Search attack techniques

Returns a paginated list of the top attack techniques identified within your organization that match the specified search criteria. This endpoint supports advanced filtering, sorting, and metadata enrichment, including MITRE ATT&CK framework mappings and recommended mitigations.

Note: To prioritize actionable data, this endpoint applies default filters to results:

• Excluded Statuses — done, accepted
• Excluded States — archive

To retrieve all techniques, including archived or resolved items, set the exclude_resolved parameter to false.

For more information, see Top Attack Techniques in the Exposure Management User Guide.