AMITT/counters/C00116.md

Counter C00116: Provide proof of involvement

• Summary:

• Playbooks:

• Metatechnique: M003 - daylight

• Resources needed:

• Belongs to tactic stage: TA08

Counters these Tactics

Counters these Techniques
T0041 Deny involvement

Seen in incidents

DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW