MITRENameByID_Formatter

Get a MITRE ATT&CK object name by its ID. The script is using TIMs IOCs to find the correct name. (MITRE ATT&CK IOCs must exist in the Threat Intel data).

python · Common Scripts

Details

ID	`MITRENameByID_Formatter`
Language	python
From Version	6.10.0
Docker Image	`demisto/python3:3.12.13.10404775`
Tags	indicator-format

README

Get a MITRE ATT&CK object name by its ID. The script is using TIMs IOCs to find the correct name. (MITRE ATT&CK IOCs must exist in the Threat Intel data).

Script Data

Name	Description
Script Type	python3
Tags	indicator-format

Dependencies

This script uses the following commands and scripts.

MITRE ATT&CK v2
mitre-get-indicator-name

Inputs

Argument Name	Description
input	The MITRE ATT&CK object ID.

Outputs

There are no outputs for this script.

Source

MITRENameByIDFormatter.py MITRENameByIDFormatter_test.py MITRENameByIDFormatter.yml

Download History Raw

commonfields:
  id: MITRENameByID_Formatter
  version: -1
name: MITRENameByID_Formatter
script: ''
type: python
tags:
- indicator-format
comment: Get a MITRE ATT&CK object name by its ID. The script is using TIMs IOCs to find the correct name. (MITRE ATT&CK IOCs must exist in the Threat Intel data).
enabled: true
args:
- name: input
  required: true
  description: The MITRE ATT&CK object ID.
scripttarget: 0
subtype: python3
runonce: false
dockerimage: demisto/python3:3.12.13.10404775
runas: DBotWeakRole
engineinfo: {}
fromversion: 6.10.0
tests:
- No tests (auto formatted)