Engage Goals: EGO0001 Expose, EGO0003 Elicit
Engage Approach: EAP0001 Collect, EAP0002 Detect
Engage Actions: EAC0011 Pocket Litter, EAC0015 Information Manipulation
Name of Element: Deceptive Document Watermarks
Description of Element:
Goal: Track the dissemination of sensitive documents and identify potential leaks.
Approach: Embedding hidden watermarks in documents to track their movement.
Embed hidden watermarks within documents that reveal themselves only under specific conditions or when accessed by unauthorized parties. These watermarks can contain tracking information, decoy data, or even trigger alerts upon discovery.
Technical Context:
This element utilizes steganographic techniques to embed information within the document structure or metadata. The watermarks can be designed to be invisible to casual inspection but detectable through specialized tools or analysis. This aligns with the MITRE ATT&CK technique T1029 (Scheduled Transfer).
Other:
This element can be particularly effective in identifying insider threats or tracking the spread of confidential information.