get_objects_by_content
Search MITRE ATT&CK knowledge base objects by content in their descriptions to find relevant threat intelligence, techniques, and actors.
Instructions
Get objects by the content of their description
Args: name: Name of the object to search for object_type: The STIX object type (must be 'attack-pattern', 'malware', 'tool', 'intrusion-set', 'campaign', 'course-of-action', 'x-mitre-matrix', 'x-mitre-tactic', 'x-mitre-data-source', 'x-mitre-data-component', or 'x-mitre-asset') domain: Domain name ('enterprise', 'mobile', or 'ics') include_description: Whether to include description in the output (default is False)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| content | Yes | ||
| object_type | Yes | ||
| domain | No | enterprise | |
| include_description | No |