AMITT/counters/C00131.md

Counter C00131: Seize and analyse botnet servers

• Summary:

• Playbooks:

• Metatechnique: M005 - removal

• Resources needed:

• Belongs to tactic stage: TA11

Actors	Sectors
A029 server admininistrator	Other Tech Company

Counters these Tactics

Counters these Techniques
T0049 Flooding
T0054 Twitter bots amplify
T0060 Continue to amplify

Seen in incidents

DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW