F00010 "Detect abnormal groups"

Tactic stage: TA15

Summary:

Detects techniques:

T0007 Create Inauthentic Social Media Pages and Groups

DISARM Frameworks provided CC-by-SA by the DISARM Foundation