
+ "
\n",
+ " \n",
+ " | 24 | \n",
+ " F00025 | \n",
+ " Boots-on-the-ground early narrative detection | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA05 Microtargeting | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA01 - Strategic Planning\\nTA02 - Objective Pl... | \n",
+ " F00025 - Boots-on-the-ground early narrative d... | \n",
+ " TA05 | \n",
+ " Microtargeting | \n",
+ "
\n",
+ " \n",
+ " | 25 | \n",
+ " F00026 | \n",
+ " Language anomoly detection | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA05 Microtargeting | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00026 - Language anomoly detection | \n",
+ " TA05 | \n",
+ " Microtargeting | \n",
+ "
\n",
+ " \n",
+ " | 26 | \n",
+ " F00027 | \n",
+ " Unlikely correlation of sentiment on same topics | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA05 Microtargeting | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00027 - Unlikely correlation of sentiment on ... | \n",
+ " TA05 | \n",
+ " Microtargeting | \n",
+ "
\n",
+ " \n",
+ " | 27 | \n",
+ " F00028 | \n",
+ " Associate a public key signature with governme... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0025 - Leak altered documents | \n",
+ " F00028 - Associate a public key signature with... | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 28 | \n",
+ " F00029 | \n",
+ " Detect proto narratives, i.e. RT, Sputnik | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA01 - Strategic Planning\\n\\nT0006 - Create Ma... | \n",
+ " F00029 - Detect proto narratives, i.e. RT, Spu... | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 29 | \n",
+ " F00030 | \n",
+ " Early detection and warning - reporting of sus... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA03 - Develop People\\nTA04 - Develop Networks... | \n",
+ " F00030 - Early detection and warning - reporti... | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 30 | \n",
+ " F00031 | \n",
+ " Educate on how to identify information pollution | \n",
+ " | \n",
+ " Strategic planning included as innoculating po... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA01 - Strategic Planning\\n\\nT0019 - Generate ... | \n",
+ " F00031 - Educate on how to identify informatio... | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 31 | \n",
+ " F00032 | \n",
+ " Educate on how to identify to pollution | \n",
+ " | \n",
+ " DUPLICATE - DELETE | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " DUPLICATE - DELETE | \n",
+ " F00032 - Educate on how to identify to pollution | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 32 | \n",
+ " F00033 | \n",
+ " Fake websites: add transparency on business model | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0013 - Create fake websites | \n",
+ " F00033 - Fake websites: add transparency on bu... | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 33 | \n",
+ " F00034 | \n",
+ " Flag the information spaces so people know abo... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0049 - Flooding | \n",
+ " F00034 - Flag the information spaces so people... | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 34 | \n",
+ " F00035 | \n",
+ " Identify repeated narrative DNA | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA01 - Strategic Planning\\n\\nT0006 - Create Ma... | \n",
+ " F00035 - Identify repeated narrative DNA | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 35 | \n",
+ " F00036 | \n",
+ " Looking for AB testing in unregulated channels | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0020 - Trial content | \n",
+ " F00036 - Looking for AB testing in unregulated... | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 36 | \n",
+ " F00037 | \n",
+ " News content provenance certification. | \n",
+ " | \n",
+ " Original Comment: Shortcomings: intentional fa... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA01 - Strategic Planning* (non-existent techn... | \n",
+ " F00037 - News content provenance certification. | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 37 | \n",
+ " F00038 | \n",
+ " Social capital as attack vector | \n",
+ " | \n",
+ " Unsure I understood the original intention or ... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0010 - Cultivate ignorant agents\\nT0039 - Bai... | \n",
+ " F00038 - Social capital as attack vector | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 38 | \n",
+ " F00039 | \n",
+ " standards to track image/ video deep fakes - i... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0024 - Create fake videos and images | \n",
+ " F00039 - standards to track image/ video deep ... | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 39 | \n",
+ " F00040 | \n",
+ " Unalterable metadata signature on origins of i... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA06 Develop Content | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0024 - Create fake videos and images | \n",
+ " F00040 - Unalterable metadata signature on ori... | \n",
+ " TA06 | \n",
+ " Develop Content | \n",
+ "
\n",
+ " \n",
+ " | 40 | \n",
+ " F00041 | \n",
+ " Bias detection | \n",
+ " | \n",
+ " Not technically left of boom | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA07 Channel Selection | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T00029 | \n",
+ " F00041 - Bias detection | \n",
+ " TA07 | \n",
+ " Channel Selection | \n",
+ "
\n",
+ " \n",
+ " | 41 | \n",
+ " F00042 | \n",
+ " Categorize polls by intent | \n",
+ " | \n",
+ " Use T00029, but against the creators | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA07 Channel Selection | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T00029 | \n",
+ " F00042 - Categorize polls by intent | \n",
+ " TA07 | \n",
+ " Channel Selection | \n",
+ "
\n",
+ " \n",
+ " | 42 | \n",
+ " F00043 | \n",
+ " Monitor for creation of fake known personas | \n",
+ " | \n",
+ " Platform companies and some information securi... | \n",
+ " A031 - social media platform administrator,A01... | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA07 Channel Selection | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T00030 | \n",
+ " F00043 - Monitor for creation of fake known pe... | \n",
+ " TA07 | \n",
+ " Channel Selection | \n",
+ "
\n",
+ " \n",
+ " | 43 | \n",
+ " F00044 | \n",
+ " Forensic analysis | \n",
+ " | \n",
+ " Can be used in all phases for all techniques. | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA08 Pump Priming | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " All | \n",
+ " F00044 - Forensic analysis | \n",
+ " TA08 | \n",
