Attack Chains Details Token: Fields, sorting and filtering options

Important Notes

1. Use & to separate multiple parameters
2. Field names are case-sensitive
3. Multiple fields should be separated by commas
4. Values for filter settings (type) must match the exact enum values

This is a list of the available Finding fields and other options that can be used on the different tokens related to Findings.

Basic Information

• title - Entity title
• timestamp - Entity timestamp
• description - Entity description
• mitre_attack_tactic - Associated MITRE ATT&CK tactic(s) (if exists)
• mitre_attack_technique - Associated MITRE ATT&CK technique(s) (if exists)
• mitre_attack_mitigation - Associated MITRE ATT&CK mitigations(s) (if exists)
• severity - Entity associated severity (if exists)

Enum Values

Sort Direction

• Ascending
• Descending

Type

• Attack
• Mitigation
• Goal
• Fact