Discover AI Agent Configuration
Description
Adversaries may attempt to discover configuration information for AI agents present on the victim's system. Agent configurations can include tools or services they have access to.
Adversaries may directly access agent configuring dashboards or configuration files. They may also obtain configuration details by prompting the agent with questions such as "What tools do you have access to?"
Adversaries can use the information they discover about AI agents to help with targeting.
- ATLAS ID
- AML.T0084
- Maturity
- DemonstratedShown to work in research or red-team exercises.
- Platforms
- Agentic AI
Sub-techniques
Mitigations
- AML.M0000Limit Public Release of Information
Limit public disclosure of agent tools, services, configuration, and workflows.
- AML.M0039AI Honeypots
Honeypots can surface which agent configuration and related assets adversaries hunt for, exposing the reconnaissance that precedes agent-targeted attacks, and acting as both canary tokens and decoy.