+ " Pump Priming | \n",
+ "
\n",
+ " \n",
+ " | 44 | \n",
+ " F00045 | \n",
+ " Forensic linguistic analysis | \n",
+ " | \n",
+ " Can be used in all phases for all techniques. | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA08 Pump Priming | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " All | \n",
+ " F00045 - Forensic linguistic analysis | \n",
+ " TA08 | \n",
+ " Pump Priming | \n",
+ "
\n",
+ " \n",
+ " | 45 | \n",
+ " F00046 | \n",
+ " Pump priming analytics | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA08 Pump Priming | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA08 - Pump Priming | \n",
+ " F00046 - Pump priming analytics | \n",
+ " TA08 | \n",
+ " Pump Priming | \n",
+ "
\n",
+ " \n",
+ " | 46 | \n",
+ " F00047 | \n",
+ " trace involved parties | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA08 Pump Priming | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00047 - trace involved parties | \n",
+ " TA08 | \n",
+ " Pump Priming | \n",
+ "
\n",
+ " \n",
+ " | 47 | \n",
+ " F00048 | \n",
+ " Trace known operations and connection | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA08 Pump Priming | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00048 - Trace known operations and connection | \n",
+ " TA08 | \n",
+ " Pump Priming | \n",
+ "
\n",
+ " \n",
+ " | 48 | \n",
+ " F00049 | \n",
+ " trace money | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA08 Pump Priming | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00049 - trace money | \n",
+ " TA08 | \n",
+ " Pump Priming | \n",
+ "
\n",
+ " \n",
+ " | 49 | \n",
+ " F00050 | \n",
+ " Web cache analytics | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA08 Pump Priming | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00050 - Web cache analytics | \n",
+ " TA08 | \n",
+ " Pump Priming | \n",
+ "
\n",
+ " \n",
+ " | 50 | \n",
+ " F00051 | \n",
+ " Challenge expertise | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA09 Exposure | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0009 - Create fake experts\\nT0045 - Use fake ... | \n",
+ " F00051 - Challenge expertise | \n",
+ " TA09 | \n",
+ " Exposure | \n",
+ "
\n",
+ " \n",
+ " | 51 | \n",
+ " F00052 | \n",
+ " Discover sponsors | \n",
+ " | \n",
+ " Discovering the sponsors behind a campaign, na... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA09 Exposure | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " All | \n",
+ " F00052 - Discover sponsors | \n",
+ " TA09 | \n",
+ " Exposure | \n",
+ "
\n",
+ " \n",
+ " | 52 | \n",
+ " F00053 | \n",
+ " Government rumour control office (what can we ... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA09 Exposure | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0049\\nT0050\\nT0052\\nT0053\\nT0054\\nT0055\\nT0056 | \n",
+ " F00053 - Government rumour control office (wha... | \n",
+ " TA09 | \n",
+ " Exposure | \n",
+ "
\n",
+ " \n",
+ " | 53 | \n",
+ " F00054 | \n",
+ " Restrict people who can @ you on social networks | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA09 Exposure | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00054 - Restrict people who can @ you on soci... | \n",
+ " TA09 | \n",
+ " Exposure | \n",
+ "
\n",
+ " \n",
+ " | 54 | \n",
+ " F00055 | \n",
+ " Verify credentials | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA09 Exposure | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00055 - Verify credentials | \n",
+ " TA09 | \n",
+ " Exposure | \n",
+ "
\n",
+ " \n",
+ " | 55 | \n",
+ " F00056 | \n",
+ " Verify organisation legitimacy | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA09 Exposure | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00056 - Verify organisation legitimacy | \n",
+ " TA09 | \n",
+ " Exposure | \n",
+ "
\n",
+ " \n",
+ " | 56 | \n",
+ " F00057 | \n",
+ " Verify personal credentials of experts | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA09 Exposure | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00057 - Verify personal credentials of experts | \n",
+ " TA09 | \n",
+ " Exposure | \n",
+ "
\n",
+ " \n",
+ " | 57 | \n",
+ " F00058 | \n",
+ " Deplatform (cancel culture) | \n",
+ " | \n",
+ " *Deplatform People: This technique needs to be... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA10 Go Physical | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA07 - Channel Selection\\nTA09 - Exposure\\nTA1... | \n",
+ " F00058 - Deplatform (cancel culture) | \n",
+ " TA10 | \n",
+ " Go Physical | \n",
+ "
\n",
+ " \n",
+ " | 58 | \n",
+ " F00059 | \n",
+ " Identify susceptible demographics | \n",
+ " | \n",
+ " All techniques provide or are susceptible to b... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA10 Go Physical | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " All | \n",
+ " F00059 - Identify susceptible demographics | \n",
+ " TA10 | \n",
+ " Go Physical | \n",
+ "
\n",
+ " \n",
+ " | 59 | \n",
+ " F00060 | \n",
+ " Identify susceptible influencers | \n",
+ " | \n",
+ " I assume this was a transcript error. Otherwis... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA10 Go Physical | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0039 - Bait legitimate influencers | \n",
+ " F00060 - Identify susceptible influencers | \n",
+ " TA10 | \n",
+ " Go Physical | \n",
+ "
\n",
+ " \n",
+ " | 60 | \n",
+ " F00061 | \n",
+ " Microtargeting | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA10 Go Physical | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " All | \n",
+ " F00061 - Microtargeting | \n",
+ " TA10 | \n",
+ " Go Physical | \n",
+ "
\n",
+ " \n",
+ " | 61 | \n",
+ " F00062 | \n",
+ " Detect when Dormant account turns active | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA11 Persistence | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " TA09 - Exposure\\n\\nT0007 - Create fake Social ... | \n",
+ " F00062 - Detect when Dormant account turns active | \n",
+ " TA11 | \n",
+ " Persistence | \n",
+ "
\n",
+ " \n",
+ " | 62 | \n",
+ " F00063 | \n",
+ " Linguistic change analysis | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA11 Persistence | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00063 - Linguistic change analysis | \n",
+ " TA11 | \n",
+ " Persistence | \n",
+ "
\n",
+ " \n",
+ " | 63 | \n",
+ " F00064 | \n",
+ " Monitor reports of account takeover | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA11 Persistence | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0011 - Hijack legitimate account | \n",
+ " F00064 - Monitor reports of account takeover | \n",
