Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
2 detections
Filters
Last updated
All Time
Detection languages
2
Contributors
2
Categories
2
2
2
Platforms
2
2
Products / Services
2
2
MITRE Techniques
18,116
15,638
12,587
8,397
6,227
Detects high-frequency, sustained queries to an ML inference endpoint from a single identity, indicative of gradient-free training data reconstruction or model inversion attacks. The rule triggers when a specific user or API key performs over 100 successful requests within a 15-minute window, where the responses include granular confidence, probability, or logit values, which are typical targets for reconstructing training data.
Detects high-frequency, sustained queries to an ML inference endpoint from a single identity, indicative of gradient-free training data reconstruction or model inversion attacks. The rule triggers when a specific user or API key performs over 100 successful requests within a 15-minute window, where the responses include granular confidence, probability, or logit values, which are typical targets for reconstructing training data.