get_lolfarm_context
Fetch LOLFarm threat intelligence for a MITRE ATT&CK technique, with summary, detailed, or full response tiers to support detection engineering.
Instructions
Get LOLFarm intelligence relevant to a MITRE ATT&CK technique. Tiered response: "summary" (default, ~500 tokens — counts + top names per source) for Step 1 recon, "detailed" (~2.5k tokens — top 15 per source with key fields) when authoring, "full" (everything — use sparingly). After summary, use per-source lookup_* tools for deep-dives instead of escalating mode.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| mode | No | Response verbosity. Default "summary" for cheap recon. Escalate only when needed. | |
| technique_id | No | MITRE technique ID (e.g., "T1059.001", "T1562.001", "T1574.002"). Optional in summary mode — omitted technique returns a corpus-wide overview. |