F00062 "Detect when Dormant account turns active"

Tactic stage: TA11

Summary:

Detects techniques:

T0007 Create Inauthentic Social Media Pages and Groups
T0011 Compromise legitimate accounts

DISARM Frameworks provided CC-by-SA by the DISARM Foundation