How to get additional details about Mitre attacks like(mitre_tactic_id mitre_technique_id mitre_tactic mitre_technique mitre_subTechnique) ?

Vimalkumar Nayak 20 Reputation points
2024-05-16T06:05:28.6033333+00:00

Hello,

Greetings of the day

We are using the below endpoint to collect the alerts. These alerts consist of a wide range of data including mitreTechniques. Further, I would like to know if it is possible to extract more information about Mitre Attacks fields like mitre_tactic_id mitre_technique_id mitre_tactic mitre_technique,mitre_subTechnique.

Also, We would be grateful to know if there is any other endpoint to extract above information for the respective alerts.

Endpoint: https://api-us3.securitycenter.microsoft.com/api/alerts

I have also attached the screenshot for the same.

Screenshot 2024-05-16 at 10.50.34 AM

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,005 questions
{count} votes

0 additional answers

Sort by: Most helpful