RAG Databases
Sub-technique of AML.T0085 Data from AI Services
Description
Adversaries may prompt the AI service to retrieve data from a RAG database. This can include the majority of an organization's internal documents.
- ATLAS ID
- AML.T0085.000
- Maturity
- DemonstratedShown to work in research or red-team exercises.
- Platforms
- Generative AIAgentic AI
Mitigations
- AML.M0024AI Telemetry Logging
Log requests to AI services to detect malicious queries for data.
- AML.M0026Privileged AI Agent Permissions Configuration
Configuring privileged AI agents with proper access controls can limit an adversary's ability to collect data from RAG Databases if the agent is compromised.
- AML.M0027Single-User AI Agent Permissions Configuration
Configuring AI agents with permissions that are inherited from the user can limit an adversary's ability to collect data from RAG Databases if the agent is compromised.
- AML.M0032Segmentation of AI Agent Components
Segmentation can prevent adversaries from utilizing tools in an agentic workflow to collect sensitive data from RAG databases.