quaxar-threat-actor-ttps
List threat actor TTPs from S2W Quaxar service.
Syntax
quaxar-threat-actor-ttps [profile=PROFILE] id=ID [detail=DETAIL]
Options
- profile=PROFILE
- Optional. QUAXAR connect profile code
- id=ID
- Required. Threat actor group ID
- detail=DETAIL
- Optional. Show threat actor name and last_updated (t/f, default f)
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| profile | String | Connect profile | Profile name of QUAXAR |
| name | String | Name | Threat actor group name |
| last_updated | Date | Last updated | Last updated time |
| mitre_tech | String | MITRE Technique | MITRE ATT&CK technique ID |
| mitre_tech_name | String | Technique Name | MITRE ATT&CK technique name |