Counter C00197: remove suspicious accounts

Summary: Standard reporting for false profiles (identity issues). Includes detecting hijacked accounts and reallocating them - if possible, back to original owners.
Playbooks:
Metatechnique: M005 - removal
Resources needed: R003 - money
Belongs to tactic stage: TA03

Actor types	Sectors
A004 activist	S002
A031 social media platform adminstrator	S007

Counters these Tactics

Counters these Techniques
T0009 Create fake experts
T0007 Create fake Social Media Profiles / Pages / Groups
T0011 Hijack legitimate account

Seen in incidents

DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW