Query Platform Metadata APIs
Sub-technique of AML.T0006 Active Scanning
Description
Adversaries may query documented or undocumented APIs in agentic SaaS hosting platforms to uncover agentic targets. SaaS and agentic platforms can expose provider control-plane or identity APIs that return tenant, environment, or deployment information IDs, including for resources that are misconfigured or unintentionally accessible by unauthenticated users.
Attackers have been seen abusing this type of functionality to perform information gathering on SaaS platforms, for example via AADInternals' OSINT page,[[aadinternals]] an OSINT online tool showcasing an undocumented API reconnaissance method for Entra ID. This undocumented Power Platform API could be used to uncover environment IDs, which may subsequently be used to scan for public agents. Following the identified abuse, required authentication was added to the tool.
- ATLAS ID
- AML.T0006.001
- Maturity
- FeasibleShown to be possible in principle (proof of concept).
- Platforms
- Predictive AIGenerative AIAgentic AIEnterprise
Mitigations
- AML.M0039AI Honeypots
By capturing adversarial fingerprinting behavior, honeypots can help provide early warning of sweeping activity meant to discover exposed AI targets and attack surfaces being explored by adversaries.
Case studies that use it
No ATLAS case study records this technique yet. Browse all case studies.
Related ATT&CK technique
ATLAS references this ATT&CK technique on the parent technique.
Marked techniques are also explained, with detection notes and certification relevance, on our interactive ATT&CK map.