Enumerate Hosted AI Resources
Sub-technique of AML.T0006 Active Scanning
Description
Adversaries may directly probe an agentic or SaaS platform to enumerate the resources a specific victim has deployed on it. Platforms frequently host AI agents behind predictable URL structures derived from identifiers such as environment, tenant, resource-group, or agent names, and default out-of-the-box deployment configurations keep these conventions consistent across victims. Adversaries can learn these conventions from public sources such as vendor documentation, code repositories and actual hosted resources, then fuzz or brute-force the derived namespace to discover live AI agents, endpoints, and associated metadata. Discovered resources can be used to identify targets for further access, collection, or attack adaptation.
- ATLAS ID
- AML.T0006.000
- Maturity
- FeasibleShown to be possible in principle (proof of concept).
- Platforms
- Predictive AIGenerative AIAgentic AIEnterprise
Mitigations
- AML.M0039AI Honeypots
By capturing adversarial fingerprinting behavior, honeypots can help provide early warning of sweeping activity meant to discover exposed AI targets and attack surfaces being explored by adversaries.
Case studies that use it
No ATLAS case study records this technique yet. Browse all case studies.
Related ATT&CK technique
ATLAS references this ATT&CK technique on the parent technique.
Marked techniques are also explained, with detection notes and certification relevance, on our interactive ATT&CK map.