> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Get Actor Mitre TTPs
Retrieve the `MITRE ATT&CK TTPs` associated with the threat actor.
**Notes:**
* Enrichment allows access to actor data for `8` hours without consuming tokens.
* Maximum `1` request per second is allowed.
**Response fields:**
* `tokenCharged`: If false, the request does not consume tokens.
* `tokensLeft`: Shows the remaining token balance.
## Parameters
| Parameter | Description |
| ------------------ | ------------------------------------------------------------------------------------------------- |
| Include References | Select to include references in the response. |
| Offset | The offset to start returning results from. |
| Size | The maximum number of results to return.
**Note:** Maximum `1000` results are allowed. |
| Threat Actor ID | The ID of the threat actor. Can be obtained by the `List Threat Actors` action. |
## Example Output
```json theme={"dark"}
{
"total": "Number",
"results": [
{
"id": "String",
"label": "String",
"domain": "String",
"references": [
{
"value": "String",
"type": "String",
"label": "String",
"description": "String"
}
]
}
],
"tokenCharged": "Boolean",
"tokensLeft": "Number"
}
```
## Workflow Library Example
[Get Actor Mitre Ttps with Kela and Send Results Via Email](https://library.blinkops.com/workflows/get-actor-mitre-ttps-with-kela-and-send-results-via-email)
Preview this Workflow on desktop