get_techniques_used_by_group
Retrieve MITRE ATT&CK techniques associated with a specific threat group by providing its STIX ID and domain. Supports enterprise, mobile, and ICS domains with optional technique descriptions.
Instructions
Get all MITRE ATT&CK techniques used by group by group STIX ID
Args: group_stix_id: Group STIX ID belonging to requested MITRE ATT&CK group domain: Domain name ('enterprise', 'mobile', or 'ics') include_description: Whether to include description in the output (default is False)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| group_stix_id | Yes | ||
| domain | No | enterprise | |
| include_description | No |