AML AML
MITRE ATLAS technique. View on atlas.mitre.org
Rules tagged with this technique
Every catalog rule tagged with this ATLAS technique, grouped by vendor. Click a rule title for its full predicates, exclusions, and indicators.
Elastic 19 rules
- AWS Bedrock Detected Multiple Attempts to use Denied Models by a Single User
- AWS Bedrock Detected Multiple Validation Exception Errors by a Single User
- AWS Bedrock Guardrails Detected Multiple Policy Violations Within a Single Blocked Request
- AWS Bedrock Guardrails Detected Multiple Violations by a Single User Over a Session
- AWS Bedrock High-Frequency Single-Model Inference API Probing
- AWS Bedrock Invocations without Guardrails Detected by a Single User Over a Session
- GenAI or MCP Server Child Process Execution
- GenAI Process Accessing Sensitive Files
- GenAI Process Compiling or Generating Executables
- GenAI Process Connection to Suspicious Top Level Domain
- GenAI Process Connection to Unusual Domain
- GenAI Process Performing Encoding/Chunking Prior to Network Activity
- Ollama API Accessed from External Network
- Potential Azure OpenAI Model Theft
- Potential Denial of Azure OpenAI ML Service
- Unusual High Confidence Content Filter Blocks Detected
- Unusual High Denied Sensitive Information Policy Blocks Detected
- Unusual High Denied Topic Blocks Detected
- Unusual High Word Policy Blocks Detected