Deny involvement
From ADTAC Disinformation Inventory
T0041
Without "smoking gun" proof (and even with proof), the incident creator can or will deny involvement. This technique also leverages the attacker advantages outlined in T0040 "Demand unsurmountable proof", specifically the asymmetric disadvantage for truth-tellers in a "firehose of misinformation" environment.[1]