{"id":"0dab072f-6a53-45b9-b93e-a130e5efd6b5","url":"https://ot-intel-api.onrender.com/ot/mitigation-map?actor=SANDWORM","method":"GET","fingerprint":"59176ad1f677e76e4d5e5175c61a126473f8350b83305b8155e5bce33fc6e80c","name":null,"description":null,"category":"other","docs_url":null,"advertised_price_usd":"0.200000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","scheme":"exact","networks":["eip155:8453"],"pay_to":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","input_schema":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":[],"properties":{"actor":{"type":"string","description":"Threat actor name e.g. SANDWORM. At least one of actor, cve_id, or technique_id is required."},"cve_id":{"type":"string","description":"CVE identifier. At least one of actor, cve_id, or technique_id is required."},"technique_id":{"type":"string","description":"MITRE ATT&CK ICS technique ID e.g. T0836. At least one of actor, cve_id, or technique_id is required."},"vendor_stack":{"type":"string","description":"Optional vendor/product context e.g. Schneider Modicon."}}}},"additionalProperties":false},"output_schema":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}},"schema_completeness":0,"status":"live","first_seen_at":"2026-08-23 22:54:01.089732+00","last_seen_at":"2026-08-23 22:53:59.415+00","last_success_at":"2026-10-15 11:37:00.678+00","dead_since":null,"probe_backoff_tier":0,"next_probe_at":"2026-10-15 11:42:00.678+00","search_tsv":"","catalog_number":"4371","x402_version":2,"resource_url":"https://ot-intel-api.onrender.com/ot/mitigation-map?actor=SANDWORM","resource_description":"Prescriptive D3FEND-mapped mitigation guidance for OT/ICS threats. Pass one of ?actor=<threat actor name>, ?cve_id=<CVE ID>, or ?technique_id=<MITRE ATT&CK ICS technique ID e.g. T0836>, optionally with &vendor_stack=<vendor/product context e.g. Schneider Modicon>. Returns matched ATT&CK ICS techniques mapped to D3FEND defensive countermeasures with priority and rationale, plus prescriptive architecture recommendations. DeepSeek-synthesised, ICD-203 estimative language.","bazaar_extension":{"info":{"input":{"type":"http","method":"GET","queryParams":{"actor":"SANDWORM"}},"output":{"type":"json","example":{"tlp":"TLP:CLEAR","actor":"SANDWORM","cve_id":null,"confidence":"moderate","mitigations":[{"attack_technique_id":"T0836","attack_technique_name":"Modify Parameter","d3fend_countermeasures":[{"id":"D3-PSMD","name":"Process Segment Monitoring / Deviation Detection","priority":"high","rationale":"Detects unauthorized setpoint changes."}]}],"vendor_stack":"Schneider Modicon","architecture_recommendations":["Deploy baseline deviation monitoring on Modicon controller parameter writes."]}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":[],"properties":{"actor":{"type":"string","description":"Threat actor name e.g. SANDWORM. At least one of actor, cve_id, or technique_id is required."},"cve_id":{"type":"string","description":"CVE identifier. At least one of actor, cve_id, or technique_id is required."},"technique_id":{"type":"string","description":"MITRE ATT&CK ICS technique ID e.g. T0836. At least one of actor, cve_id, or technique_id is required."},"vendor_stack":{"type":"string","description":"Optional vendor/product context e.g. Schneider Modicon."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}},"accepted_requirements":[{"raw":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","amount":"200000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","scheme":"exact","network":"eip155:8453","amountAtomic":"200000"}],"bazaar_compatible":true,"bazaar_validated_at":"2026-10-15 11:37:00.678+00","bazaar_validation_error":null,"window":"24h","probes_n":10,"handshake_uptime":1,"settle_success_rate":0,"valid_result_rate":null,"latency_p50":456,"latency_p90":1595,"price_drift_pct":0,"score":0.6297,"computed_at":"2026-10-15 11:37:20.433+00","source_metadata":[{"raw":{"url":"https://ot-intel-api.onrender.com/ot/mitigation-map?actor=SANDWORM","method":"GET","source":"bazaar:api.cdp.coinbase.com","fingerprint":"59176ad1f677e76e4d5e5175c61a126473f8350b83305b8155e5bce33fc6e80c","advertisedPriceUsd":0.2},"source_id":1,"external_id":null}],"live_endpoint_metadata":{"x402_version":2,"resource_url":"https://ot-intel-api.onrender.com/ot/mitigation-map?actor=SANDWORM","resource_description":"Prescriptive D3FEND-mapped mitigation guidance for OT/ICS threats. Pass one of ?actor=<threat actor name>, ?cve_id=<CVE ID>, or ?technique_id=<MITRE ATT&CK ICS technique ID e.g. T0836>, optionally with &vendor_stack=<vendor/product context e.g. Schneider Modicon>. Returns matched ATT&CK ICS techniques mapped to D3FEND defensive countermeasures with priority and rationale, plus prescriptive architecture recommendations. DeepSeek-synthesised, ICD-203 estimative language.","bazaar_extension":{"info":{"input":{"type":"http","method":"GET","queryParams":{"actor":"SANDWORM"}},"output":{"type":"json","example":{"tlp":"TLP:CLEAR","actor":"SANDWORM","cve_id":null,"confidence":"moderate","mitigations":[{"attack_technique_id":"T0836","attack_technique_name":"Modify Parameter","d3fend_countermeasures":[{"id":"D3-PSMD","name":"Process Segment Monitoring / Deviation Detection","priority":"high","rationale":"Detects unauthorized setpoint changes."}]}],"vendor_stack":"Schneider Modicon","architecture_recommendations":["Deploy baseline deviation monitoring on Modicon controller parameter writes."]}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":[],"properties":{"actor":{"type":"string","description":"Threat actor name e.g. SANDWORM. At least one of actor, cve_id, or technique_id is required."},"cve_id":{"type":"string","description":"CVE identifier. At least one of actor, cve_id, or technique_id is required."},"technique_id":{"type":"string","description":"MITRE ATT&CK ICS technique ID e.g. T0836. At least one of actor, cve_id, or technique_id is required."},"vendor_stack":{"type":"string","description":"Optional vendor/product context e.g. Schneider Modicon."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}},"accepted_requirements":[{"raw":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","amount":"200000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","scheme":"exact","network":"eip155:8453","amountAtomic":"200000"}],"bazaar_compatible":true,"bazaar_validated_at":"2026-10-15 11:37:00.678+00","bazaar_validation_error":null},"sonar_metrics":{"score":0.6297,"uptime":1,"paid_success_rate":0,"valid_result_rate":null,"latency_p50":456,"latency_p90":1595,"price_drift_pct":0},"cdp_indexed":false,"confidence":"medium"}