get_parent_technique_of_subtechnique
Identify the parent ATT&CK technique for a given subtechnique by providing its STIX ID and domain to clarify hierarchical relationships in threat intelligence analysis.
Instructions
Get parent technique of subtechnique
Args: technique_stix_id: Subtechnique STIX ID to check what its parent technique is domain: Domain name ('enterprise', 'mobile', or 'ics') include_description: Whether to include description in the output (default is False)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| technique_stix_id | Yes | ||
| domain | No | enterprise | |
| include_description | No |