Engage Goals: EGO0001 Expose, EGO0003 Elicit
Engage Approach: EAP0001 Collect, EAP0002 Detect
Engage Actions: EAC0015 Information Manipulation
Name of Element: Fabricated Application Logs
Description of Element:
This element involves creating fake entries in the user’s application logs, indicating actions or events that did not actually occur.
Technical Context:
Placement: Within the user’s application log files or database.
This element can be used to mislead attackers attempting to reconstruct user activity or to gather information about their interests and intentions.
Other:
Att&ck/Engage Mapping: T1053 Scheduled Task/Job / E1504 Decoy Content
This element requires careful planning and execution to ensure that it does not interfere with the normal operation of the application.