Get Behavioural Attackers
get_behavioural_attackersRead a threat model's attacker closure to identify attackers missing from the inventory, proposed additions or splits, and held credentials, zones, and objectives without writing data.
Instructions
Read the attacker closure of a model: the attackers its behavioural model says are missing from the inventory, and what its attackers hold. Read-only: no model is called and nothing is written.
Returns {applies, credential_classes, proposals, dismissed, dismissed_zones, reported, splits, dismissed_splits, questions}.
applies is false where the closure is not offered (a model with no
inventory, or whose behavioural model decides nothing yet);
computing while what the threats reach is still being analysed, when
nothing is proposed. Each of proposals is an attacker no attacker of
the inventory stands for: its kind (own: a class proposed on its
own; grouped: a part of the zones nobody stands at, the zones of one
capability, with an entries row per zone), credential_classes,
privileges_required, capability, objectives and zones;
add it with add_proposed_attacker or dismiss it, or some zones of a
part, with dismiss_proposed_attacker. Two parts may hold the same
classes: name one by a zone of it. Each of splits is an attacker
standing for zones of several capabilities, offered split into its
parts (each listed as a proposal is), with objectives_added,
objectives_removed and ratings: split it with
split_grouped_attacker or keep it whole with keep_attacker_whole.
dismissed, dismissed_zones and dismissed_splits carry
reason, dismissed_by and dismissed_at. reported lists
narrower holders beside an attacker that stands for them. questions
ask what an attacker holds: answer each with
answer_attacker_credentials. Relay the proposals and splits to the
person before acting on them.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| model_id | Yes | ID of the threat model. | |
| server_version | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||