curl -X GET "https://app.cotool.ai/api/mitre/techniques/:techniqueId" \
-H "Authorization: Bearer YOUR_API_KEY" \
-H "Content-Type: application/json"{
"technique": {
"techniqueId": "<string>",
"techniqueName": "<string>",
"description": "<string>",
"tactics": [
"<string>"
],
"detectionCount": 123,
"confidence": 0.5,
"detectionRules": [
{
"id": "<string>",
"name": "<string>",
"source": "panther",
"confidence": 0.5,
"reasoning": "<string>"
}
],
"isSubtechnique": true,
"parentTechnique": "<string>",
"platforms": [
"<string>"
],
"dataSources": [
"<string>"
],
"mitigations": [
"<string>"
],
"url": "<string>",
"rawData": {
"id": "<string>",
"type": "<string>",
"name": "<string>",
"description": "<string>",
"created": "<string>",
"modified": "<string>",
"external_references": [
{
"source_name": "<string>",
"external_id": "<string>",
"url": "<string>",
"description": "<string>"
}
],
"kill_chain_phases": [
{
"kill_chain_name": "<string>",
"phase_name": "<string>"
}
],
"x_mitre_version": "<string>",
"x_mitre_attack_spec_version": "<string>",
"x_mitre_domains": [
"<string>"
],
"x_mitre_is_subtechnique": true,
"x_mitre_detection": "<string>",
"x_mitre_platforms": [
"<string>"
],
"x_mitre_data_sources": [
"<string>"
],
"aliases": [
"<string>"
],
"spec_version": "<string>",
"object_marking_refs": [
"<string>"
],
"revoked": true,
"x_mitre_deprecated": true
}
}
}Retrieve detailed information about a specific MITRE ATT&CK technique including detection rules
curl -X GET "https://app.cotool.ai/api/mitre/techniques/:techniqueId" \
-H "Authorization: Bearer YOUR_API_KEY" \
-H "Content-Type: application/json"{
"technique": {
"techniqueId": "<string>",
"techniqueName": "<string>",
"description": "<string>",
"tactics": [
"<string>"
],
"detectionCount": 123,
"confidence": 0.5,
"detectionRules": [
{
"id": "<string>",
"name": "<string>",
"source": "panther",
"confidence": 0.5,
"reasoning": "<string>"
}
],
"isSubtechnique": true,
"parentTechnique": "<string>",
"platforms": [
"<string>"
],
"dataSources": [
"<string>"
],
"mitigations": [
"<string>"
],
"url": "<string>",
"rawData": {
"id": "<string>",
"type": "<string>",
"name": "<string>",
"description": "<string>",
"created": "<string>",
"modified": "<string>",
"external_references": [
{
"source_name": "<string>",
"external_id": "<string>",
"url": "<string>",
"description": "<string>"
}
],
"kill_chain_phases": [
{
"kill_chain_name": "<string>",
"phase_name": "<string>"
}
],
"x_mitre_version": "<string>",
"x_mitre_attack_spec_version": "<string>",
"x_mitre_domains": [
"<string>"
],
"x_mitre_is_subtechnique": true,
"x_mitre_detection": "<string>",
"x_mitre_platforms": [
"<string>"
],
"x_mitre_data_sources": [
"<string>"
],
"aliases": [
"<string>"
],
"spec_version": "<string>",
"object_marking_refs": [
"<string>"
],
"revoked": true,
"x_mitre_deprecated": true
}
}
}API Key authentication for programmatic access. Include your API key in the Authorization header as: Bearer your_api_key_here
The MITRE technique ID to retrieve details for
Successful response
Detailed technique information
Show child attributes
Was this page helpful?