+ " TA11 | \n",
+ " Persistence | \n",
+ "
\n",
+ " \n",
+ " | 64 | \n",
+ " F00065 | \n",
+ " Sentiment change analysis | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA11 Persistence | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00065 - Sentiment change analysis | \n",
+ " TA11 | \n",
+ " Persistence | \n",
+ "
\n",
+ " \n",
+ " | 65 | \n",
+ " F00066 | \n",
+ " Use language errors, time to respond to accoun... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA11 Persistence | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00066 - Use language errors, time to respond ... | \n",
+ " TA11 | \n",
+ " Persistence | \n",
+ "
\n",
+ " \n",
+ " | 66 | \n",
+ " F00067 | \n",
+ " Data forensics | \n",
+ " | \n",
+ " | \n",
+ " A001 - data scientist | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " | \n",
+ " I00029,I00045 | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00067 - Data forensics | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 67 | \n",
+ " F00068 | \n",
+ " Resonance analysis | \n",
+ " | \n",
+ " a developing methodology for identifying stati... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Rand2237 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00068 - Resonance analysis | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 68 | \n",
+ " F00069 | \n",
+ " Track Russian media and develop analytic methods. | \n",
+ " | \n",
+ " To effectively counter Russian propaganda, it ... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Rand2237 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00069 - Track Russian media and develop analy... | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 69 | \n",
+ " F00070 | \n",
+ " Full spectrum analytics | \n",
+ " | \n",
+ " | \n",
+ " A001 - data scientist | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " ALL | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00070 - Full spectrum analytics | \n",
+ " ALL | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 70 | \n",
+ " F00071 | \n",
+ " Network analysis Identify/cultivate/support in... | \n",
+ " | \n",
+ " Local influencers detected via Twitter network... | \n",
+ " A001 - data scientist | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Rand2237 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00071 - Network analysis Identify/cultivate/s... | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 71 | \n",
+ " F00072 | \n",
+ " network analysis to identify central users in ... | \n",
+ " | \n",
+ " It is possible that some of these are bots or ... | \n",
+ " A001 - data scientist | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Rand2237 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00072 - network analysis to identify central ... | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 72 | \n",
+ " F00073 | \n",
+ " collect intel/recon on black/covert content cr... | \n",
+ " | \n",
+ " Players at the level of covert attribution, re... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Rand2237 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00073 - collect intel/recon on black/covert c... | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 73 | \n",
+ " F00074 | \n",
+ " identify relevant fence-sitter communities | \n",
+ " | \n",
+ " brand ambassador programs could be used with i... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Rand2237 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00074 - identify relevant fence-sitter commun... | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 74 | \n",
+ " F00075 | \n",
+ " leverage open-source information | \n",
+ " | \n",
+ " significant amounts of quality open-source inf... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Dalton19 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00075 - leverage open-source information | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 75 | \n",
+ " F00076 | \n",
+ " Monitor/collect audience engagement data conne... | \n",
+ " | \n",
+ " Target audience connected to \"useful idiots ra... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Rand2237 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00076 - Monitor/collect audience engagement d... | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 76 | \n",
+ " F00077 | \n",
+ " Model for bot account behavior | \n",
+ " | \n",
+ " Bot account: action based, people. Unsure whic... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00077 - Model for bot account behavior | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 77 | \n",
+ " F00078 | \n",
+ " Monitor account level activity in social networks | \n",
+ " | \n",
+ " All techniques benefit from careful analysis a... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " All | \n",
+ " F00078 - Monitor account level activity in soc... | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 78 | \n",
+ " F00079 | \n",
+ " Network anomaly detection | \n",
+ " | \n",
+ " | \n",
+ " A001 - data scientist | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA05 Microtargeting | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0029 - Manipulate online polls\\nT0047 - Muzzl... | \n",
+ " F00079 - Network anomaly detection | \n",
+ " TA05 | \n",
+ " Microtargeting | \n",
+ "
\n",
+ " \n",
+ " | 79 | \n",
+ " F00080 | \n",
+ " Hack the polls/ content yourself | \n",
+ " | \n",
+ " Two wrongs don't make a right? But if you hack... | \n",
+ " A015 - general public | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA07 Channel Selection | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0029 - Manipulate online polls | \n",
+ " F00080 - Hack the polls/ content yourself | \n",
+ " TA07 | \n",
+ " Channel Selection | \n",
+ "
\n",
+ " \n",
+ " | 80 | \n",
+ " F00081 | \n",
+ " Need way for end user to report operations | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA09 Exposure | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " T0049\\nT0050\\nT0052\\nT0053\\nT0054\\nT0055\\nT0056 | \n",
+ " F00081 - Need way for end user to report opera... | \n",
+ " TA09 | \n",
+ " Exposure | \n",
+ "
\n",
+ " \n",
+ " | 81 | \n",
+ " F00082 | \n",
+ " Control the US \"slang\" translation boards | \n",
+ " | \n",
+ " | \n",
+ " A028 - platform administrator | \n",
+ " R005 - slang translation | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA11 Persistence | \n",
+ " D3 Disrupt | \n",
+ " | \n",
+ " | \n",
+ " F00082 - Control the US \"slang\" translation bo... | \n",
+ " TA11 | \n",
+ " Persistence | \n",
+ "
\n",
