Is there a way to get all ATT&CK techniques (not just the top 13 shown in the Dashboard)?
The API will get you what you want.
This view uses attack/statistics endpoint and pulls the top cve_counts for the current year.
curl -X 'GET' \
'https://api.vulmatch.com/v1/attack/statistics/' \
-H 'accept: application/json' \
-H 'API-KEY: HIDDEN'
The response for each ATT&CK Technique contains counts by year as follows…
[
{
"attack_id": "T1574.007",
"total_cve_count": 822,
"by_year": [
{
"year": "2009",
"cve_count": 2
},
{
"year": "2013",
"cve_count": 2
},
{
"year": "2014",
"cve_count": 6
},
{
"year": "2015",
"cve_count": 1
},
{
"year": "2016",
"cve_count": 1
},
{
"year": "2017",
"cve_count": 1
},
{
"year": "2018",
"cve_count": 31
},
{
"year": "2019",
"cve_count": 4
},
{
"year": "2020",
"cve_count": 4
},
{
"year": "2021",
"cve_count": 5
},
{
"year": "2022",
"cve_count": 3
},
{
"year": "2023",
"cve_count": 14
},
{
"year": "2024",
"cve_count": 87
},
{
"year": "2025",
"cve_count": 661
}
]
},
{
"attack_id": "T1574.006",
"total_cve_count": 785,
"by_year": [
{
"year": "2009",
"cve_count": 2
},
{
"year": "2013",
"cve_count": 2
},
{
"year": "2014",
"cve_count": 6
},
{
"year": "2015",
"cve_count": 1
},
{
"year": "2016",
"cve_count": 1
},
{
"year": "2017",
"cve_count": 1
},
{
"year": "2018",
"cve_count": 30
},
{
"year": "2019",
"cve_count": 5
},
{
"year": "2020",
"cve_count": 3
},
{
"year": "2021",
"cve_count": 6
},
{
"year": "2022",
"cve_count": 3
},
{
"year": "2023",
"cve_count": 14
},
{
"year": "2024",
"cve_count": 88
},
{
"year": "2025",
"cve_count": 623
}
]
},