primaryTechniques property

List<String>? primaryTechniques

The MITRE ATT&CK technique most closely represented by this finding, if any.

primary_techniques is a repeated field because there are multiple levels of MITRE ATT&CK techniques. If the technique most closely represented by this finding is a sub-technique (e.g. SCANNING_IP_BLOCKS), both the sub-technique and its parent technique(s) will be listed (e.g. SCANNING_IP_BLOCKS, ACTIVE_SCANNING).

Implementation

core.List<core.String>? primaryTechniques;