get_techniques_targeting_asset
Identify adversary techniques from MITRE ATT&CK that target a given ICS asset, enabling threat assessment for industrial control systems.
Instructions
Get all techniques that target a specific ICS asset.
Shows which adversary techniques can affect a given industrial
control system component.
Args:
asset_stix_id: STIX ID of the ICS asset
domain: Domain (default: 'ics')
include_description: Whether to include descriptions in formatted output
Returns:
{
"found": bool,
"count": int,
"techniques": [
{
"id": "<ATT&CK ID>",
"name": "...",
"stix_id": "...",
"description": "..." | None
},
...
],
"formatted": "<optional pretty text>",
"message": "..."
}
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | No | ics | |
| asset_stix_id | Yes | ||
| include_description | No |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |