get_objects_modified_after
Query MITRE ATT&CK objects modified since a specified time to monitor framework updates.
Instructions
Get all ATT&CK objects modified after a specific timestamp.
Useful for tracking updates and changes to the ATT&CK framework.
Timestamp must be ISO8601 format, e.g., '2024-01-01T00:00:00Z'.
Returns:
{
"found": bool,
"count": int,
"objects": [
{
"id": "<ATT&CK ID or None>",
"name": "...",
"stix_id": "...",
"type": "<stix-type>",
"description": "..." | None
},
...
],
"formatted": "<pretty text>",
"message": "..."
}
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | No | enterprise | |
| timestamp | Yes | ||
| include_description | No |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |