Probe AI Agent Trigger Channels
Sub-technique of AML.T0006 Active Scanning
Description
Adversaries may send crafted inputs to potential public triggers, such as email addresses, webhooks, or messaging channels, to elicit a response that indicates an invocation of agentic activity. The nature of the response and its content can often reveal agent-managed accounts and expose the additional agentic attack surface. Identified triggers can be used to directly attack the agent.
- ATLAS ID
- AML.T0006.003
- Maturity
- DemonstratedShown to work in research or red-team exercises.
- Platforms
- Agentic AIEnterprise
Mitigations
- AML.M0039AI Honeypots
By capturing adversarial fingerprinting behavior, honeypots can help provide early warning of sweeping activity meant to discover exposed AI targets and attack surfaces being explored by adversaries.
Case studies that use it
Related ATT&CK technique
ATLAS adapts this technique from MITRE ATT&CK Enterprise.
Marked techniques are also explained, with detection notes and certification relevance, on our interactive ATT&CK map.