get_tactics_by_matrix
Retrieve all tactics from an ATT&CK matrix by providing its STIX ID and domain. Optionally include tactic descriptions for detailed analysis.
Instructions
Get all ATT&CK tactics belonging to a specific matrix.
Args:
matrix_stix_id: STIX ID of the matrix (e.g., x-mitre-matrix--UUID)
domain: ATT&CK domain ('enterprise', 'mobile', 'ics')
include_description: Whether to include tactic descriptions
Returns:
{
"found": bool,
"count": int,
"tactics": [
{
"name": "...",
"stix_id": "...",
"description": "...",
"attack_id": "TAxxxx" or null
}
],
"formatted": "<multiline string>",
"message": "..."
}
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"matrix_stix_id": "<matrix_stix_id>"
},
"name": "get_tactics_by_matrix"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | No | enterprise | |
| matrix_stix_id | Yes | ||
| include_description | No |