{"slug":"2s-io-api-security-attack-3b29a5","title":"Authoritative MITRE ATT&CK (Enterprise) technique lookup","host":"2s.io","method":"GET","resource":"https://2s.io/api/security/attack","category":"search","description":"Authoritative MITRE ATT&CK (Enterprise) technique lookup. Pass id (e.g. T1059 or sub-technique T1059.001) for the canonical technique — name, tactics (kill-chain phases), description, platforms, sub-technique flag + parent, mitigations, and detection guidance — or query for a keyword search returnin","price_listed":0.0025,"price_asked":0.0025,"state":"answering","state_label":"Answering","checks_7d":1,"answered_7d":1,"latency_ms_median":281,"reported_calls_30d":1,"reported_payers_30d":1,"networks":["eip155:8453","solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"method":"GET","queryParams":{"id":"T1059"},"type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"properties":{"method":{"const":"GET"},"queryParams":{"properties":{"id":{"description":"ATT&CK technique id (T1059 / T1059.001).","type":"string"},"limit":{"type":"integer"},"query":{"description":"Keyword search.","type":"string"}},"required":[]},"type":{"const":"http"}},"required":["type","method","queryParams"],"type":"object"}},"required":["input"],"type":"object"},"history":[{"day":"2026-09-24","reachable":true,"status":402,"valid_402":true,"asked_usdc":0.0025,"price_match":true,"latency_ms":281,"error":null}],"description_full":"Authoritative MITRE ATT&CK (Enterprise) technique lookup. Pass id (e.g. T1059 or sub-technique T1059.001) for the canonical technique — name, tactics (kill-chain phases), description, platforms, sub-technique flag + parent, mitigations, and detection guidance — or query for a keyword search returning ranked techniques. Bundled current ATT&CK matrix (~700 techniques), zero external calls. Agents cite T-numbers and tactic names that must be exact; this returns version-pinned, citeable data instead of hallucinated IDs. For threat modeling, detection engineering, and report enrichment.","last_updated":"2026-09-19T15:59:36.408Z","schemes":["exact"]}