AMITT/techniques/T0041.md
2021-05-01 17:17:30 +01:00

816 B

Technique T0041: Deny involvement

  • Summary: Without "smoking gun" proof (and even with proof), incident creator can or will deny involvement. This technique also leverages the attacker advantages outlined in T0040 "Demand unsurmountable proof", specifically the asymmetric disadvantage for truth-tellers in a "firehose of misinformation" environment.

  • Belongs to tactic stage: TA08

Incident Descriptions given for this incident
Counters Response types
C00115 Expose actor and intentions D2 Deny
C00116 Provide proof of involvement D2 Deny
C00184 Media exposure D4 Degrade

DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW