MITRE ATT&CK

List MITRE tactics

get

Returns an array of MITRE tactics

Authorizations

BearerAuth

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Responses

200

List of MITRE Tactics with Techniques

application/json

400

Bad Request. Typically due to a malformatted JSON body, or parameter values are not validating.

application/json

401

Access token is missing or invalid

application/json

403

Access is forbidden

application/json

default

Unknown Error Occurred

application/json

get

/api/v1/mitre/tactics

HTTPcURLJavaScriptPython

GET /api/v1/mitre/tactics HTTP/1.1
Host: api.netography.com
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "meta": {
    "code": 200,
    "count": 1
  },
  "data": [
    {
      "tactic_name": "Reconnaissance",
      "tactic_id": "TA0043",
      "techniques": [
        {
          "technique_id": "t1595",
          "technique_name": "Active Scanning",
          "sub_techniques": [
            {
              "technique_id": "t1595.001",
              "technique_name": "Scanning IP Blocks"
            }
          ]
        }
      ]
    }
  ]
}

List MITRE techniques for a given tactic

get

Returns an array of MITRE techniques for a given tactic

Authorizations

BearerAuth

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

tactic_idstringRequired

The ID of the tactic to fetch techniques for

Responses

200

Techniques for a Specific MITRE Tactic

application/json

400

Bad Request. Typically due to a malformatted JSON body, or parameter values are not validating.

application/json

401

Access token is missing or invalid

application/json

403

Access is forbidden

application/json

default

Unknown Error Occurred

application/json

get

/api/v1/mitre/tactics/{tactic_id}

HTTPcURLJavaScriptPython

GET /api/v1/mitre/tactics/{tactic_id} HTTP/1.1
Host: api.netography.com
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "meta": {
    "code": 200,
    "count": 1
  },
  "data": [
    {
      "technique_id": "t1595",
      "technique_name": "Active Scanning",
      "sub_techniques": [
        {
          "technique_id": "t1595.001",
          "technique_name": "Scanning IP Blocks"
        }
      ]
    }
  ]
}