search_attack_pattern
Find MITRE ATT&CK techniques by ID or name to map adversary behavior and enrich threat analysis with ATT&CK knowledge.
Instructions
Search for MITRE ATT&CK techniques by ID or name.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max results (default: 10, max: 50) | |
| query | Yes | MITRE technique ID (e.g., 'T1003') or name (e.g., 'credential dumping') | |
| labels | No | Filter by labels | |
| offset | No | Skip first N results (for pagination) | |
| created_after | No | Filter by created date >= (ISO format) | |
| created_before | No | Filter by created date <= (ISO format) |