Predict MITRE Transitions
predict_mitre_transitionsAnticipate the next MITRE ATT&CK technique in a kill chain by querying probable forward or reverse transitions, complete with observed probabilities and example threats.
Instructions
Predict the MITRE ATT&CK techniques most likely to follow (or precede) a given technique, with observed probabilities and example threats. Use forward to anticipate the next step in a kill chain; reverse to infer what came before. Pair with get_mitre_technique for the technique definition.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| top_n | No | Max transitions to return (default 5, max 20) | |
| direction | No | 'forward' = techniques that typically follow (default); 'reverse' = techniques that typically precede | |
| technique_id | No | Source technique ID (e.g. T1059 or T1059.001) |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| data | No | ||
| total | No | ||
| direction | No | ||
| transitions | No | ||
| technique_id | Yes |