F00072 "network analysis to identify central users in the pro-Russia activist community."

Tactic stage:

Summary: It is possible that some of these are bots or trolls and could be flagged for suspension for violating Twitter’s terms of service.

Detects techniques: