get_mitigations_mitigating_technique
Retrieve all mitigations that address a specific MITRE ATT&CK technique, enabling identification of defensive measures for threat intelligence and security workflows.
Instructions
Get all mitigations that address a specific technique.
Helper returns: list[RelationshipEntry[Mitigation]]
So each item is a wrapper that contains a Mitigation object (usually in `.object`).
We must unwrap before extracting fields.
Returns (same schema as before):
{
"found": bool,
"technique": {...} | null,
"count": int,
"mitigations": [...],
"formatted": str,
"message": str
}
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | No | enterprise | |
| technique_stix_id | Yes | ||
| include_description | No |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |