Cogsec AM!TT Adversarial Misinformation Slides

Data comes from human intelligence sources.

Go/no-go is posted to a Slack chat channel.

Create cases in HIVE and MISP.

Record data to MISP and DKAN.

HIVE used to create initial case incident for a novel piece of disinformation.

MISP used to store/share/disseminate structured information (ex. which websites, accounts, found connected.)

MISP/DKAN used to support automation tools (ex. scraping the web of related accounts once created, finding similar messages, ...)

• Slack Chat
• HIVE Incident Response
• DKAN Data Portal
• MISP Threat Intelligence Sharing