vlai

GET /vlai/attack-techniques/{technique_id}/vulnerabilities

Changed on

Vulnerabilities whose description is nearest to one MITRE ATT&CK technique in the CIRCL bi-encoder space, best first. A similarity search over the indexed descriptions, not a classification: only the vulnerability -> technique direction has measured accuracy. in_vocabulary is false for techniques the model was not trained on, which rank noticeably worse. score is the training-time probability sigmoid(logit_scale * cosine + logit_bias).

Request

  • Base URL
    /api (relative, and the document was published on a file host, not at the API’s origin)
  • URL
    /api/vlai/attack-techniques/{technique_id}/vulnerabilities
  • Auth
    API key in header X-API-KEY

Query parameters

top_kinteger

Number of vulnerabilities to return (1-100).

Response

Success.

Changes