AMITT/tactics/TA12.md
2021-02-20 18:08:10 +00:00

778 B

Tactic TA12: Measure Effectiveness

  • Summary: Measure effectiveness of incident, for use in planning future events

  • Belongs to phase: P04

Tasks
TK0028 evaluation
TK0029 post-mortem
TK0030 after-action analysis
Techniques
Counters Response types
C00147 Make amplification of social media ports expire (e.g. can't like/ retweet after n days) D3 Disrupt
C00148 Add random links to network graphs D4 Degrade
C00149 Poison the monitoring & evaluation data D4 Degrade

DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW