Top AI 2026 | MITRE ATLAS Mapped AML.T0024 – Model Extraction via High-Volume In

Detects anomalous high-volume API requests from a single user/key to AI model inference endpoints. The rule tracks query diversity and total volume within an hour to identify behavior consistent with model extraction or cloning (AML.T0024.002) via systematic input/output pair collection.