detection_subcategory_map.csv

ai_system,data_sources,detection_name,detection_status,detection_type,analytic_stories,rmf_function,subcategory_ids,mapping_confidence,mapping_source,mapping_reason
AWS Bedrock Claude,AWS Bedrock Claude,AWS Bedrock Claude Cross Region Possible Inference Abuse,production,Anomaly,Suspicious AWS Bedrock Claude Activities,MAP,Map 4.1,high,generated_rule,"AI component, model, or service discovery signal"
AWS Bedrock Claude,AWS Bedrock Claude,AWS Bedrock Claude excessive use of tokens,production,Anomaly,Suspicious AWS Bedrock Claude Activities,MEASURE,Measure 2.4,high,generated_rule,Production behavior monitoring signal
AWS Bedrock Claude,AWS Bedrock Claude,AWS Bedrock Claude High Risk Filesystem and Exec Tool Invocation,production,Anomaly,Suspicious AWS Bedrock Claude Activities,MEASURE|MANAGE,Measure 2.7|Manage 4.1|Manage 4.3,high,generated_rule,AI security and resilience evaluation signal; Post-deployment monitoring and response signal; Incident tracking or response signal
AWS Bedrock Claude,AWS Bedrock Claude,AWS Bedrock Claude Hostile Prompt Sentiment,production,Anomaly,Suspicious AWS Bedrock Claude Activities,MEASURE,Measure 2.6,high,generated_rule,Prompt-behavior and harmful-content measurement signal
AWS Bedrock Claude,AWS Bedrock Claude,AWS Bedrock Claude Possible Prompt Injection,production,Hunting,Suspicious AWS Bedrock Claude Activities,MEASURE,Measure 2.6|Measure 2.7,high,generated_rule,Prompt-behavior and harmful-content measurement signal; AI security and resilience evaluation signal
AWS Bedrock Claude,AWS Bedrock Claude,AWS Bedrock Claude Sensitive Data in Prompts,production,Anomaly,Suspicious AWS Bedrock Claude Activities,MEASURE,Measure 2.10,high,generated_rule,Sensitive information or data-protection signal
AWS Bedrock Claude,AWS Bedrock Claude,AWS Bedrock Claude Unusually Large Prompts,production,Anomaly,Suspicious AWS Bedrock Claude Activities,MEASURE,Measure 2.4,high,generated_rule,Production behavior monitoring signal
Cisco AI Defense,Cisco AI Defense Alerts,Cisco AI Defense Security Alerts by Application Name,production,Anomaly,Critical Alerts,MANAGE,Manage 4.1,high,generated_rule,Post-deployment monitoring and response signal
Local LLM Frameworks,CrowdStrike ProcessRollup2|Sysmon EventID 1|Windows Event Log Security 4688,Windows Local LLM Framework Execution,production,Hunting,Suspicious Local LLM Frameworks,GOVERN|MAP,Govern 1.6|Map 4.1|Map 4.2,high,generated_rule,"AI system or access inventory signal; AI component, model, or service discovery signal; AI system operating context signal"
Local LLM Frameworks,Sysmon EventID 11,LLM Model File Creation,production,Hunting,Suspicious Local LLM Frameworks,GOVERN|MAP,Govern 1.6|Map 4.1,high,generated_rule,"AI system or access inventory signal; AI component, model, or service discovery signal"
Local LLM Frameworks,Sysmon EventID 22,Local LLM Framework DNS Query,production,Hunting,Suspicious Local LLM Frameworks,MAP,Map 4.1,high,generated_rule,"AI component, model, or service discovery signal"
M365 Copilot,M365 Copilot Graph API,M365 Copilot Application Usage Pattern Anomalies,production,Anomaly,Suspicious Microsoft 365 Copilot Activities,MEASURE,Measure 2.4,high,generated_rule,Production behavior monitoring signal
M365 Copilot,M365 Copilot Graph API,M365 Copilot Failed Authentication Patterns,production,Anomaly,Suspicious Microsoft 365 Copilot Activities,MEASURE|MANAGE,Measure 2.4|Manage 4.1,high,generated_rule,Production behavior monitoring signal; Post-deployment monitoring and response signal
M365 Copilot,M365 Copilot Graph API,M365 Copilot Non Compliant Devices Accessing M365 Copilot,production,Anomaly,Suspicious Microsoft 365 Copilot Activities,GOVERN,Govern 1.6,high,generated_rule,AI system or access inventory signal
M365 Copilot,M365 Copilot Graph API,M365 Copilot Session Origin Anomalies,production,Anomaly,Suspicious Microsoft 365 Copilot Activities,MEASURE,Measure 2.4,high,generated_rule,Production behavior monitoring signal
