AI agent process invokes bulk file/data destruction commands

Ibrahim Saud@tektrix

•updated 13 days ago•0•0•2

Detects instances where an AI agent (e.g., Semantic Kernel) launches command-line tools commonly used to perform bulk data destruction or system wiping, such as file deletion commands, volume shadow copy removal, or disk formatting. This rule flags suspicious orchestration by AI agents that may be acting outside of expected parameters.