get_name
Resolve a STIX ID to its human-readable ATT&CK object name. Converts UUIDs like attack-pattern--UUID into names such as 'Phishing'.
Instructions
Resolve the human-readable object name for a given STIX ID.
This converts internal STIX UUIDs such as:
attack-pattern--UUID
intrusion-set--UUID
malware--UUID
tool--UUID
course-of-action--UUID
into ATT&CK object names such as:
"Phishing"
"APT29"
"Cobalt Strike"
"Valid Accounts"
Args:
stix_id: STIX UUID of the object.
domain: ATT&CK domain ("enterprise", "mobile", "ics").
Returns:
{
"found": bool,
"name": "<object name or null>",
"message": "<status message>"
}
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | No | enterprise | |
| stix_id | Yes |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |