{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/crimsoncrawler-com/json-schema/crimsoncrawler-com-post-v1-enrich-capec-response-schema.json",
  "title": "PostV1EnrichCapecResponse",
  "x-generated": "2026-10-30",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/_ae-authored/crimsoncrawler-com-openapi-generated.yml#/components/schemas/PostV1EnrichCapecResponse",
  "type": "object",
  "properties": {
    "identifier_resolved": {
      "type": "boolean"
    },
    "attack_pattern": {
      "type": "object",
      "description": "CAPEC detail object with capec_id, name, description, severity, likelihood, consequences, and related fields"
    },
    "search_results": {
      "type": "array",
      "description": "Matching attack patterns when searched by text"
    },
    "techniques": {
      "type": "array",
      "description": "ATT&CK techniques linked to the attack pattern(s)"
    },
    "groups": {
      "type": "array",
      "description": "Threat actor groups known to use the linked techniques"
    },
    "software": {
      "type": "array",
      "description": "Malware and tools using the linked techniques"
    },
    "campaigns": {
      "type": "array",
      "description": "Threat campaigns using the linked techniques"
    },
    "mitigations": {
      "type": "array",
      "description": "Defensive courses of action per technique"
    },
    "detections": {
      "type": "array",
      "description": "Detection data sources per technique"
    },
    "defend": {
      "type": "array",
      "description": "D3FEND defensive techniques and countermeasures"
    },
    "cves": {
      "type": "array",
      "description": "CVEs referencing this attack pattern"
    },
    "knowledgebase": {
      "type": "array",
      "description": "Related intelligence from the knowledge base"
    },
    "summary": {
      "type": "string",
      "description": "AI-generated summary of the attack pattern"
    },
    "nist_controls": {
      "type": "array",
      "description": "NIST SP 800-53 rev 5 controls that mitigate the linked techniques"
    },
    "tie": {
      "type": "array",
      "description": "Technique likelihood predictions for linked techniques"
    },
    "navigator": {
      "type": "object",
      "description": "ATT&CK Navigator layer JSON for linked techniques"
    }
  }
}