---
title: "# Action Details List"
method: GET
path: "/v1/threat-library/actions"
tags: ["Threats"]
---

# # Action Details List

`GET /v1/threat-library/actions`

Action Details; Action Id, Action Display Id, Action Name, Action Release Date, Action Description, Action Affected Os, Action Affected Products, Action Affected Platforms, Action Category, Attack Module, Mitres, Unified Kill Chains, Module Based Details, Owasp, Reference Links, Keyword Queries

## Query parameters

- `action_ids` integer[]
- `action_display_ids` integer[]

## Response `200`

ActionDetailListReturnResponse

- object
  - `actions` ActionReturn[]
    - `affected_os` string[] — Action AffectedOs
    - `affected_platforms` Platform[] — Action Platforms
      - `architecture` string
      - `name` string
      - `os` string
    - `affected_products` string[] — Action AffectedProducts
    - `attack_category` string — Action Category
    - `attack_module` string — Action Module
    - `attack_module_id` integer — Module Id
    - `created_at` integer — Action Created At
    - `cve` string — Action CVE
    - `cwe` string — Action CWE
    - `description` string — Action Description
    - `display_id` integer — Action DisplayId
    - `frameworks` Frameworks
      - `mitre` Mitre
        - `sub_technique` string — Mitre Att&ck SubTechnique Name
        - `sub_technique_id` string — Mitre Att&ck SubTechnique Id
        - `tactic` string — Mitre Att&ck Tactic Name
        - `tactic_id` string — Mitre Att&ck Tactic Id
        - `technique` string — Mitre Att&ck Technique Name
        - `technique_id` string — Mitre Att&ck Technique Id
      - `ukc` Ukc
        - `phase` string — Unified kill chain Phase
        - `stage` string — Unified kill chain SÏtage
    - `id` integer — Action Id
    - `keyword_queries` KWDictionary[] — Keyword Queries
      - `id` integer
      - `query` string
      - `type` string
    - `module_based_details` ModuleBasedDetails
      - `file` File
        - `MD5` string
        - `SHA1` string
        - `SHA256` string
        - `name` string
      - `processes` Process[]
        - `affected_actions` AffectedAction[]
          - `id` integer
          - `name` string
        - `argument` string
        - `created_at` string, date-time
        - `id` integer
        - `is_predefined` boolean
        - `path` string
        - `process_files_summary` ProcessFilesSummary[]
          - `FileSize` integer
          - `FileType` string
          - `Id` integer
          - `IsDownloaded` boolean
          - `IsExecutable` boolean
          - `Name` string
          - `Path` string
          - `SkipZipExtract` boolean
          - `Url` string
    - `name` string — Action Name
    - `owasp` string — Action Owasp
    - `references` ActionDetailReferences
      - `cve_reference` Reference
        - `link` string — Link
        - `name` string — Name
      - `cwe_reference` Reference
        - `link` string — Link
        - `name` string — Name
      - `virus_total_reference` Reference[]
        - `link` string — Link
        - `name` string — Name
    - `release_date` integer — Action ReleaseDate
    - `sources` string[] — Sources
    - `tags` string[] — Action Tags
    - `updated_at` integer — Action Updated At
  - `pages` Pagination
    - `limit` integer — Limit
    - `offset` integer — Offset
    - `total_count` integer — Total Count

## Other responses

- `default` — genericErrorSwagger is represents the erroneous cases

---

[API](https://skmtc.net/picussecurity/apis/picus-rest-api.md) · [All operations](https://skmtc.net/picussecurity/apis/picus-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/picussecurity/picus-rest-api/versions/cb0d02ee28f8/schema)
