Counter C00197: remove suspicious accounts

Summary: Standard reporting for false profiles (identity issues). Includes detecting hijacked accounts and reallocating them - if possible, back to original owners.
Playbooks:
Metatechnique: M005 - Removal
Resources needed: R003 - money
Belongs to tactic stage: TA15

Actor types	Sectors
A004 activist	S002
A031 social media platform adminstrator	S007

Counters these Tactics

Counters these Techniques

Seen in incidents

DO NOT EDIT ABOVE THIS LINE - PLEASE ADD NOTES BELOW