Top AI 2026 | MITRE ATLAS Mapped AML.T0034 – AI Cost Harvesting & Agentic Resour
This rule detects potential cost harvesting or unauthorized resource abuse by monitoring API endpoints (typically AI model gateways) for high-volume or resource-intensive queries associated with a specific identity. It correlates these patterns with billing or autoscaling trigger events (e.g., cost spikes, quota exhaustion) and identifies agentic sessions that exhibit abnormally long reasoning loops, which suggests an attempt to waste computational budget.
YARA-L

