get_subtechniques_of_technique
Retrieve subtechniques for any MITRE ATT&CK technique to analyze attack chains and understand detailed threat behaviors.
Instructions
Get subtechniques of technique
Args: technique_stix_id: Technique STIX ID to check what its subtechniques are domain: Domain name ('enterprise', 'mobile', or 'ics') include_description: Whether to include description in the output (default is False)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| technique_stix_id | Yes | ||
| domain | No | enterprise | |
| include_description | No |