get_datacomponents_detecting_technique
Identify detection methods for specific MITRE ATT&CK techniques by finding relevant datacomponents based on technique ID and domain.
Instructions
Get datacomponents that detect the given technique
Args: technique_stix_id: Technique STIX ID to check what datacomponents detect it domain: Domain name ('enterprise', 'mobile', or 'ics') include_description: Whether to include description in the output (default is False)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| technique_stix_id | Yes | ||
| domain | No | enterprise | |
| include_description | No |