# DISARM Framework — Influence Operation Techniques Reference

## Plan
- T0073 — Determine Target Audiences: Identify and profile target populations for influence operations
- T0074 — Determine Target Locations: Select geographic regions to focus influence activities
- T0075 — Develop Narratives: Create overarching storylines to frame influence content
- T0076 — Develop Competing Narratives: Create alternative narratives to counter existing information

## Prepare
- T0046 — Use Existing Narratives: Co-opt legitimate grievances or ongoing discussions
- T0047 — Develop Content: Create text, images, video, memes for distribution
- T0048 — Develop Online Personas: Create or reactivate fake/controlled social media accounts
- T0065 — Prepare Physical Infrastructure: Set up servers, domains, hosting for operations
- T0066 — Prepare Cyber Infrastructure: Configure technical infrastructure (VPNs, proxies, botnets)
- T0077 — Develop AI-Generated Content: Use generative AI to produce text, images, deepfakes

## Execute
- T0049 — Flood Information Space: Overwhelm channels with high-volume content
- T0050 — Amplify Existing Content: Boost reach of specific content through coordinated sharing
- T0056 — Amplify Existing Narratives: Increase visibility of narratives already circulating
- T0057 — Organize Events: Create real-world events to reinforce online narratives
- T0061 — Sell Merchandise: Commercialize narratives through products/merchandise

## Engage
- T0052 — Harass: Target individuals with threats, doxxing, or coordinated attacks
- T0053 — Co-opt Influencers: Recruit or manipulate legitimate voices to spread narratives
- T0054 — Infiltrate Existing Groups: Join and subvert legitimate online communities
- T0055 — Use Bots/Cyborgs: Deploy automated accounts for amplification
- T0058 — Use Fake Experts: Present controlled personas as authoritative voices

## Counter (Defensive)
- T0108 — Prebunk: Inoculate audiences against expected narratives before they appear
- T0109 — Debunk: Factcheck and counter specific false claims after publication
- T0110 — Expose Network: Reveal coordinated inauthentic behavior patterns
- T0111 — Reduce Amplification: Deplatform, throttle, or label inauthentic content
- T0112 — Media Literacy: Educate audiences to recognize manipulation techniques
