DISARM deploys cybersecurity best practices in the field of influence operations through a framework of Tactics, Techniques, and Procedures (TTPs), providing a standard language for analysts to share data about observed behaviours, enhancing collaboration across disparate defenders. DISARM supports use of its framework by encoding data regarding presence of TTPs in public third party reports.