Authorizations
API Key authentication for programmatic access. Include your API key in the Authorization header as: Bearer your_api_key_here
Response
200 - application/json
Successful response
Complete MITRE ATT&CK matrix with detection coverage
curl --request GET \
--url https://app.cotool.ai/api/mitre/matrix \
--header 'Authorization: Bearer <token>'{
"matrix": {
"tactics": [
{
"tacticId": "<string>",
"tacticName": "<string>",
"description": "<string>",
"shortName": "<string>",
"techniqueIds": [
"<string>"
],
"url": "<string>",
"detectionCount": 123,
"averageConfidence": 0.5,
"rawData": {
"id": "<string>",
"type": "x-mitre-tactic",
"name": "<string>",
"description": "<string>",
"external_references": [
{
"source_name": "<string>",
"external_id": "<string>",
"url": "<string>",
"description": "<string>"
}
],
"x_mitre_shortname": "<string>",
"x_mitre_version": "<string>",
"x_mitre_attack_spec_version": "<string>",
"x_mitre_domains": [
"<string>"
],
"created": "<string>",
"modified": "<string>",
"spec_version": "<string>",
"object_marking_refs": [
"<string>"
]
}
}
],
"techniques": [
{
"techniqueId": "<string>",
"techniqueName": "<string>",
"description": "<string>",
"tactics": [
"<string>"
],
"isSubtechnique": true,
"parentTechnique": "<string>",
"platforms": [
"<string>"
],
"dataSources": [
"<string>"
],
"mitigations": [
"<string>"
],
"url": "<string>",
"detectionCount": 123,
"confidence": 0.5,
"detectionRules": [
{
"id": "<string>",
"name": "<string>",
"source": "panther",
"confidence": 0.5,
"reasoning": "<string>"
}
],
"rawData": {
"id": "<string>",
"type": "attack-pattern",
"name": "<string>",
"description": "<string>",
"external_references": [
{
"source_name": "<string>",
"external_id": "<string>",
"url": "<string>",
"description": "<string>"
}
],
"kill_chain_phases": [
{
"kill_chain_name": "<string>",
"phase_name": "<string>"
}
],
"x_mitre_version": "<string>",
"x_mitre_attack_spec_version": "<string>",
"x_mitre_domains": [
"<string>"
],
"x_mitre_is_subtechnique": true,
"x_mitre_detection": "<string>",
"x_mitre_platforms": [
"<string>"
],
"x_mitre_data_sources": [
"<string>"
],
"aliases": [
"<string>"
],
"created": "<string>",
"modified": "<string>",
"spec_version": "<string>",
"object_marking_refs": [
"<string>"
],
"revoked": true,
"x_mitre_deprecated": true
}
}
],
"matrixCells": [
{
"techniqueId": "<string>",
"techniqueName": "<string>",
"tacticId": "<string>",
"tacticName": "<string>",
"detectionCount": 123,
"confidence": 0.5,
"coverageLevel": "none"
}
],
"lastUpdated": "<string>",
"totalDetectionRules": 123,
"organizationId": "<string>"
}
}Retrieve the MITRE ATT&CK framework matrix showing detection rule coverage as a heatmap
curl --request GET \
--url https://app.cotool.ai/api/mitre/matrix \
--header 'Authorization: Bearer <token>'{
"matrix": {
"tactics": [
{
"tacticId": "<string>",
"tacticName": "<string>",
"description": "<string>",
"shortName": "<string>",
"techniqueIds": [
"<string>"
],
"url": "<string>",
"detectionCount": 123,
"averageConfidence": 0.5,
"rawData": {
"id": "<string>",
"type": "x-mitre-tactic",
"name": "<string>",
"description": "<string>",
"external_references": [
{
"source_name": "<string>",
"external_id": "<string>",
"url": "<string>",
"description": "<string>"
}
],
"x_mitre_shortname": "<string>",
"x_mitre_version": "<string>",
"x_mitre_attack_spec_version": "<string>",
"x_mitre_domains": [
"<string>"
],
"created": "<string>",
"modified": "<string>",
"spec_version": "<string>",
"object_marking_refs": [
"<string>"
]
}
}
],
"techniques": [
{
"techniqueId": "<string>",
"techniqueName": "<string>",
"description": "<string>",
"tactics": [
"<string>"
],
"isSubtechnique": true,
"parentTechnique": "<string>",
"platforms": [
"<string>"
],
"dataSources": [
"<string>"
],
"mitigations": [
"<string>"
],
"url": "<string>",
"detectionCount": 123,
"confidence": 0.5,
"detectionRules": [
{
"id": "<string>",
"name": "<string>",
"source": "panther",
"confidence": 0.5,
"reasoning": "<string>"
}
],
"rawData": {
"id": "<string>",
"type": "attack-pattern",
"name": "<string>",
"description": "<string>",
"external_references": [
{
"source_name": "<string>",
"external_id": "<string>",
"url": "<string>",
"description": "<string>"
}
],
"kill_chain_phases": [
{
"kill_chain_name": "<string>",
"phase_name": "<string>"
}
],
"x_mitre_version": "<string>",
"x_mitre_attack_spec_version": "<string>",
"x_mitre_domains": [
"<string>"
],
"x_mitre_is_subtechnique": true,
"x_mitre_detection": "<string>",
"x_mitre_platforms": [
"<string>"
],
"x_mitre_data_sources": [
"<string>"
],
"aliases": [
"<string>"
],
"created": "<string>",
"modified": "<string>",
"spec_version": "<string>",
"object_marking_refs": [
"<string>"
],
"revoked": true,
"x_mitre_deprecated": true
}
}
],
"matrixCells": [
{
"techniqueId": "<string>",
"techniqueName": "<string>",
"tacticId": "<string>",
"tacticName": "<string>",
"detectionCount": 123,
"confidence": 0.5,
"coverageLevel": "none"
}
],
"lastUpdated": "<string>",
"totalDetectionRules": 123,
"organizationId": "<string>"
}
}API Key authentication for programmatic access. Include your API key in the Authorization header as: Bearer your_api_key_here
Successful response
Complete MITRE ATT&CK matrix with detection coverage
Show child attributes