get_techniques_mitigated_by_mitigation
Query techniques mitigated by a specific mitigation using its STIX ID and domain from the MITRE ATT&CK framework.
Instructions
Get all techniques mitigated by a specific mitigation (by STIX ID).
Args:
mitigation_stix_id: STIX UUID of the mitigation (e.g., course-of-action--UUID).
domain: ATT&CK domain ('enterprise', 'mobile', 'ics').
include_description: Include technique descriptions in the output.
Returns:
{
"found": bool,
"mitigation": {
"attack_id": "...",
"name": "...",
"stix_id": "course-of-action--..."
} | null,
"count": int,
"techniques": [
{
"attack_id": "Txxxx",
"name": "...",
"stix_id": "...",
"description": "...",
},
...
],
"formatted": "<multi-line text>",
"message": "<summary>"
}
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | No | enterprise | |
| mitigation_stix_id | Yes | ||
| include_description | No |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |