F00009 "Detect abnormal events"

Tactic stage: TA15

Summary:

Detects techniques:

T0007 Create Inauthentic Social Media Pages and Groups

DISARM Frameworks provided CC-by-SA by the DISARM Foundation