+ " \n",
+ " | 82 | \n",
+ " F00083 | \n",
+ " Build and own meme generator, then track and w... | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA11 Persistence | \n",
+ " D5 Deceive | \n",
+ " | \n",
+ " T0012 - Use concealment\\nT0021 - Memes | \n",
+ " F00083 - Build and own meme generator, then tr... | \n",
+ " TA11 | \n",
+ " Persistence | \n",
+ "
\n",
+ " \n",
+ " | 83 | \n",
+ " F00084 | \n",
+ " Track individual bad actors | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00084 - Track individual bad actors | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 84 | \n",
+ " F00085 | \n",
+ " detection of a weak signal through global noise | \n",
+ " | \n",
+ " Gray zone threats are challenging given that w... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Dalton19 | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " | \n",
+ " F00085 - detection of a weak signal through gl... | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 85 | \n",
+ " F00086 | \n",
+ " Outpace Competitor Intelligence Capabilities | \n",
+ " | \n",
+ " Develop an intelligence-based understanding of... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Hicks19 | \n",
+ " | \n",
+ " TA02 Objective planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00086 - Outpace Competitor Intelligence Capab... | \n",
+ " TA02 | \n",
+ " Objective planning | \n",
+ "
\n",
+ " \n",
+ " | 86 | \n",
+ " F00087 | \n",
+ " Improve Indications and Warning | \n",
+ " | \n",
+ " United States has not adequately adapted its i... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Hicks19 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00087 - Improve Indications and Warning | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 87 | \n",
+ " F00088 | \n",
+ " Revitalize an “active measures working group,” | \n",
+ " | \n",
+ " Recognize campaigns from weak signals, includi... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Dalton19 | \n",
+ " | \n",
+ " | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00088 - Revitalize an “active measures workin... | \n",
+ " | \n",
+ " None | \n",
+ "
\n",
+ " \n",
+ " | 88 | \n",
+ " F00089 | \n",
+ " target/name/flag \"grey zone\" website content | \n",
+ " | \n",
+ " \"Gray zone\" is second level of content produce... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Rand2237 | \n",
+ " | \n",
+ " TA04 Develop Networks | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00089 - target/name/flag \"grey zone\" website ... | \n",
+ " TA04 | \n",
+ " Develop Networks | \n",
+ "
\n",
+ " \n",
+ " | 89 | \n",
+ " F00090 | \n",
+ " Match Punitive Tools with Third-Party Inducements | \n",
+ " | \n",
+ " Bring private sector and civil society into ac... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Hicks19 | \n",
+ " | \n",
+ " TA01 Strategic Planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00090 - Match Punitive Tools with Third-Party... | \n",
+ " TA01 | \n",
+ " Strategic Planning | \n",
+ "
\n",
+ " \n",
+ " | 90 | \n",
+ " F00091 | \n",
+ " Partner to develop analytic methods & tools | \n",
+ " | \n",
+ " This might include working with relevant techn... | \n",
+ " A001 data scientist,A024 developer | \n",
+ " | \n",
+ " 2019-11-search | \n",
+ " Rand2237 | \n",
+ " | \n",
+ " TA01 Strategic Planning | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00091 - Partner to develop analytic methods &... | \n",
+ " TA01 | \n",
+ " Strategic Planning | \n",
+ "
\n",
+ " \n",
+ " | 91 | \n",
+ " F00092 | \n",
+ " daylight | \n",
+ " | \n",
+ " Warn social media companies about an ongoing c... | \n",
+ " A015 - general public | \n",
+ " R006 - disinformation datasets | \n",
+ " 2019-11-search | \n",
+ " | \n",
+ " I00002 | \n",
+ " TA09 Exposure | \n",
+ " D1 Detect | \n",
+ " | \n",
+ " | \n",
+ " F00092 - daylight | \n",
+ " TA09 | \n",
+ " Exposure | \n",
+ "
\n",
+ " \n",
+ " | 92 | \n",
+ " F00093 | \n",
+ " S4d detection and re-allocation approaches | \n",
+ " M004 - friction | \n",
+ " S4D is a way to separate out different speaker... | \n",
+ " | \n",
+ " | \n",
+ " 2019-11-workshop | \n",
+ " | \n",
+ " | \n",
+ " TA03 Develop People | \n",
+ " D3 Disrupt | \n",
+ " | \n",
+ " T0011 - Hijack legitimate account | \n",
+ " F00093 - S4d detection and re-allocation appro... | \n",
+ " TA03 | \n",
+ " Develop People | \n",
+ "
\n",
+ " \n",
+ " | 93 | \n",
+ " F00094 | \n",
+ " Registries alert when large batches of newsy U... | \n",
+ " M003 - daylight | \n",
+ " | \n",
+ " A028 - platform administrator | \n",
+ " | \n",
+ " grugq | \n",
+ " | \n",
+ " | \n",
+ " TA07 Channel Selection | \n",
+ " D2 Deny | \n",
+ " | \n",
+ " T0013 - Create fake websites\\nT0008 - Create f... | \n",
+ " F00094 - Registries alert when large batches o... | \n",
+ " TA07 | \n",
+ " Channel Selection | \n",
+ "
\n",
+ " \n",
+ "\n",
+ ""
+ ],
+ "text/plain": [
+ " amitt_id name \\\n",
+ "0 F00001 Analyse aborted / failed campaigns \n",
+ "1 F00002 Analyse viral fizzle \n",
+ "2 F00003 Exploit counter-intelligence vs bad actors \n",
+ "3 F00004 Recruit like-minded converts \"people who used ... \n",
+ "4 F00005 SWOT Analysis of Cognition in Various Groups \n",
+ "5 F00006 SWOT analysis of tech platforms \n",
+ "6 F00007 Monitor account level activity in social networks \n",
+ "7 F00008 Detect abnormal amplification \n",
+ "8 F00009 Detect abnormal events \n",
+ "9 F00010 Detect abnormal groups \n",
+ "10 F00011 Detect abnormal pages \n",
+ "11 F00012 Detect abnormal profiles, e.g. prolific pages/... \n",
+ "12 F00013 Identify fake news sites \n",
+ "13 F00014 Trace connections \n",
+ "14 F00015 Detect anomalies in membership growth patterns \n",
+ "15 F00016 Identify fence-sitters \n",
+ "16 F00017 Measure emotional valence \n",
+ "17 F00018 Follow the money \n",
+ "18 F00019 Activity resurgence detection (alarm when dorm... \n",
+ "19 F00020 Detect anomalous activity \n",
+ "20 F00021 AI/ML automated early detection of campaign pl... \n",
+ "21 F00022 Digital authority - regulating body (united st... \n",
+ "22 F00023 Periodic verification (counter to hijack legit... \n",
+ "23 F00024 Teach civics to kids/ adults/ seniors \n",
+ "24 F00025 Boots-on-the-ground early narrative detection \n",
+ "25 F00026 Language anomoly detection \n",
+ "26 F00027 Unlikely correlation of sentiment on same topics \n",
+ "27 F00028 Associate a public key signature with governme... \n",
+ "28 F00029 Detect proto narratives, i.e. RT, Sputnik \n",
+ "29 F00030 Early detection and warning - reporting of sus... \n",
+ "30 F00031 Educate on how to identify information pollution \n",
+ "31 F00032 Educate on how to identify to pollution \n",
+ "32 F00033 Fake websites: add transparency on business model \n",
+ "33 F00034 Flag the information spaces so people know abo... \n",
+ "34 F00035 Identify repeated narrative DNA \n",
+ "35 F00036 Looking for AB testing in unregulated channels \n",
+ "36 F00037 News content provenance certification. \n",
+ "37 F00038 Social capital as attack vector \n",
+ "38 F00039 standards to track image/ video deep fakes - i... \n",
+ "39 F00040 Unalterable metadata signature on origins of i... \n",
+ "40 F00041 Bias detection \n",
+ "41 F00042 Categorize polls by intent \n",
+ "42 F00043 Monitor for creation of fake known personas \n",
+ "43 F00044 Forensic analysis \n",
+ "44 F00045 Forensic linguistic analysis \n",
+ "45 F00046 Pump priming analytics \n",
+ "46 F00047 trace involved parties \n",
+ "47 F00048 Trace known operations and connection \n",
+ "48 F00049 trace money \n",
+ "49 F00050 Web cache analytics \n",
+ "50 F00051 Challenge expertise \n",
+ "51 F00052 Discover sponsors \n",
+ "52 F00053 Government rumour control office (what can we ... \n",
+ "53 F00054 Restrict people who can @ you on social networks \n",
+ "54 F00055 Verify credentials \n",
+ "55 F00056 Verify organisation legitimacy \n",
+ "56 F00057 Verify personal credentials of experts \n",
+ "57 F00058 Deplatform (cancel culture) \n",
+ "58 F00059 Identify susceptible demographics \n",
+ "59 F00060 Identify susceptible influencers \n",
+ "60 F00061 Microtargeting \n",
+ "61 F00062 Detect when Dormant account turns active \n",
+ "62 F00063 Linguistic change analysis \n",
+ "63 F00064 Monitor reports of account takeover \n",
+ "64 F00065 Sentiment change analysis \n",
+ "65 F00066 Use language errors, time to respond to accoun... \n",
+ "66 F00067 Data forensics \n",
+ "67 F00068 Resonance analysis \n",
+ "68 F00069 Track Russian media and develop analytic methods. \n",
+ "69 F00070 Full spectrum analytics \n",
+ "70 F00071 Network analysis Identify/cultivate/support in... \n",
+ "71 F00072 network analysis to identify central users in ... \n",
+ "72 F00073 collect intel/recon on black/covert content cr... \n",
+ "73 F00074 identify relevant fence-sitter communities \n",
+ "74 F00075 leverage open-source information \n",
+ "75 F00076 Monitor/collect audience engagement data conne... \n",
+ "76 F00077 Model for bot account behavior \n",
+ "77 F00078 Monitor account level activity in social networks \n",
+ "78 F00079 Network anomaly detection \n",
+ "79 F00080 Hack the polls/ content yourself \n",
+ "80 F00081 Need way for end user to report operations \n",
+ "81 F00082 Control the US \"slang\" translation boards \n",
+ "82 F00083 Build and own meme generator, then track and w... \n",
+ "83 F00084 Track individual bad actors \n",
+ "84 F00085 detection of a weak signal through global noise \n",
+ "85 F00086 Outpace Competitor Intelligence Capabilities \n",
+ "86 F00087 Improve Indications and Warning \n",
+ "87 F00088 Revitalize an “active measures working group,” \n",
+ "88 F00089 target/name/flag \"grey zone\" website content \n",
+ "89 F00090 Match Punitive Tools with Third-Party Inducements \n",
+ "90 F00091 Partner to develop analytic methods & tools \n",
+ "91 F00092 daylight \n",
+ "92 F00093 S4d detection and re-allocation approaches \n",
+ "93 F00094 Registries alert when large batches of newsy U... \n",
+ "\n",
+ " metatechnique summary \\\n",
+ "0 Examine failed campaigns. How did they fail? C... \n",
+ "1 \n",
+ "2 \n",
+ "3 \n",
+ "4 \n",
+ "5 \n",
+ "6 \n",
+ "7 \n",
+ "8 \n",
+ "9 \n",
+ "10 \n",
+ "11 \n",
+ "12 \n",
+ "13 for e.g. fake news sites \n",
+ "14 I include Fake Experts as they may use funding... \n",
+ "15 Note: In each case, depending on the platform ... \n",
+ "16 \n",
+ "17 track funding sources \n",
+ "18 \n",
+ "19 \n",
+ "20 \n",
+ "21 \n",
+ "22 \n",
+ "23 \n",
+ "24 \n",
+ "25 \n",
+ "26 \n",
+ "27 \n",
+ "28 \n",
+ "29 \n",
+ "30 Strategic planning included as innoculating po... \n",
+ "31 DUPLICATE - DELETE \n",
+ "32 \n",
+ "33 \n",
+ "34 \n",
+ "35 \n",
+ "36 Original Comment: Shortcomings: intentional fa... \n",
+ "37 Unsure I understood the original intention or ... \n",
+ "38 \n",
+ "39 \n",
+ "40 Not technically left of boom \n",
+ "41 Use T00029, but against the creators \n",
+ "42 Platform companies and some information securi... \n",
+ "43 Can be used in all phases for all techniques. \n",
+ "44 Can be used in all phases for all techniques. \n",
+ "45 \n",
+ "46 \n",
+ "47 \n",
+ "48 \n",
+ "49 \n",
+ "50 \n",
+ "51 Discovering the sponsors behind a campaign, na... \n",
+ "52 \n",
+ "53 \n",
+ "54 \n",
+ "55 \n",
+ "56 \n",
+ "57 *Deplatform People: This technique needs to be... \n",
+ "58 All techniques provide or are susceptible to b... \n",
+ "59 I assume this was a transcript error. Otherwis... \n",
+ "60 \n",
+ "61 \n",
+ "62 \n",
+ "63 \n",
+ "64 \n",
+ "65 \n",
+ "66 \n",
+ "67 a developing methodology for identifying stati... \n",
+ "68 To effectively counter Russian propaganda, it ... \n",
+ "69 \n",
+ "70 Local influencers detected via Twitter network... \n",
+ "71 It is possible that some of these are bots or ... \n",
+ "72 Players at the level of covert attribution, re... \n",
+ "73 brand ambassador programs could be used with i... \n",
+ "74 significant amounts of quality open-source inf... \n",
+ "75 Target audience connected to \"useful idiots ra... \n",
+ "76 Bot account: action based, people. Unsure whic... \n",
+ "77 All techniques benefit from careful analysis a... \n",
+ "78 \n",
+ "79 Two wrongs don't make a right? But if you hack... \n",
+ "80 \n",
+ "81 \n",
+ "82 \n",
+ "83 \n",
+ "84 Gray zone threats are challenging given that w... \n",
+ "85 Develop an intelligence-based understanding of... \n",
+ "86 United States has not adequately adapted its i... \n",
+ "87 Recognize campaigns from weak signals, includi... \n",
+ "88 \"Gray zone\" is second level of content produce... \n",
+ "89 Bring private sector and civil society into ac... \n",
+ "90 This might include working with relevant techn... \n",
+ "91 Warn social media companies about an ongoing c... \n",
+ "92 M004 - friction S4D is a way to separate out different speaker... \n",
+ "93 M003 - daylight \n",
+ "\n",
+ " actors \\\n",
+ "0 \n",
+ "1 \n",
+ "2 \n",
+ "3 \n",
+ "4 \n",
+ "5 \n",
+ "6 \n",
+ "7 \n",
+ "8 \n",
+ "9 \n",
+ "10 \n",
+ "11 \n",
+ "12 \n",
+ "13 \n",
+ "14 \n",
+ "15 \n",
+ "16 \n",
+ "17 \n",
+ "18 \n",
