{ "cells": [ { "cell_type": "markdown", "metadata": {}, "source": [ "# Test area for DISARM code" ] }, { "cell_type": "code", "execution_count": 2, "metadata": {}, "outputs": [ { "name": "stdout", "output_type": "stream", "text": [ "dict_keys(['df_phases', 'df_frameworks', 'df_techniques', 'df_tasks', 'df_incidents', 'df_externalgroups', 'df_tools', 'df_examples', 'df_counters', 'df_detections', 'df_actortypes', 'df_resources', 'df_responsetypes', 'df_metatechniques', 'it', 'df_tactics', 'df_playbooks', 'df_techniques_per_tactic', 'df_counters_per_tactic', 'phases', 'tactics', 'techniques', 'counters', 'metatechniques', 'actortypes', 'resources', 'num_tactics', 'cross_counterid_techniqueid', 'cross_counterid_resourceid', 'cross_counterid_actortypeid', 'cross_detectionid_techniqueid', 'cross_detectionid_resourceid', 'cross_detectionid_actortypeid'])\n" ] }, { "data": { "text/html": [ "
| \n", " | disarm_id\n", " | technique_id\n", " | 
|---|---|---|
| 0\n", " | C00006\n", " | T0007\n", " | 
| 0\n", " | C00006\n", " | T0015\n", " | 
| 0\n", " | C00006\n", " | T0018\n", " | 
| 0\n", " | C00006\n", " | T0043\n", " | 
| 0\n", " | C00006\n", " | T0053\n", " | 
| ...\n", " | ...\n", " | ...\n", " | 
| 135\n", " | C00219\n", " | T0025\n", " | 
| 136\n", " | C00220\n", " | \n", " | 
| 137\n", " | C00221\n", " | \n", " | 
| 138\n", " | C00222\n", " | \n", " | 
| 139\n", " | C00223\n", " | \n", " | 
909 rows × 2 columns
\n", "| \n", " | disarm_id\n", " | technique_id\n", " | Weight\n", " | 
|---|---|---|---|
| 0\n", " | C00006\n", " | T0007\n", " | 1\n", " | 
| 0\n", " | C00006\n", " | T0015\n", " | 1\n", " | 
| 0\n", " | C00006\n", " | T0018\n", " | 1\n", " | 
| 0\n", " | C00006\n", " | T0043\n", " | 1\n", " | 
| 0\n", " | C00006\n", " | T0053\n", " | 1\n", " | 
| ...\n", " | ...\n", " | ...\n", " | ...\n", " | 
| 134\n", " | C00216\n", " | T0018\n", " | 1\n", " | 
| 134\n", " | C00216\n", " | T0057\n", " | 1\n", " | 
| 135\n", " | C00219\n", " | T0024\n", " | 1\n", " | 
| 135\n", " | C00219\n", " | T0026\n", " | 1\n", " | 
| 135\n", " | C00219\n", " | T0025\n", " | 1\n", " | 
881 rows × 3 columns
\n", "| \n", " | disarm_id\n", " | name\n", " | summary\n", " | disarm_id_incident\n", " | name_incident\n", " | disarm_id_technique\n", " | name_technique\n", " | 
|---|---|---|---|---|---|---|---|
| 0\n", " | IT00000001\n", " | buy FB targeted ads\n", " | \n", " | I00002\n", " | #VaccinateUS\n", " | T0018\n", " | Purchase advertisements\n", " | 
| 1\n", " | IT00000010\n", " | Targeted FB paid ads\n", " | \n", " | I00005\n", " | Brexit vote\n", " | T0018\n", " | Purchase advertisements\n", " | 
| 2\n", " | IT00000057\n", " | Targeted FB paid ads\n", " | \n", " | I00017\n", " | US presidential elections\n", " | T0018\n", " | Purchase advertisements\n", " | 
| 3\n", " | IT00000002\n", " | Promote \"funding\" campaign\n", " | \n", " | I00002\n", " | #VaccinateUS\n", " | T0017\n", " | Conduct Fundraising Campaigns\n", " | 
| 4\n", " | IT00000003\n", " | create web-site - information pollution\n", " | \n", " | I00002\n", " | #VaccinateUS\n", " | T0019\n", " | Generate information pollution\n", " | 
| ...\n", " | ...\n", " | ...\n", " | ...\n", " | ...\n", " | ...\n", " | ...\n", " | ...\n", " | 
| 181\n", " | IT00000127\n", " | Promote fake “experts” with impressive (and sc...\n", " | \n", " | I00044\n", " | JadeHelm exercise\n", " | T0009\n", " | Create fake experts\n", " | 
| 182\n", " | IT00000130\n", " | (Distort) Kremlin-controlled RT cited Russian ...\n", " | \n", " | I00047\n", " | Sea of Azov\n", " | T0023\n", " | Distort facts\n", " | 
| 183\n", " | IT00000163\n", " | Distorted, saccharine “news” about the Chinese...\n", " | \n", " | I00053\n", " | China Huawei CFO Arrest\n", " | T0023\n", " | Distort facts\n", " | 
| 184\n", " | IT00000174\n", " | Memes... anti-Isreal/USA/West, conspiracy narr...\n", " | \n", " | I00056\n", " | Iran Influence Operations\n", " | T0022\n", " | Conspiracy narratives\n", " | 
| 185\n", " | IT00000175\n", " | Fake news/synthetic web-sites\n", " | \n", " | I00056\n", " | Iran Influence Operations\n", " | T0008\n", " | Create fake or imposter news sites\n", " | 
186 rows × 7 columns
\n", "| \n", " | disarm_id\n", " | name\n", " | summary\n", " | incident_id\n", " | technique_id\n", " | 
|---|---|---|---|---|---|
