T0129.009 "Remove Post Origins"

Tactic stage: TA11

Summary: Removing post origins refers to the elimination of evidence that indicates the initial source of operation content, often to complicate attribution. An influence operation may remove post origins by deleting watermarks, renaming files, or removing embedded links in its content.

Relationships

Has counters:

Detection methods include:

Datasets

Examples include:

Seen in incidents:

DISARM Frameworks provided CC-by-SA by the DISARM Foundation