F00018 "Follow the money"

Tactic stage: TA15

Summary: track funding sources

Detects techniques:

T0009 Create fake experts

DISARM Frameworks provided CC-by-SA by the DISARM Foundation