T0089.002 "Create Inauthentic Documents"

Tactic stage: TA06

Summary: Create inauthentic documents intended to appear as if they are authentic non-public documents. These documents can be "leaked" during later stages in the operation.

Relationships

Has counters:

Detection methods include:

Datasets

Examples include:

Seen in incidents: