MITRE ATLAS Mapped 2026 – Top AI LLM Sensitive Data Leakage Detection (AML.T0057)
Detects potential sensitive data leakage from an AI model response (AIGatewayLogs_CL). The rule monitors AI responses for patterns indicative of PII (SSN, credit card numbers), secrets (API keys, tokens), or sensitive document markers. It correlates these signals with RAG (Retrieval-Augmented Generation) ingestion logs to identify data cross-tenant violations or improper access to confidential/restricted datasets.
Microsoft Sentinel (KQL)
