get_mitigations_mitigating_technique
Retrieve all mitigations that address a specific MITRE ATT&CK technique, enabling identification of defensive measures for threat intelligence and security workflows.
Instructions
Get all mitigations that address a specific technique.
Helper returns: list[RelationshipEntry[Mitigation]]
So each item is a wrapper that contains a Mitigation object (usually in `.object`).
We must unwrap before extracting fields.
Returns (same schema as before):
{
"found": bool,
"technique": {...} | null,
"count": int,
"mitigations": [...],
"formatted": str,
"message": str
}
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"technique_stix_id": "<technique_stix_id>"
},
"name": "get_mitigations_mitigating_technique"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | No | enterprise | |
| technique_stix_id | Yes | ||
| include_description | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |