get_all_techniques
Retrieve all MITRE ATT&CK techniques for enterprise, mobile, or ICS domains. Optionally exclude revoked techniques or include descriptions for comprehensive threat intelligence.
Instructions
Get all ATT&CK techniques for a given domain.
Args:
domain: ATT&CK domain ("enterprise", "mobile", "ics").
remove_revoked_deprecated: Whether to exclude revoked/deprecated techniques.
include_description: Whether to include technique descriptions.
Returns:
{
"domain": "<domain>",
"count": <number of techniques>,
"techniques": [
{
"attack_id": "TXXXX or TXXXX.YYY",
"name": "<technique name>",
"stix_id": "<attack-pattern--UUID>",
"description": "<text or null>",
"tactics": [ "<tactic 1>", "<tactic 2>", ... ]
},
...
],
"formatted": "<optional human-readable output>",
"message": "<summary>"
}
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | No | enterprise | |
| include_description | No | ||
| remove_revoked_deprecated | No |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |