get_tactics_by_matrix
Retrieve all tactics from an ATT&CK matrix by providing its STIX ID and domain. Optionally include tactic descriptions for detailed analysis.
Instructions
Get all ATT&CK tactics belonging to a specific matrix.
Args:
matrix_stix_id: STIX ID of the matrix (e.g., x-mitre-matrix--UUID)
domain: ATT&CK domain ('enterprise', 'mobile', 'ics')
include_description: Whether to include tactic descriptions
Returns:
{
"found": bool,
"count": int,
"tactics": [
{
"name": "...",
"stix_id": "...",
"description": "...",
"attack_id": "TAxxxx" or null
}
],
"formatted": "<multiline string>",
"message": "..."
}
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | No | enterprise | |
| matrix_stix_id | Yes | ||
| include_description | No |