MITRE ATLAS 2026 Top AI Detection: Unauthorized Full Model Weights Download (AML.T0044)

Ibrahim Saud@tektrix

•updated 11 days ago•0•0•1

This rule detects the unauthorized download of complete ML model checkpoint or weight files from a model registry or object storage. It monitors for common model file extensions in download events that are not associated with a legitimate deployment justification or a pre-approved change management window, helping to identify potential intellectual property theft or model exfiltration attempts.