Discovery

Type: tactic

Description: Understand the capabilities and mitigations in place.

Version: 0.1.0

Created At: 2025-10-01 13:13:22 -0400

Last Modified At: 2025-10-01 13:13:22 -0400

Tactic Order: 10

External References

  • <-- Discover AI Agent Configuration (technique): Identifying and analyzing the configuration settings of AI agents to uncover knowledge, tools and activation triggers.
  • <-- Discover AI Model Ontology (technique): Identifying the structure, components, or taxonomy of machine learning models to understand their organization and usage.
  • <-- Discover LLM System Information (technique): Extracting internal LLM system information to understand the system's capabilities and aid in crafting prompts.
  • <-- Failure Mode Mapping (technique): An adversary can discover information about how the AI system is protected to guide bypass development.
  • <-- Discover LLM Hallucinations (technique): An Adversary can discover entities hallucinated by the LLM to use during later stages of the attack.
  • <-- Discover AI Artifacts (technique): Searching for AI artifacts such as datasets, models, or configurations to gather insights into an organization's AI processes.
  • <-- Discover AI Model Family (technique): Determining the type or family of machine learning models in use to understand their architecture or potential vulnerabilities.
  • <-- Whoami (technique): An adversary can discover information about the identity that the AI system is running on behalf of.
  • <-- Cloud Service Discovery (technique): Discovering AI services provides adversaries intelligence about the target's AI infrastructure, including model types, access endpoints, container registries, and security configurations. This reconnaissance enables adversaries to map the AI attack surface, identify high-value targets like LLM APIs
  • <-- Discover AI Model Outputs (technique): Examining outputs generated by AI models to infer internal structures, behaviors, or data usage.