search_software
Find MITRE ATT&CK software (malware and tools) by searching keywords in names or descriptions. Filter results by ATT&CK domain.
Instructions
Search MITRE ATT&CK software (malware & tools) by keyword in name or
description (case-insensitive).
Args:
query: Keyword to search for in software names and descriptions.
domain: ATT&CK domain ("enterprise", "mobile", "ics").
include_description: Whether to include descriptions in the response.
Returns:
{
"count": <number of matches>,
"software": [
{
"attack_id": "<SXXXX or similar>",
"name": "...",
"stix_id": "...",
"type": "<tool|malware|...>",
"description": "..." | null
},
...
],
"formatted": "<nicely formatted block>",
"message": "<status summary>"
}
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | ||
| domain | No | enterprise | |
| include_description | No |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |