---
title: "# Get MITRE ATT&CK Sub-Techniques"
method: GET
path: "/v1/mitigation/detection-content/mitre/sub-techniques"
tags: ["Mitigation"]
---

# # Get MITRE ATT&CK Sub-Techniques

`GET /v1/mitigation/detection-content/mitre/sub-techniques`

Returns all available MITRE ATT&CK sub-techniques with their parent technique reference. Used to populate sub-technique selection when creating custom detection content.

## Response `200`

MitreSubTechniquesResponse

- object
  - `sub_techniques` object[]
    - `mitre_id` string — MITRE ATT&CK sub-technique identifier (e.g. T1059.001)
    - `name` string — Human-readable name of the sub-technique
    - `technique_mitre_id` string — Parent technique MITRE ID (e.g. T1059)

## Other responses

- `default` — genericErrorSwagger is represents the erroneous cases

---

[API](https://skmtc.net/picussecurity/apis/picus-rest-api.md) · [All operations](https://skmtc.net/picussecurity/apis/picus-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/picussecurity/picus-rest-api/versions/cb0d02ee28f8/schema)