get_object_by_attack_id
Retrieve MITRE ATT&CK framework objects by their unique ID to access detailed information about threats, techniques, and defenses for security analysis.
Instructions
Get object by ATT&CK ID (case-sensitive)
Args: attack_id: ATT&CK ID to find associated object for stix_type: TheSTIX object type (must be 'attack-pattern', 'malware', 'tool', 'intrusion-set', 'campaign', 'course-of-action', 'x-mitre-matrix', 'x-mitre-tactic', 'x-mitre-data-source', 'x-mitre-data-component', or 'x-mitre-asset') domain: Domain name ('enterprise', 'mobile', or 'ics') include_description: Whether to include description in the output (default is False)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| attack_id | Yes | ||
| stix_type | Yes | ||
| domain | No | enterprise | |
| include_description | No |