+ "19 A015 - general public,A001 - data scientist,A0... \n",
+ "20 \n",
+ "21 \n",
+ "22 \n",
+ "23 \n",
+ "24 \n",
+ "25 \n",
+ "26 \n",
+ "27 \n",
+ "28 \n",
+ "29 \n",
+ "30 \n",
+ "31 \n",
+ "32 \n",
+ "33 \n",
+ "34 \n",
+ "35 \n",
+ "36 \n",
+ "37 \n",
+ "38 \n",
+ "39 \n",
+ "40 \n",
+ "41 \n",
+ "42 A031 - social media platform administrator,A01... \n",
+ "43 \n",
+ "44 \n",
+ "45 \n",
+ "46 \n",
+ "47 \n",
+ "48 \n",
+ "49 \n",
+ "50 \n",
+ "51 \n",
+ "52 \n",
+ "53 \n",
+ "54 \n",
+ "55 \n",
+ "56 \n",
+ "57 \n",
+ "58 \n",
+ "59 \n",
+ "60 \n",
+ "61 \n",
+ "62 \n",
+ "63 \n",
+ "64 \n",
+ "65 \n",
+ "66 A001 - data scientist \n",
+ "67 \n",
+ "68 \n",
+ "69 A001 - data scientist \n",
+ "70 A001 - data scientist \n",
+ "71 A001 - data scientist \n",
+ "72 \n",
+ "73 \n",
+ "74 \n",
+ "75 \n",
+ "76 \n",
+ "77 \n",
+ "78 A001 - data scientist \n",
+ "79 A015 - general public \n",
+ "80 \n",
+ "81 A028 - platform administrator \n",
+ "82 \n",
+ "83 \n",
+ "84 \n",
+ "85 \n",
+ "86 \n",
+ "87 \n",
+ "88 \n",
+ "89 \n",
+ "90 A001 data scientist,A024 developer \n",
+ "91 A015 - general public \n",
+ "92 \n",
+ "93 A028 - platform administrator \n",
+ "\n",
+ " resources_needed how_found references \\\n",
+ "0 2019-11-workshop \n",
+ "1 2019-11-workshop \n",
+ "2 2019-11-workshop \n",
+ "3 2019-11-workshop \n",
+ "4 2019-11-workshop \n",
+ "5 2019-11-workshop \n",
+ "6 2019-11-workshop \n",
+ "7 2019-11-workshop \n",
+ "8 2019-11-workshop \n",
+ "9 2019-11-workshop \n",
+ "10 2019-11-workshop \n",
+ "11 2019-11-workshop \n",
+ "12 2019-11-workshop \n",
+ "13 2019-11-workshop \n",
+ "14 2019-11-workshop \n",
+ "15 2019-11-workshop \n",
+ "16 2019-11-workshop \n",
+ "17 2019-11-workshop \n",
+ "18 2019-11-workshop \n",
+ "19 R004 - platform algorithms 2019-11-workshop \n",
+ "20 2019-11-workshop \n",
+ "21 2019-11-workshop \n",
+ "22 2019-11-workshop \n",
+ "23 2019-11-workshop \n",
+ "24 2019-11-workshop \n",
+ "25 2019-11-workshop \n",
+ "26 2019-11-workshop \n",
+ "27 2019-11-workshop \n",
+ "28 2019-11-workshop \n",
+ "29 2019-11-workshop \n",
+ "30 2019-11-workshop \n",
+ "31 2019-11-workshop \n",
+ "32 2019-11-workshop \n",
+ "33 2019-11-workshop \n",
+ "34 2019-11-workshop \n",
+ "35 2019-11-workshop \n",
+ "36 2019-11-workshop \n",
+ "37 2019-11-workshop \n",
+ "38 2019-11-workshop \n",
+ "39 2019-11-workshop \n",
+ "40 2019-11-workshop \n",
+ "41 2019-11-workshop \n",
+ "42 2019-11-workshop \n",
+ "43 2019-11-workshop \n",
+ "44 2019-11-workshop \n",
+ "45 2019-11-workshop \n",
+ "46 2019-11-workshop \n",
+ "47 2019-11-workshop \n",
+ "48 2019-11-workshop \n",
+ "49 2019-11-workshop \n",
+ "50 2019-11-workshop \n",
+ "51 2019-11-workshop \n",
+ "52 2019-11-workshop \n",
+ "53 2019-11-workshop \n",
+ "54 2019-11-workshop \n",
+ "55 2019-11-workshop \n",
+ "56 2019-11-workshop \n",
+ "57 2019-11-workshop \n",
+ "58 2019-11-workshop \n",
+ "59 2019-11-workshop \n",
+ "60 2019-11-workshop \n",
+ "61 2019-11-workshop \n",
+ "62 2019-11-workshop \n",
+ "63 2019-11-workshop \n",
+ "64 2019-11-workshop \n",
+ "65 2019-11-workshop \n",
+ "66 2019-11-search \n",
+ "67 2019-11-search Rand2237 \n",
+ "68 2019-11-search Rand2237 \n",
+ "69 2019-11-workshop \n",
+ "70 2019-11-search Rand2237 \n",
+ "71 2019-11-search Rand2237 \n",
+ "72 2019-11-search Rand2237 \n",
+ "73 2019-11-search Rand2237 \n",
+ "74 2019-11-search Dalton19 \n",
+ "75 2019-11-search Rand2237 \n",
+ "76 2019-11-workshop \n",
+ "77 2019-11-workshop \n",
+ "78 2019-11-workshop \n",
+ "79 2019-11-workshop \n",
+ "80 2019-11-workshop \n",
+ "81 R005 - slang translation 2019-11-workshop \n",
+ "82 2019-11-workshop \n",
+ "83 2019-11-workshop \n",
+ "84 2019-11-search Dalton19 \n",
+ "85 2019-11-search Hicks19 \n",
+ "86 2019-11-search Hicks19 \n",
+ "87 2019-11-search Dalton19 \n",
+ "88 2019-11-search Rand2237 \n",
+ "89 2019-11-search Hicks19 \n",
+ "90 2019-11-search Rand2237 \n",
+ "91 R006 - disinformation datasets 2019-11-search \n",
+ "92 2019-11-workshop \n",
+ "93 grugq \n",
+ "\n",
+ " incidents tactic responsetype \\\n",
+ "0 TA01 Strategic Planning D1 Detect \n",
+ "1 TA01 Strategic Planning D1 Detect \n",
+ "2 TA01 Strategic Planning D1 Detect \n",
+ "3 TA01 Strategic Planning D1 Detect \n",
+ "4 TA01 Strategic Planning D1 Detect \n",
+ "5 TA01 Strategic Planning D1 Detect \n",
+ "6 TA02 Objective Planning D1 Detect \n",
+ "7 TA03 Develop People D1 Detect \n",
+ "8 TA03 Develop People D1 Detect \n",
+ "9 TA03 Develop People D1 Detect \n",
+ "10 TA03 Develop People D1 Detect \n",
+ "11 TA03 Develop People D1 Detect \n",
+ "12 TA03 Develop People D1 Detect \n",
+ "13 TA03 Develop People D1 Detect \n",
+ "14 TA03 Develop People D1 Detect \n",
+ "15 TA03 Develop People D1 Detect \n",
+ "16 TA03 Develop People D1 Detect \n",
+ "17 TA03 Develop People D1 Detect \n",
+ "18 TA04 Develop Networks D1 Detect \n",
+ "19 TA04 Develop Networks D1 Detect \n",
+ "20 TA04 Develop Networks D1 Detect \n",
+ "21 TA04 Develop Networks D1 Detect \n",
+ "22 TA04 Develop Networks D1 Detect \n",
+ "23 TA04 Develop Networks D1 Detect \n",
+ "24 TA05 Microtargeting D1 Detect \n",
+ "25 TA05 Microtargeting D1 Detect \n",
+ "26 TA05 Microtargeting D1 Detect \n",
+ "27 TA06 Develop Content D1 Detect \n",
+ "28 TA06 Develop Content D1 Detect \n",
+ "29 TA06 Develop Content D1 Detect \n",
+ "30 TA06 Develop Content D1 Detect \n",
+ "31 TA06 Develop Content D1 Detect \n",
+ "32 TA06 Develop Content D1 Detect \n",
+ "33 TA06 Develop Content D1 Detect \n",
+ "34 TA06 Develop Content D1 Detect \n",
+ "35 TA06 Develop Content D1 Detect \n",
+ "36 TA06 Develop Content D1 Detect \n",
+ "37 TA06 Develop Content D1 Detect \n",
+ "38 TA06 Develop Content D1 Detect \n",
+ "39 TA06 Develop Content D1 Detect \n",
+ "40 TA07 Channel Selection D1 Detect \n",
+ "41 TA07 Channel Selection D1 Detect \n",
+ "42 TA07 Channel Selection D1 Detect \n",
+ "43 TA08 Pump Priming D1 Detect \n",
+ "44 TA08 Pump Priming D1 Detect \n",
+ "45 TA08 Pump Priming D1 Detect \n",
+ "46 TA08 Pump Priming D1 Detect \n",
+ "47 TA08 Pump Priming D1 Detect \n",
+ "48 TA08 Pump Priming D1 Detect \n",
+ "49 TA08 Pump Priming D1 Detect \n",
+ "50 TA09 Exposure D1 Detect \n",
+ "51 TA09 Exposure D1 Detect \n",
+ "52 TA09 Exposure D1 Detect \n",
+ "53 TA09 Exposure D1 Detect \n",
+ "54 TA09 Exposure D1 Detect \n",
+ "55 TA09 Exposure D1 Detect \n",
+ "56 TA09 Exposure D1 Detect \n",
+ "57 TA10 Go Physical D1 Detect \n",
+ "58 TA10 Go Physical D1 Detect \n",
+ "59 TA10 Go Physical D1 Detect \n",
+ "60 TA10 Go Physical D1 Detect \n",
+ "61 TA11 Persistence D1 Detect \n",
