caldera_create_ability
Create a new adversary ability in MITRE Caldera by specifying ATT&CK tactic, technique, platform, executor, and command.
Instructions
Create a new ability in Caldera.
Args: name: Human-readable ability name (e.g. 'Dump LSASS memory'). tactic: ATT&CK tactic (e.g. 'credential-access', 'discovery'). technique_id: ATT&CK technique ID (e.g. 'T1003.001'). technique_name: ATT&CK technique name (e.g. 'OS Credential Dumping: LSASS Memory'). platform: Target platform — 'windows', 'linux', or 'darwin'. executor: Executor name — 'psh' (PowerShell), 'cmd', 'sh', or 'python'. command: The command to execute. Use #{variable} for Caldera facts. description: Optional description of what the ability does. timeout: Execution timeout in seconds (default 60).
Returns: JSON string with the created ability including its generated ability_id.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | ||
| tactic | Yes | ||
| technique_id | Yes | ||
| technique_name | Yes | ||
| platform | Yes | ||
| executor | Yes | ||
| command | Yes | ||
| description | No | ||
| timeout | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |