F00043 "Monitor for creation of fake known personas"

Tactic stage: TA07

Summary: Platform companies and some information security companies (e.g. ZeroFox) do this.

Detects techniques:

DISARM Frameworks provided CC-by-SA by the DISARM Foundation