get_campaigns_using_technique
Identify campaigns associated with a specific MITRE ATT&CK technique by its STIX ID to analyze threat actor activities and attack patterns across enterprise, mobile, or ICS domains.
Instructions
Get all campaigns in which a technique is used by its STIX ID
Args: technique_stix_id: Technique STIX ID to look up campaigns in which it is used domain: Domain name ('enterprise', 'mobile', or 'ics') include_description: Whether to include description in the output (default is False)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| technique_stix_id | Yes | ||
| domain | No | enterprise | |
| include_description | No |