get_objects_modified_after
Retrieve MITRE ATT&CK objects updated after a specified timestamp to track recent changes in threat intelligence across enterprise, mobile, or ICS domains.
Instructions
Get objects modified after a specific timestamp
Args: timestamp: ISO format timestamp string (e.g., '2020-01-01T00:00:00Z') domain: Domain name ('enterprise', 'mobile', or 'ics') include_description: Whether to include description in the output (default is False)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| timestamp | Yes | ||
| domain | No | enterprise | |
| include_description | No |