get_groups_attributing_to_campaign
Identify threat groups attributed to a specific MITRE ATT&CK campaign by providing its STIX ID, enabling attribution analysis and threat intelligence research.
Instructions
Get groups attributing to campaign
Args: campaign_stix_id: Campaign STIX ID to look up what groups have been attributed to it domain: Domain name ('enterprise', 'mobile', or 'ics') include_description: Whether to include description in the output (default is False)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| campaign_stix_id | Yes | ||
| domain | No | enterprise | |
| include_description | No |