Mandiant

Mandiant Mitre ATT&CK Dashboard API

ActionProfiles are statistical actions based on a metatag.

Documentation GitHub OpenAPI

Operations 1

GET /action_profiles/show List profiles for metatag actions #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/mandiant:mandiant-mitre-att-ck-dashboard-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Mandiant Mitre ATT&CK Dashboard API
  version: '1.0'
  description: 'Operations tagged Mitre ATT&CK Dashboard across 4 of this provider''s published API definitions: mandiant-ma-sv-openapi.yml, mandiant-msv-openapi.yml, mandiant-ma-sv-openapi.yml, mandiant-msv-openapi.yml. Each path carries the servers of the definition it was published in.'
tags:
- name: Mitre ATT&CK Dashboard
  description: ActionProfiles are statistical actions based on a metatag.
paths:
  /action_profiles/show:
    get:
      summary: List profiles for metatag actions
      tags:
      - Mitre ATT&CK Dashboard
      parameters:
      - name: dateRange
        in: query
        description: 'Job Action time range for results, of the format `2019-08-27 04:18:42 PM UTC to 2019-09-27 04:18:42 PM UTC`

          '
        schema:
          type: string
      - name: zones
        in: query
        description: List of Security Zones to include in the results
        schema:
          type: array
          items:
            type: string
      - name: category
        in: query
        description: String matching the Mitre ATT&CK Technique name
        schema:
          type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              example:
                zones:
                - Desktop Users
                - DMZ
                times:
                  end_time: '2019-11-18T19:49:32+00:00'
                  start_time: '2019-10-20T19:49:32+00:00'
                breakdown:
                - name: T1078
                  statistics:
                  - tag: T1078
                    sectech:
                      name: Windows Defender AV
                      id: 36
                      security_technology_id: 15
                      sectech_type: endpoint
                      tooltip: 'Endpoint Product: Windows Defender AV

                        Actors: example-actor (192.168.20.22) '
                      icon: /images/logos/1/windows_defender_logo.png
                    blocked: 1
                    missed: 0
                    blocked_vids:
                    - last_job_action_id: 13374
                      last_run_time: '2019-11-18T15:51:41Z'
                      id: 3566
                      vid: A104-057
                    missed_vids: []
                    vids:
                    - A104-057
                sectech:
                - tooltip: 'Endpoint Product: Windows Defender AV (1 product)'
                  sectech_type: endpoint
                  icon: /images/logos/1/windows_defender_logo.png
                completed:
                  missed: 1
                  blocked: 1
                name: Defense Evasion
      operationId: getActionProfilesShow
      x-operation-id-source: derived
x-refined-from:
- mandiant-ma-sv-openapi.yml
- mandiant-msv-openapi.yml
- mandiant-ma-sv-openapi.yml
- mandiant-msv-openapi.yml