search_attack_pattern
Find MITRE ATT&CK techniques by ID or name to map adversary behavior and enrich threat analysis with ATT&CK knowledge.
Instructions
Search for MITRE ATT&CK techniques by ID or name.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"query": "<query>"
},
"name": "search_attack_pattern"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max results (default: 10, max: 50) | |
| query | Yes | MITRE technique ID (e.g., 'T1003') or name (e.g., 'credential dumping') | |
| labels | No | Filter by labels | |
| offset | No | Skip first N results (for pagination) | |
| created_after | No | Filter by created date >= (ISO format) | |
| created_before | No | Filter by created date <= (ISO format) |