M365 Copilot,M365 Exported eDiscovery Prompts,M365 Copilot Agentic Jailbreak Attack,experimental,Anomaly,Suspicious Microsoft 365 Copilot Activities,MEASURE,Measure 2.6|Measure 2.7,high,generated_rule,Prompt-behavior and harmful-content measurement signal; AI security and resilience evaluation signal
M365 Copilot,M365 Exported eDiscovery Prompts,M365 Copilot Impersonation Jailbreak Attack,experimental,TTP,Suspicious Microsoft 365 Copilot Activities,MEASURE,Measure 2.6|Measure 2.7,high,generated_rule,Prompt-behavior and harmful-content measurement signal; AI security and resilience evaluation signal
M365 Copilot,M365 Exported eDiscovery Prompts,M365 Copilot Information Extraction Jailbreak Attack,experimental,TTP,Suspicious Microsoft 365 Copilot Activities,MEASURE,Measure 2.6|Measure 2.7|Measure 2.10,high,generated_rule,Prompt-behavior and harmful-content measurement signal; AI security and resilience evaluation signal; Sensitive information or data-protection signal
M365 Copilot,M365 Exported eDiscovery Prompts,M365 Copilot Jailbreak Attempts,experimental,Anomaly,Suspicious Microsoft 365 Copilot Activities,MEASURE,Measure 2.6|Measure 2.7,high,generated_rule,Prompt-behavior and harmful-content measurement signal; AI security and resilience evaluation signal
MCP,MCP Server,MCP Filesystem Server Suspicious Extension Write,production,Hunting,Suspicious MCP Activities,MEASURE,Measure 2.7,high,generated_rule,AI security and resilience evaluation signal
MCP,MCP Server,MCP Github Suspicious Operation,production,Hunting,Suspicious MCP Activities,MEASURE,Measure 2.7,high,generated_rule,AI security and resilience evaluation signal
MCP,MCP Server,MCP Postgres Suspicious Query,production,Hunting,Suspicious MCP Activities,MEASURE,Measure 2.7,high,generated_rule,AI security and resilience evaluation signal
MCP,MCP Server,MCP Prompt Injection,production,TTP,Suspicious MCP Activities,MEASURE,Measure 2.6|Measure 2.7,high,generated_rule,Prompt-behavior and harmful-content measurement signal; AI security and resilience evaluation signal
MCP,MCP Server,MCP Sensitive System File Search,production,Hunting,Suspicious MCP Activities,MEASURE,Measure 2.10,high,generated_rule,Sensitive information or data-protection signal
Ollama,Ollama Server,Ollama Abnormal Network Connectivity,experimental,Anomaly,Suspicious Ollama Activities,MAP,Map 4.1,high,generated_rule,"AI component, model, or service discovery signal"
Ollama,Ollama Server,Ollama Abnormal Service Crash Availability Attack,experimental,Anomaly,Suspicious Ollama Activities,MANAGE,Manage 4.1,high,generated_rule,Post-deployment monitoring and response signal
Ollama,Ollama Server,Ollama Excessive API Requests,experimental,Anomaly,Suspicious Ollama Activities,MEASURE|MANAGE,Measure 2.4|Manage 4.1,high,generated_rule,Production behavior monitoring signal; Post-deployment monitoring and response signal
Ollama,Ollama Server,Ollama Possible API Endpoint Scan Reconnaissance,experimental,Anomaly,Suspicious Ollama Activities,MAP,Map 4.1,high,generated_rule,"AI component, model, or service discovery signal"
Ollama,Ollama Server,Ollama Possible Memory Exhaustion Resource Abuse,experimental,Anomaly,Suspicious Ollama Activities,MEASURE|MANAGE,Measure 2.4|Manage 4.1,high,generated_rule,Production behavior monitoring signal; Post-deployment monitoring and response signal
Ollama,Ollama Server,Ollama Possible Model Exfiltration Data Leakage,experimental,Anomaly,Suspicious Ollama Activities,MEASURE,Measure 2.10,high,generated_rule,Sensitive information or data-protection signal
Ollama,Ollama Server,Ollama Possible RCE via Model Loading,experimental,Anomaly,Suspicious Ollama Activities,MEASURE|MANAGE,Measure 2.7|Manage 4.3,high,generated_rule,AI security and resilience evaluation signal; Incident tracking or response signal
Ollama,Ollama Server,Ollama Suspicious Prompt Injection Jailbreak,experimental,Anomaly,Suspicious Ollama Activities,MEASURE,Measure 2.6|Measure 2.7,high,generated_rule,Prompt-behavior and harmful-content measurement signal; AI security and resilience evaluation signal