+ "62 TA11 Persistence D1 Detect \n",
+ "63 TA11 Persistence D1 Detect \n",
+ "64 TA11 Persistence D1 Detect \n",
+ "65 TA11 Persistence D1 Detect \n",
+ "66 I00029,I00045 D1 Detect \n",
+ "67 D1 Detect \n",
+ "68 D1 Detect \n",
+ "69 ALL D1 Detect \n",
+ "70 D1 Detect \n",
+ "71 D1 Detect \n",
+ "72 D1 Detect \n",
+ "73 D1 Detect \n",
+ "74 D1 Detect \n",
+ "75 D1 Detect \n",
+ "76 TA03 Develop People D1 Detect \n",
+ "77 TA03 Develop People D1 Detect \n",
+ "78 TA05 Microtargeting D1 Detect \n",
+ "79 TA07 Channel Selection D1 Detect \n",
+ "80 TA09 Exposure D1 Detect \n",
+ "81 TA11 Persistence D3 Disrupt \n",
+ "82 TA11 Persistence D5 Deceive \n",
+ "83 TA03 Develop People D1 Detect \n",
+ "84 \n",
+ "85 TA02 Objective planning D1 Detect \n",
+ "86 D1 Detect \n",
+ "87 D1 Detect \n",
+ "88 TA04 Develop Networks D1 Detect \n",
+ "89 TA01 Strategic Planning D1 Detect \n",
+ "90 TA01 Strategic Planning D1 Detect \n",
+ "91 I00002 TA09 Exposure D1 Detect \n",
+ "92 TA03 Develop People D3 Disrupt \n",
+ "93 TA07 Channel Selection D2 Deny \n",
+ "\n",
+ " notes \\\n",
+ "0 \n",
+ "1 \n",
+ "2 \n",
+ "3 \n",
+ "4 \n",
+ "5 \n",
+ "6 \n",
+ "7 \n",
+ "8 \n",
+ "9 \n",
+ "10 \n",
+ "11 \n",
+ "12 \n",
+ "13 \n",
+ "14 \n",
+ "15 \n",
+ "16 \n",
+ "17 \n",
+ "18 \n",
+ "19 \n",
+ "20 Automated Detection of Campaign \n",
+ "21 \n",
+ "22 \n",
+ "23 \n",
+ "24 \n",
+ "25 \n",
+ "26 \n",
+ "27 \n",
+ "28 \n",
+ "29 \n",
+ "30 \n",
+ "31 \n",
+ "32 \n",
+ "33 \n",
+ "34 \n",
+ "35 \n",
+ "36 \n",
+ "37 \n",
+ "38 \n",
+ "39 \n",
+ "40 \n",
+ "41 \n",
+ "42 \n",
+ "43 \n",
+ "44 \n",
+ "45 \n",
+ "46 \n",
+ "47 \n",
+ "48 \n",
+ "49 \n",
+ "50 \n",
+ "51 \n",
+ "52 \n",
+ "53 \n",
+ "54 \n",
+ "55 \n",
+ "56 \n",
+ "57 \n",
+ "58 \n",
+ "59 \n",
+ "60 \n",
+ "61 \n",
+ "62 \n",
+ "63 \n",
+ "64 \n",
+ "65 \n",
+ "66 \n",
+ "67 \n",
+ "68 \n",
+ "69 \n",
+ "70 \n",
+ "71 \n",
+ "72 \n",
+ "73 \n",
+ "74 \n",
+ "75 \n",
+ "76 \n",
+ "77 \n",
+ "78 \n",
+ "79 \n",
+ "80 \n",
+ "81 \n",
+ "82 \n",
+ "83 \n",
+ "84 \n",
+ "85 \n",
+ "86 \n",
+ "87 \n",
+ "88 \n",
+ "89 \n",
+ "90 \n",
+ "91 \n",
+ "92 \n",
+ "93 \n",
+ "\n",
+ " techniques \\\n",
+ "0 All \n",
+ "1 T0049 - Flooding\\nT0052 - Tertiary sites ampli... \n",
+ "2 TA06 - Develop Content\\nTA08 - Pump Priming\\nT... \n",
+ "3 T0057 - Organise remote rallies and events\\nT0... \n",
+ "4 All \n",
+ "5 TA05 - Microtargeting\\nTA07 - Channel Selectio... \n",
+ "6 All \n",
+ "7 T0052 - Tertiary sites amplify news\\nT0053 - T... \n",
+ "8 T0007 - Create fake Social Media Profiles / Pa... \n",
+ "9 T0007 - Create fake Social Media Profiles / Pa... \n",
+ "10 T0007 - Create fake Social Media Profiles / Pa... \n",
+ "11 T0007 - Create fake Social Media Profiles / Pa... \n",
+ "12 T0008 \n",
+ "13 T0008 \n",
+ "14 TA07 - Channel Selection\\n\\nT0007 - Create fak... \n",
+ "15 TA08 - Pump Priming\\nTA09 - Exposure\\nTA10 - G... \n",
+ "16 T0001 - 5Ds (dismiss, distort, distract, disma... \n",
+ "17 T0009 \n",
+ "18 T0011 - Hijack accounts \n",
+ "19 T0011 - Hijack accounts \n",
+ "20 TA03 - Develop People\\nTA04 - Develop Networks... \n",
+ "21 \n",
+ "22 T0011 - Hijack accounts \n",
+ "23 \n",
+ "24 TA01 - Strategic Planning\\nTA02 - Objective Pl... \n",
+ "25 \n",
+ "26 \n",
+ "27 T0025 - Leak altered documents \n",
+ "28 TA01 - Strategic Planning\\n\\nT0006 - Create Ma... \n",
+ "29 TA03 - Develop People\\nTA04 - Develop Networks... \n",
+ "30 TA01 - Strategic Planning\\n\\nT0019 - Generate ... \n",
+ "31 DUPLICATE - DELETE \n",
+ "32 T0013 - Create fake websites \n",
+ "33 T0049 - Flooding \n",
+ "34 TA01 - Strategic Planning\\n\\nT0006 - Create Ma... \n",
+ "35 T0020 - Trial content \n",
+ "36 TA01 - Strategic Planning* (non-existent techn... \n",
+ "37 T0010 - Cultivate ignorant agents\\nT0039 - Bai... \n",
+ "38 T0024 - Create fake videos and images \n",
+ "39 T0024 - Create fake videos and images \n",
+ "40 T00029 \n",
+ "41 T00029 \n",
+ "42 T00030 \n",
+ "43 All \n",
+ "44 All \n",
+ "45 TA08 - Pump Priming \n",
+ "46 \n",
+ "47 \n",
+ "48 \n",
+ "49 \n",
+ "50 T0009 - Create fake experts\\nT0045 - Use fake ... \n",
+ "51 All \n",
+ "52 T0049\\nT0050\\nT0052\\nT0053\\nT0054\\nT0055\\nT0056 \n",
+ "53 \n",
+ "54 \n",
+ "55 \n",
+ "56 \n",
+ "57 TA07 - Channel Selection\\nTA09 - Exposure\\nTA1... \n",
+ "58 All \n",
+ "59 T0039 - Bait legitimate influencers \n",
+ "60 All \n",
+ "61 TA09 - Exposure\\n\\nT0007 - Create fake Social ... \n",
+ "62 \n",
+ "63 T0011 - Hijack legitimate account \n",
+ "64 \n",
+ "65 \n",
+ "66 \n",
+ "67 \n",
+ "68 \n",
+ "69 \n",
+ "70 \n",
+ "71 \n",
+ "72 \n",
+ "73 \n",
+ "74 \n",
+ "75 \n",
+ "76 \n",
+ "77 All \n",
+ "78 T0029 - Manipulate online polls\\nT0047 - Muzzl... \n",
+ "79 T0029 - Manipulate online polls \n",
+ "80 T0049\\nT0050\\nT0052\\nT0053\\nT0054\\nT0055\\nT0056 \n",
+ "81 \n",
+ "82 T0012 - Use concealment\\nT0021 - Memes \n",
+ "83 \n",
+ "84 \n",
+ "85 \n",
+ "86 \n",
+ "87 \n",
+ "88 \n",
+ "89 \n",
+ "90 \n",
+ "91 \n",
+ "92 T0011 - Hijack legitimate account \n",
+ "93 T0013 - Create fake websites\\nT0008 - Create f... \n",
+ "\n",
+ " longname tactic_id \\\n",
+ "0 F00001 - Analyse aborted / failed campaigns TA01 \n",
+ "1 F00002 - Analyse viral fizzle TA01 \n",
+ "2 F00003 - Exploit counter-intelligence vs bad a... TA01 \n",
+ "3 F00004 - Recruit like-minded converts \"people ... TA01 \n",
+ "4 F00005 - SWOT Analysis of Cognition in Various... TA01 \n",
+ "5 F00006 - SWOT analysis of tech platforms TA01 \n",
+ "6 F00007 - Monitor account level activity in soc... TA02 \n",
+ "7 F00008 - Detect abnormal amplification TA03 \n",
+ "8 F00009 - Detect abnormal events TA03 \n",
+ "9 F00010 - Detect abnormal groups TA03 \n",
+ "10 F00011 - Detect abnormal pages TA03 \n",
+ "11 F00012 - Detect abnormal profiles, e.g. prolif... TA03 \n",
+ "12 F00013 - Identify fake news sites TA03 \n",
+ "13 F00014 - Trace connections TA03 \n",
+ "14 F00015 - Detect anomalies in membership growth... TA03 \n",
+ "15 F00016 - Identify fence-sitters TA03 \n",
+ "16 F00017 - Measure emotional valence TA03 \n",
+ "17 F00018 - Follow the money TA03 \n",
+ "18 F00019 - Activity resurgence detection (alarm ... TA04 \n",
+ "19 F00020 - Detect anomalous activity TA04 \n",
+ "20 F00021 - AI/ML automated early detection of ca... TA04 \n",
+ "21 F00022 - Digital authority - regulating body (... TA04 \n",
+ "22 F00023 - Periodic verification (counter to hij... TA04 \n",
+ "23 F00024 - Teach civics to kids/ adults/ seniors TA04 \n",
+ "24 F00025 - Boots-on-the-ground early narrative d... TA05 \n",
