public RepeatedField<MitreAttack.Types.Technique> PrimaryTechniques { get; }
The MITRE ATT&CK technique most closely represented by this finding, if
any. primary_techniques is a repeated field because there are multiple
levels of MITRE ATT&CK techniques. If the technique most closely
represented by this finding is a sub-technique (e.g. SCANNING_IP_BLOCKS),
both the sub-technique and its parent technique(s) will be listed (e.g.
SCANNING_IP_BLOCKS, ACTIVE_SCANNING).
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe \u003ccode\u003eMitreAttack\u003c/code\u003e class in the Security Command Center v2 API provides information about MITRE ATT&CK tactics and techniques related to security findings.\u003c/p\u003e\n"],["\u003cp\u003eThis class includes properties for \u003ccode\u003ePrimaryTactic\u003c/code\u003e, \u003ccode\u003ePrimaryTechniques\u003c/code\u003e, \u003ccode\u003eAdditionalTactics\u003c/code\u003e, and \u003ccode\u003eAdditionalTechniques\u003c/code\u003e to detail the MITRE ATT&CK framework elements associated with a finding.\u003c/p\u003e\n"],["\u003cp\u003eIt has two constructors, a default one and one that accepts another \u003ccode\u003eMitreAttack\u003c/code\u003e instance for copying.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eVersion\u003c/code\u003e property specifies the MITRE ATT&CK version used for referencing the tactics and techniques.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eMitreAttack\u003c/code\u003e class implements several interfaces including \u003ccode\u003eIMessage\u003c/code\u003e, \u003ccode\u003eIEquatable\u003c/code\u003e, \u003ccode\u003eIDeepCloneable\u003c/code\u003e, and \u003ccode\u003eIBufferMessage\u003c/code\u003e, indicating its role in message handling and data manipulation.\u003c/p\u003e\n"]]],[],null,["# Security Command Center v2 API - Class MitreAttack (1.2.0)\n\nVersion latestkeyboard_arrow_down\n\n- [1.2.0 (latest)](/dotnet/docs/reference/Google.Cloud.SecurityCenter.V2/latest/Google.Cloud.SecurityCenter.V2.MitreAttack)\n- [1.1.0](/dotnet/docs/reference/Google.Cloud.SecurityCenter.V2/1.1.0/Google.Cloud.SecurityCenter.V2.MitreAttack)\n- [1.0.0](/dotnet/docs/reference/Google.Cloud.SecurityCenter.V2/1.0.0/Google.Cloud.SecurityCenter.V2.MitreAttack) \n\n public sealed class MitreAttack : IMessage\u003cMitreAttack\u003e, IEquatable\u003cMitreAttack\u003e, IDeepCloneable\u003cMitreAttack\u003e, IBufferMessage, IMessage\n\nReference documentation and code samples for the Security Command Center v2 API class MitreAttack.\n\nMITRE ATT\\&CK tactics and techniques related to this finding.\nSee: \u003chttps://attack.mitre.org\u003e \n\nInheritance\n-----------\n\n[object](https://learn.microsoft.com/dotnet/api/system.object) \\\u003e MitreAttack \n\nImplements\n----------\n\n[IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage-1.html)[MitreAttack](/dotnet/docs/reference/Google.Cloud.SecurityCenter.V2/latest/Google.Cloud.SecurityCenter.V2.MitreAttack), [IEquatable](https://learn.microsoft.com/dotnet/api/system.iequatable-1)[MitreAttack](/dotnet/docs/reference/Google.Cloud.SecurityCenter.V2/latest/Google.Cloud.SecurityCenter.V2.MitreAttack), [IDeepCloneable](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IDeepCloneable-1.html)[MitreAttack](/dotnet/docs/reference/Google.Cloud.SecurityCenter.V2/latest/Google.Cloud.SecurityCenter.V2.MitreAttack), [IBufferMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IBufferMessage.html), [IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage.html) \n\nInherited Members\n-----------------\n\n[object.GetHashCode()](https://learn.microsoft.com/dotnet/api/system.object.gethashcode) \n[object.GetType()](https://learn.microsoft.com/dotnet/api/system.object.gettype) \n[object.ToString()](https://learn.microsoft.com/dotnet/api/system.object.tostring)\n\nNamespace\n---------\n\n[Google.Cloud.SecurityCenter.V2](/dotnet/docs/reference/Google.Cloud.SecurityCenter.V2/latest/Google.Cloud.SecurityCenter.V2)\n\nAssembly\n--------\n\nGoogle.Cloud.SecurityCenter.V2.dll\n\nConstructors\n------------\n\n### MitreAttack()\n\n public MitreAttack()\n\n### MitreAttack(MitreAttack)\n\n public MitreAttack(MitreAttack other)\n\nProperties\n----------\n\n### AdditionalTactics\n\n public RepeatedField\u003cMitreAttack.Types.Tactic\u003e AdditionalTactics { get; }\n\nAdditional MITRE ATT\\&CK tactics related to this finding, if any.\n\n### AdditionalTechniques\n\n public RepeatedField\u003cMitreAttack.Types.Technique\u003e AdditionalTechniques { get; }\n\nAdditional MITRE ATT\\&CK techniques related to this finding, if any, along\nwith any of their respective parent techniques.\n\n### PrimaryTactic\n\n public MitreAttack.Types.Tactic PrimaryTactic { get; set; }\n\nThe MITRE ATT\\&CK tactic most closely represented by this finding, if any.\n\n### PrimaryTechniques\n\n public RepeatedField\u003cMitreAttack.Types.Technique\u003e PrimaryTechniques { get; }\n\nThe MITRE ATT\\&CK technique most closely represented by this finding, if\nany. primary_techniques is a repeated field because there are multiple\nlevels of MITRE ATT\\&CK techniques. If the technique most closely\nrepresented by this finding is a sub-technique (e.g. `SCANNING_IP_BLOCKS`),\nboth the sub-technique and its parent technique(s) will be listed (e.g.\n`SCANNING_IP_BLOCKS`, `ACTIVE_SCANNING`).\n\n### Version\n\n public string Version { get; set; }\n\nThe MITRE ATT\\&CK version referenced by the above fields. E.g. \"8\"."]]