DISARM Framework

DISARM is a framework designed for describing and understanding disinformation incidents.

This connector import DISARM framework into OpenCTI as Attack Pattern STIX SDO, allowing user to map FIMI and disinformation behaviors.

Each Techniques of the DISARM framework is added as an Attack Pattern, mapped to its proper tactic and linked to its parent of child techniques.

A link to the technique’s page on the DISARM Github repository let you pivot to the source of the framework.