search_techniques
Search living-off-the-land techniques by function, platform, ATT&CK ID, keyword, or combined filters. Returns matching entries with full details including stealth scores and detection coverage.
Instructions
Search LOL techniques by function, ATT&CK ID, platform, stealth score, catalog, keyword, detection coverage, or combined filters. Returns matching entries with full details.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| mode | Yes | Search mode | |
| limit | No | Max results to return | |
| offset | No | Pagination offset | |
| catalog | No | For catalog mode: gtfobins, lolbas, loobins, loldrivers, lolrmm, etc. | |
| filters | No | For combined mode: apply multiple filters simultaneously | |
| keyword | No | For keyword mode: free-text search across binary names, descriptions, commands | |
| attck_id | No | For attck mode: T1059.006, T1548.001, etc. | |
| function | No | For function mode: shell, reverse_shell, download, upload, edr_disable, c2, etc. | |
| platform | No | For platform mode or as additional filter | |
| max_stealth | No | For stealth mode: max stealth score (1-5) | |
| has_detection | No | For detection_coverage mode: true=has rules, false=no coverage |