Merge pull request #910 from MISP/feature/disarm

Feature/disarm

galaxies/disarm-actortypes.json

@@ -0,0 +1,24 @@
+{
+  "description": "DISARM is a framework designed for describing and understanding disinformation incidents.",
+  "icon": "user-secret",
+  "kill_chain_order": {
+    "sectors": [
+      "Nonprofit",
+      "Civil Society",
+      "Government",
+      "Academic",
+      "Activist",
+      "General Public",
+      "Social Media Company",
+      "Other Tech Company",
+      "Other Company",
+      "Media",
+      ""
+    ]
+  },
+  "name": "Actor Types",
+  "namespace": "disarm",
+  "type": "disarm-actortypes",
+  "uuid": "1658af88-b847-532d-adc9-efaea8604f14",
+  "version": 1
+}

galaxies/disarm-countermeasures.json

@@ -0,0 +1,54 @@
+{
+  "description": "DISARM is a framework designed for describing and understanding disinformation incidents.",
+  "icon": "shield-alt",
+  "kill_chain_order": {
+    "metatechniques": [
+      "Resilience",
+      "Diversion",
+      "Daylight",
+      "Friction",
+      "Removal",
+      "Scoring",
+      "Metatechnique",
+      "Data Pollution",
+      "Dilution",
+      "Countermessaging",
+      "Verification",
+      "Cleaning",
+      "Targeting",
+      "Reduce Resources"
+    ],
+    "responsetypes": [
+      "Detect",
+      "Deny",
+      "Disrupt",
+      "Degrade",
+      "Deceive",
+      "Destroy",
+      "Deter"
+    ],
+    "tactics": [
+      "Plan Strategy",
+      "Plan Objectives",
+      "Microtarget",
+      "Develop Content",
+      "Select Channels and Affordances",
+      "Conduct Pump Priming",
+      "Deliver Content",
+      "Drive Offline Activity",
+      "Persist in the Information Environment",
+      "Assess Effectiveness",
+      "Target Audience Analysis",
+      "Develop Narratives",
+      "Establish Social Assets",
+      "Establish Legitimacy",
+      "Maximise Exposure",
+      "Drive Online Harms"
+    ]
+  },
+  "name": "Countermeasures",
+  "namespace": "disarm",
+  "type": "disarm-countermeasures",
+  "uuid": "9a3ac024-7c65-5ac0-87c4-eaed2238eec8",
+  "version": 1
+}

galaxies/disarm-detections.json

@@ -0,0 +1,38 @@
+{
+  "description": "DISARM is a framework designed for describing and understanding disinformation incidents.",
+  "icon": "bell",
+  "kill_chain_order": {
+    "responsetypes": [
+      "Detect",
+      "Deny",
+      "Disrupt",
+      "Degrade",
+      "Deceive",
+      "Destroy",
+      "Deter"
+    ],
+    "tactics": [
+      "Plan Strategy",
+      "Plan Objectives",
+      "Microtarget",
+      "Develop Content",
+      "Select Channels and Affordances",
+      "Conduct Pump Priming",
+      "Deliver Content",
+      "Drive Offline Activity",
+      "Persist in the Information Environment",
+      "Assess Effectiveness",
+      "Target Audience Analysis",
+      "Develop Narratives",
+      "Establish Social Assets",
+      "Establish Legitimacy",
+      "Maximise Exposure",
+      "Drive Online Harms"
+    ]
+  },
+  "name": "Detections",
+  "namespace": "disarm",
+  "type": "disarm-detections",
+  "uuid": "bb61e6f3-b2bd-5c7d-929c-b6f292ccc56a",
+  "version": 1
+}

galaxies/disarm-techniques.json

@@ -2,7 +2,7 @@
   "description": "DISARM is a framework designed for describing and understanding disinformation incidents.",
   "icon": "map",
   "kill_chain_order": {
-    "disarm-tactics": [
+    "tactics": [
       "Plan Strategy",
       "Plan Objectives",
       "Microtarget",
@@ -21,9 +21,9 @@
       "Drive Online Harms"
     ]
   },
-  "name": "DISARM Techniques",
+  "name": "Techniques",
   "namespace": "disarm",
-  "type": "disarm",
-  "uuid": "a9532e45-d438-502a-a469-892007ba0e4b",
+  "type": "disarm-techniques",
+  "uuid": "a90f2bb6-11e1-58a7-9962-ba37886720ec",
   "version": 1
 }