MITRE ATLAS Mapped 2026 Top AI Agent Security Detection – RAG Credential Harvesting (AML.T0082)
Detects the ingestion of sensitive credentials (API keys, passwords, private keys) into a RAG (Retrieval-Augmented Generation) document store, followed by the retrieval of those credentials by an application agent, indicating potential credential harvesting within the LLM application pipeline.
YARA-L
