MITRE ATT&CK details.
| JSON representation |
|---|
{ "version" : string , "tactics" : [ { object ( |
| Fields | |
|---|---|
version
|
ATT&CK version (e.g. 12.1). |
tactics[]
|
Tactics employed. |
techniques[]
|
Techniques employed. |
Tactic
Tactic information related to an attack or threat.
| JSON representation |
|---|
{ "id" : string , "name" : string } |
| Fields | |
|---|---|
id
|
Tactic ID (e.g. "TA0043"). |
name
|
Tactic Name (e.g. "Reconnaissance") |
Technique
Technique information related to an attack or threat.
| JSON representation |
|---|
{ "id" : string , "name" : string , "subtechniqueId" : string , "subtechniqueName" : string } |
| Fields | |
|---|---|
id
|
Technique ID (e.g. "T1595"). |
name
|
Technique Name (e.g. "Active Scanning"). |
subtechniqueId
|
Subtechnique ID (e.g. "T1595.001"). |
subtechniqueName
|
Subtechnique Name (e.g. "Scanning IP Blocks"). |

