args: []
comment: Parses attacks from context, and shows them according to the MITRE technique they use.
commonfields:
  id: InvestigationDetailedSummaryParse
  version: -1
name: InvestigationDetailedSummaryParse
outputs:
- contextPath: InvestigationDetailedSummary.Execution.Command and Scripting Interpreter
  description: whether Command and Scripting Interpreter technique was detected.
  type: bool
- contextPath: InvestigationDetailedSummary.Privilege Escalation.Boot or Logon Autostart Execution
  description: whether the Boot or Logon Autostart Execution technique was detected.
  type: bool
- contextPath: InvestigationDetailedSummary.Lateral Movement.Command and Scripting Interpreter
  description: whether Indicator Removal on Host technique was detected.
  type: bool
- contextPath: InvestigationDetailedSummary.Defense Evasion.Remote Services
  description: whether the Remote Services technique was detected.
  type: bool
- contextPath: InvestigationDetailedSummary.Persistence.Boot or Logon Autostart Execution
  description: whether the Boot or Logon Autostart Execution technique was detected.
  type: bool
script: '-'
tags:
- basescript
timeout: '0'
type: python
subtype: python3
dockerimage: demisto/python3:3.12.13.10404775
fromversion: 6.2.0
tests:
- No tests (auto formatted)