+ "25 F00026 - Language anomoly detection TA05 \n",
+ "26 F00027 - Unlikely correlation of sentiment on ... TA05 \n",
+ "27 F00028 - Associate a public key signature with... TA06 \n",
+ "28 F00029 - Detect proto narratives, i.e. RT, Spu... TA06 \n",
+ "29 F00030 - Early detection and warning - reporti... TA06 \n",
+ "30 F00031 - Educate on how to identify informatio... TA06 \n",
+ "31 F00032 - Educate on how to identify to pollution TA06 \n",
+ "32 F00033 - Fake websites: add transparency on bu... TA06 \n",
+ "33 F00034 - Flag the information spaces so people... TA06 \n",
+ "34 F00035 - Identify repeated narrative DNA TA06 \n",
+ "35 F00036 - Looking for AB testing in unregulated... TA06 \n",
+ "36 F00037 - News content provenance certification. TA06 \n",
+ "37 F00038 - Social capital as attack vector TA06 \n",
+ "38 F00039 - standards to track image/ video deep ... TA06 \n",
+ "39 F00040 - Unalterable metadata signature on ori... TA06 \n",
+ "40 F00041 - Bias detection TA07 \n",
+ "41 F00042 - Categorize polls by intent TA07 \n",
+ "42 F00043 - Monitor for creation of fake known pe... TA07 \n",
+ "43 F00044 - Forensic analysis TA08 \n",
+ "44 F00045 - Forensic linguistic analysis TA08 \n",
+ "45 F00046 - Pump priming analytics TA08 \n",
+ "46 F00047 - trace involved parties TA08 \n",
+ "47 F00048 - Trace known operations and connection TA08 \n",
+ "48 F00049 - trace money TA08 \n",
+ "49 F00050 - Web cache analytics TA08 \n",
+ "50 F00051 - Challenge expertise TA09 \n",
+ "51 F00052 - Discover sponsors TA09 \n",
+ "52 F00053 - Government rumour control office (wha... TA09 \n",
+ "53 F00054 - Restrict people who can @ you on soci... TA09 \n",
+ "54 F00055 - Verify credentials TA09 \n",
+ "55 F00056 - Verify organisation legitimacy TA09 \n",
+ "56 F00057 - Verify personal credentials of experts TA09 \n",
+ "57 F00058 - Deplatform (cancel culture) TA10 \n",
+ "58 F00059 - Identify susceptible demographics TA10 \n",
+ "59 F00060 - Identify susceptible influencers TA10 \n",
+ "60 F00061 - Microtargeting TA10 \n",
+ "61 F00062 - Detect when Dormant account turns active TA11 \n",
+ "62 F00063 - Linguistic change analysis TA11 \n",
+ "63 F00064 - Monitor reports of account takeover TA11 \n",
+ "64 F00065 - Sentiment change analysis TA11 \n",
+ "65 F00066 - Use language errors, time to respond ... TA11 \n",
+ "66 F00067 - Data forensics \n",
+ "67 F00068 - Resonance analysis \n",
+ "68 F00069 - Track Russian media and develop analy... \n",
+ "69 F00070 - Full spectrum analytics ALL \n",
+ "70 F00071 - Network analysis Identify/cultivate/s... \n",
+ "71 F00072 - network analysis to identify central ... \n",
+ "72 F00073 - collect intel/recon on black/covert c... \n",
+ "73 F00074 - identify relevant fence-sitter commun... \n",
+ "74 F00075 - leverage open-source information \n",
+ "75 F00076 - Monitor/collect audience engagement d... \n",
+ "76 F00077 - Model for bot account behavior TA03 \n",
+ "77 F00078 - Monitor account level activity in soc... TA03 \n",
+ "78 F00079 - Network anomaly detection TA05 \n",
+ "79 F00080 - Hack the polls/ content yourself TA07 \n",
+ "80 F00081 - Need way for end user to report opera... TA09 \n",
+ "81 F00082 - Control the US \"slang\" translation bo... TA11 \n",
+ "82 F00083 - Build and own meme generator, then tr... TA11 \n",
+ "83 F00084 - Track individual bad actors TA03 \n",
+ "84 F00085 - detection of a weak signal through gl... \n",
+ "85 F00086 - Outpace Competitor Intelligence Capab... TA02 \n",
+ "86 F00087 - Improve Indications and Warning \n",
+ "87 F00088 - Revitalize an “active measures workin... \n",
+ "88 F00089 - target/name/flag \"grey zone\" website ... TA04 \n",
+ "89 F00090 - Match Punitive Tools with Third-Party... TA01 \n",
+ "90 F00091 - Partner to develop analytic methods &... TA01 \n",
+ "91 F00092 - daylight TA09 \n",
+ "92 F00093 - S4d detection and re-allocation appro... TA03 \n",
+ "93 F00094 - Registries alert when large batches o... TA07 \n",
+ "\n",
+ " tactic_name \n",
+ "0 Strategic Planning \n",
+ "1 Strategic Planning \n",
+ "2 Strategic Planning \n",
+ "3 Strategic Planning \n",
+ "4 Strategic Planning \n",
+ "5 Strategic Planning \n",
+ "6 Objective Planning \n",
+ "7 Develop People \n",
+ "8 Develop People \n",
+ "9 Develop People \n",
+ "10 Develop People \n",
+ "11 Develop People \n",
+ "12 Develop People \n",
+ "13 Develop People \n",
+ "14 Develop People \n",
+ "15 Develop People \n",
+ "16 Develop People \n",
+ "17 Develop People \n",
+ "18 Develop Networks \n",
+ "19 Develop Networks \n",
+ "20 Develop Networks \n",
+ "21 Develop Networks \n",
+ "22 Develop Networks \n",
+ "23 Develop Networks \n",
+ "24 Microtargeting \n",
+ "25 Microtargeting \n",
+ "26 Microtargeting \n",
+ "27 Develop Content \n",
+ "28 Develop Content \n",
+ "29 Develop Content \n",
+ "30 Develop Content \n",
+ "31 Develop Content \n",
+ "32 Develop Content \n",
+ "33 Develop Content \n",
+ "34 Develop Content \n",
+ "35 Develop Content \n",
+ "36 Develop Content \n",
+ "37 Develop Content \n",
+ "38 Develop Content \n",
+ "39 Develop Content \n",
+ "40 Channel Selection \n",
+ "41 Channel Selection \n",
+ "42 Channel Selection \n",
+ "43 Pump Priming \n",
+ "44 Pump Priming \n",
+ "45 Pump Priming \n",
+ "46 Pump Priming \n",
+ "47 Pump Priming \n",
+ "48 Pump Priming \n",
+ "49 Pump Priming \n",
+ "50 Exposure \n",
+ "51 Exposure \n",
+ "52 Exposure \n",
+ "53 Exposure \n",
+ "54 Exposure \n",
+ "55 Exposure \n",
+ "56 Exposure \n",
+ "57 Go Physical \n",
+ "58 Go Physical \n",
+ "59 Go Physical \n",
+ "60 Go Physical \n",
+ "61 Persistence \n",
+ "62 Persistence \n",
+ "63 Persistence \n",
+ "64 Persistence \n",
+ "65 Persistence \n",
+ "66 None \n",
+ "67 None \n",
+ "68 None \n",
+ "69 None \n",
+ "70 None \n",
+ "71 None \n",
+ "72 None \n",
+ "73 None \n",
+ "74 None \n",
+ "75 None \n",
+ "76 Develop People \n",
+ "77 Develop People \n",
+ "78 Microtargeting \n",
+ "79 Channel Selection \n",
+ "80 Exposure \n",
+ "81 Persistence \n",
+ "82 Persistence \n",
+ "83 Develop People \n",
+ "84 None \n",
+ "85 Objective planning \n",
+ "86 None \n",
+ "87 None \n",
+ "88 Develop Networks \n",
+ "89 Strategic Planning \n",
+ "90 Strategic Planning \n",
+ "91 Exposure \n",
+ "92 Develop People \n",
+ "93 Channel Selection "
+ ]
+ },
+ "execution_count": 3,
+ "metadata": {},
+ "output_type": "execute_result"
+ }
+ ],
+ "source": [
+ "vars(amitt)['df_detections']"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 3,
+ "metadata": {},
+ "outputs": [
+ {
+ "data": {
+ "text/html": [
+ "