get_groups_using_software
Identify threat groups using specific software by analyzing MITRE ATT&CK data to enhance security investigations and threat intelligence.
Instructions
Get groups using software by software name
Args: software_stix_id: Software STIX ID to check which groups use the given software domain: Domain name ('enterprise', 'mobile', or 'ics') include_description: Whether to include description in the output (default is False)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| software_stix_id | Yes | ||
| domain | No | enterprise | |
| include_description | No |