AMITT/counters/C00074.md
2021-02-19 08:00:20 +00:00

1.6 KiB

Identify identical content and mass deplatform

  • Type: Counter TTP

  • Name: Identify identical content and mass deplatform

  • Id: C00074

  • Summary:

  • Playbooks: In all cases some checks need to prevent deplatforming of highly correlated organic traffic such as a community group copy/pasting their bake sale advert. Playbook 1: Platform adds a hash of the post to the post metadata and make it publicly available (content addressing). Scrape for duplicate content and deplatform the content/users across affected platforms. Playbook 2: Platform adds plagiarism score metadata to a post and makes it publicly available. Scrape for duplicate content and deplatform the content/users across affected platforms. Playbook 3: Use message hashing and fuzzy hashing to detect identical/similar content. Playbook 4: Use plagiarism algorithm to detect similar blog posts. Playbook 5: Use basic web scraping techniques, Google dorks, etc to identify similar head lines, uniques phrases, authorship, embedded links and any other correlating data point.

  • Metatechnique: cleaning

  • Resources needed: platform_admin,platform_admin:socialmedia

  • Belongs to tactic stage: TA06

Counters these Tactics
Counters these Techniques
C00074 Conspiracy narratives
C00074 Create fake research
C00074 Leak altered documents
Seen in incidents

DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW