DISARM · diagnose

Reconstruct a campaign.

Describe an operation by answering plain-language questions along the Plan → Prepare → Execute → Assess chain. Each answer lights up DISARM codes. At the end you get a reconstructed campaign profile, with no AI, by deterministic mapping alone.

4 phases16 tactics391 techniques
Campaign identificationoptional · for researchers
Living dossier · 0 code(s) pinned
Act 1 / 4
  1. P01act 1
    Plan

    Define the strategy: what end state the operation is after.

    ·
  2. P02act 2
    Prepare

    Prepare the means: fake actors, content, channels, targeting.

    ·
  3. P03act 3
    Execute

    Deploy and amplify: deliver, flood, harass.

    ·
  4. P04act 4
    Assess

    Assess effects and adjust for what comes next.

    ·
P01 · Act 1

Plan

Define the strategy: what end state the operation is after.

What was the operation's main objective?multiple choice
Was the target segmented?single choice

Source: DISARM Foundation , framework published under an open licence (CC), in the lineage of MITRE ATT&CK. French adaptation and localisation by Elie Abousaab, as part of the doctoral thesis Epistemic security and the mechanisms of FIMI in France and the European Union, CEDS Paris. This interface is a teaching aid, not an original work of the framework.

DISARM codes evolve; validate against the current version.·Version: DISARM master, captured 1 June 2026·Captured: 2026-06-01·No cookies · no tracking