AMITT/techniques/T0041.md

Deny involvement

• Type: Technique

• Name: Deny involvement

• Id: T0041

• Summary: Without "smoking gun" proof (and even with proof), incident creator can or will deny involvement. This technique also leverages the attacker advantages outlined in T0040 "Demand unsurmountable proof", specifically the asymmetric disadvantage for truth-tellers in a "firehose of misinformation" environment.

• Tactic: TA08

Incident	Descriptions given for this incident

Counters
C00116 Provide proof of involvement

DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW