8bb63006b6
- Merged C00145 into C00178. Deleted C00145 - Updated text in C00144 - Added warning label to C000139 - Merged C00137 into C00149. Deleted C00137 - Moved C00090 to TA07 - Updated text in C00211 - Updated text in C00030 - Merged C00158 into C00073. Deleted C00158 - Merged C00102 into C00101. Deleted C00102 - Merged C00089 into C00101. Deleted C00089 - Added note to C00200 - Merged C00194 into C00174. Deleted C00194 - Merged C00151 into C00190. Deleted C00151 - Updated text in C00182 - Added warning to C00122 - Updated text in C00211 - Updated text in C00030 - Merged C00215 into C00012. Deleted C00215 - Merged C00214 into C00012. Deleted C000214 - Merged C00196 into C00012. Deleted C000196 - Updated text in C00111 - Merged C00167 into C00026. Deleted C00167 - Added warning to C00056 - Updated text in C00172 - Merged C00171 into C00107. Deleted C00171 - Updated text in C00103 - Merged C00110 into C00195. Deleted C00110 - Updated text in C00117 - Merged C00193 into C00188. Deleted C00193 - Merged C00204 into C00188. Deleted C00204 - Moved C00217 to detections F00094
1.0 KiB
1.0 KiB
Tactic TA11: Persistence
-
Summary: Keep incident 'alive', beyond the incident creators' efforts
-
Belongs to phase: P03
| Tasks |
|---|
| TK0023 retention |
| TK0024 customer relationship |
| TK0025 advocacy/ zealotry |
| TK0026 conversion |
| TK0027 keep recruiting/prospecting |
| Techniques |
|---|
| T0058 Legacy web content |
| T0059 Play the long game |
| T0060 Continue to amplify |
| Counters | Response types |
|---|---|
| C00131 Seize and analyse botnet servers | D2 Deny |
| C00138 Spam domestic actors with lawsuits | D3 Disrupt |
| C00139 Weaponise youtube content matrices | D3 Disrupt |
| C00143 (botnet) DMCA takedown requests to waste group time | D4 Degrade |
DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW