get_procedure_examples_by_tactic
Retrieve real-world examples of how threat groups implement specific ATT&CK tactics to understand attack patterns and enhance security analysis.
Instructions
Get procedure examples by tactic (shows how groups use techniques in this tactic)
Args: tactic: Tactic name to check procedure examples for domain: Domain name ('enterprise', 'mobile', or 'ics') include_description: Whether to include description in the output (default is False)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tactic | Yes | ||
| domain | No | enterprise | |
| include_description | No |