get_software_used_by_campaign
Identify software associated with a specific MITRE ATT&CK campaign to analyze threat actor tools and support security investigations.
Instructions
Get software used by campaign
Args: campaign_stix_id: Campaign STIX ID to look up what software has been used in it domain: Domain name ('enterprise', 'mobile', or 'ics') include_description: Whether to include description in the output (default is False)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| campaign_stix_id | Yes | ||
| domain | No | enterprise | |
| include_description | No |