| 0\n", " | IT00000001\n", " | buy FB targeted ads\n", " | \n", " | I00002\n", " | T0018\n", " | 
| 1\n", " | IT00000010\n", " | Targeted FB paid ads\n", " | \n", " | I00005\n", " | T0018\n", " | 
| 2\n", " | IT00000057\n", " | Targeted FB paid ads\n", " | \n", " | I00017\n", " | T0018\n", " | 
| 3\n", " | IT00000002\n", " | Promote \"funding\" campaign\n", " | \n", " | I00002\n", " | T0017\n", " | 
| 4\n", " | IT00000003\n", " | create web-site - information pollution\n", " | \n", " | I00002\n", " | T0019\n", " | 
| ...\n", " | ...\n", " | ...\n", " | ...\n", " | ...\n", " | ...\n", " | 
| 181\n", " | IT00000127\n", " | Promote fake “experts” with impressive (and sc...\n", " | \n", " | I00044\n", " | T0009\n", " | 
| 182\n", " | IT00000130\n", " | (Distort) Kremlin-controlled RT cited Russian ...\n", " | \n", " | I00047\n", " | T0023\n", " | 
| 183\n", " | IT00000163\n", " | Distorted, saccharine “news” about the Chinese...\n", " | \n", " | I00053\n", " | T0023\n", " | 
| 184\n", " | IT00000174\n", " | Memes... anti-Isreal/USA/West, conspiracy narr...\n", " | \n", " | I00056\n", " | T0022\n", " | 
| 185\n", " | IT00000175\n", " | Fake news/synthetic web-sites\n", " | \n", " | I00056\n", " | T0008\n", " | 
186 rows × 5 columns
\n", "| \n", " | disarm_id\n", " | name\n", " | objecttype\n", " | summary\n", " | year_started\n", " | attributions_seen\n", " | found_in_country\n", " | urls\n", " | notes\n", " | when_added\n", " | found_via\n", " | longname\n", " | 
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 30\n", " | I00031\n", " | antivax\n", " | apt\n", " | \n", " | 2018\n", " | Russia\n", " | World\n", " | https://ajph.aphapublications.org/doi/pdf/10.2...\n", " | \n", " | 2019-02-24\n", " | OII\n", " | I00031 - antivax\n", " | 
| 32\n", " | I00033\n", " | China 50cent Army\n", " | apt\n", " | 50cent Army is a CCP “tool” - “massive secret ...\n", " | 2014\n", " | China\n", " | China\n", " | https://gking.harvard.edu/files/gking/files/ho...\n", " | campaign (multiple incidents, e.g. Shanshan ri...\n", " | 2019-02-24\n", " | OII\n", " | I00033 - China 50cent Army\n", " | 
| \n", " | disarm_id\n", " | name\n", " | name_DE\n", " | tactic_id\n", " | summary\n", " | summary_DE\n", " | longname\n", " | 
|---|---|---|---|---|---|---|---|
| 0\n", " | T0001\n", " | 5Ds (dismiss, distort, distract, dismay, divide)\n", " | \n", " | TA01\n", " | Nimmo's \"4Ds of propaganda\": dismiss, distort,...\n", " | \n", " | T0001 - 5Ds (dismiss, distort, distract, disma...\n", " | 
| 1\n", " | T0002\n", " | Facilitate State Propaganda\n", " | \n", " | TA01\n", " | Organize citizens around pro-state messaging. ...\n", " | \n", " | T0002 - Facilitate State Propaganda\n", " | 
| 2\n", " | T0003\n", " | Leverage Existing Narratives\n", " | \n", " | TA01\n", " | Use or adapt existing narrative themes, where ...\n", " | \n", " | T0003 - Leverage Existing Narratives\n", " | 
| 3\n", " | T0004\n", " | Devise Competing Narratives\n", " | \n", " | TA01\n", " | Advance competing narratives connected to same...\n", " | \n", " | T0004 - Devise Competing Narratives\n", " | 
| 4\n", " | T0006\n", " | Develop Narrative Concepts\n", " | \n", " | TA02\n", " | The promotion of beneficial master narratives ...\n", " | \n", " | T0006 - Develop Narrative Concepts\n", " | 
| ...\n", " | ...\n", " | ...\n", " | ...\n", " | ...\n", " | ...\n", " | ...\n", " | ...\n", " | 
| 66\n", " | T0068\n", " | Respond to breaking news event\n", " | \n", " | TA02\n", " | Media attention on a story or event is heighte...\n", " | \n", " | T0068 - Respond to breaking news event\n", " | 
| 67\n", " | T0069\n", " | Respond to active crisis\n", " | \n", " | TA02\n", " | Panic, rumors, and speculation are heightened ...\n", " | \n", " | T0069 - Respond to active crisis\n", " | 
| 68\n", " | T0070\n", " | Analyze existing communities\n", " | \n", " | TA02\n", " | Assess influence operation potential of existi...\n", " | \n", " | T0070 - Analyze existing communities\n", " | 
| 69\n", " | T0071\n", " | Find echo chambers\n", " | \n", " | TA13\n", " | Find or plan to create areas (social media gro...\n", " | \n", " | T0071 - Find echo chambers\n", " | 
| 70\n", " | T0072\n", " | Segment audiences\n", " | \n", " | TA13\n", " | Create audience segmentations by features of i...\n", " | \n", " | T0072 - Segment audiences\n", " | 
71 rows × 7 columns
\n", "