From 0c1b3f1f3a4330fbefdcbb275fac662af77017b0 Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Wed, 29 Jun 2022 13:40:54 +0200 Subject: [PATCH] new: [diamond-model-for-influence-operations] "The Diamond Model for Influence Operations Analysis" taxonomy added Ref: https://go.recordedfuture.com/hubfs/white-papers/diamond-model-influence-operations-analysis.pdf --- MANIFEST.json | 7 ++++- .../machinetag.json | 31 +++++++++++++++++++ 2 files changed, 37 insertions(+), 1 deletion(-) create mode 100644 diamond-model-for-influence-operations/machinetag.json diff --git a/MANIFEST.json b/MANIFEST.json index 4fe064d..bca0768 100644 --- a/MANIFEST.json +++ b/MANIFEST.json @@ -213,6 +213,11 @@ "name": "diamond-model", "version": 1 }, + { + "description": "The diamond model for influence operations analysis is a framework that leads analysts and researchers toward a comprehensive understanding of a malign influence campaign by addressing the socio-political, technical, and psychological aspects of the campaign. The diamond model for influence operations analysis consists of 5 components: 4 corners and a core element. The 4 corners are divided into 2 axes: influencer and audience on the socio-political axis, capabilities and infrastructure on the technical axis. Narrative makes up the core of the diamond.", + "name": "diamond-model-for-influence-operations", + "version": 1 + }, { "description": "A subset of Information Security Marking Metadata ISM as required by Executive Order (EO) 13526. As described by DNI.gov as Data Encoding Specifications for Information Security Marking Metadata in Controlled Vocabulary Enumeration Values for ISM", "name": "dni-ism", @@ -705,5 +710,5 @@ } ], "url": "https://raw.githubusercontent.com/MISP/misp-taxonomies/main/", - "version": "20220623" + "version": "20220629" } diff --git a/diamond-model-for-influence-operations/machinetag.json b/diamond-model-for-influence-operations/machinetag.json new file mode 100644 index 0000000..65ed2c7 --- /dev/null +++ b/diamond-model-for-influence-operations/machinetag.json @@ -0,0 +1,31 @@ +{ + "namespace": "diamond-model-for-influence-operations", + "expanded": "The Diamond Model for Influence Operations Analysis", + "description": "The diamond model for influence operations analysis is a framework that leads analysts and researchers toward a comprehensive understanding of a malign influence campaign by addressing the socio-political, technical, and psychological aspects of the campaign. The diamond model for influence operations analysis consists of 5 components: 4 corners and a core element. The 4 corners are divided into 2 axes: influencer and audience on the socio-political axis, capabilities and infrastructure on the technical axis. Narrative makes up the core of the diamond.", + "version": 1, + "refs": [ + "https://go.recordedfuture.com/hubfs/white-papers/diamond-model-influence-operations-analysis.pdf" + ], + "predicates": [ + { + "value": "Influencer", + "expanded": "The influencer is an individual or organization that is conducting malign influence activity." + }, + { + "value": "Capabilities", + "expanded": "Capabilities are the influencer’s TTPs. Studying the way influencers plan, test, and execute their operations can enable analysts to be more proactive in defending against malign influence and to discern how to neutralize harmful narratives when they are identified. " + }, + { + "value": "Infrastructure", + "expanded": "The infrastructure used by influencers can include print media, television, digital platforms like websites, mobile phones, mobile applications, and more. " + }, + { + "value": "Audience", + "expanded": "The audience is the intended target of the influence operation. The audience can range in size from a single individual to a large international audience. " + }, + { + "value": "Narrative", + "expanded": "The narrative is often key to identifying who would be affected by the story and who would be motivated to propagate that particular message. " + } + ] +}