Resolve Entity
resolve_entityResolve an actor, malware, or technique name or alias to its canonical reference and stable UUID before pivoting to related intelligence.
Instructions
Normalize an actor / malware / tool / sector / region / technique name or alias to its canonical reference form + stable UUID (e.g. 'fancy bear' → 'APT28'). Call this BEFORE pivoting (get_actor / get_malware_intelligence / get_tool_intelligence / search_threats) when unsure of the canonical name. Optional type narrows the lookup.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Name or alias to resolve | |
| type | No | Optional: actor|malware|tool|sector|region|technique|campaign |