D3FEND Defense Lookup
d3fend_defense_lookupRetrieve a D3FEND defense technique by its slug, including details like tactic, artifact, and associated ATT&CK techniques it mitigates.
Instructions
Look up a MITRE D3FEND defense technique. D3FEND is the canonical defensive counterpart to ATT&CK — each defense is classified into one of 7 tactics (Model/Harden/Detect/Isolate/Deceive/Evict/Restore) and may target a specific digital artifact (e.g. 'Access Token'). Response includes attack_techniques: the list of ATT&CK T-codes this defense mitigates. Use after d3fend_defense_search for the full record + ATT&CK chain. Returns 404 when the slug is not in the synced D3FEND catalog. Free: 30/hr, Pro: 500/hr. Returns {defense_id, label, uri, parent_label, description, tactic, artifact, attack_techniques, next_calls}.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| defense_id | Yes | D3FEND defense slug from the ontology URI fragment (CamelCase), e.g. 'TokenBinding', 'FileHashing', 'CertificatePinning'. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |