AI Tradecraft - Base64 Payload Sourced from LLM (T1027)

Ibrahim Saud@tektrix

•updated Jun 21, 2026•0•0•6

Identifies processes executing Base64 decoded commands where the parent script recently communicated with an AI endpoint, representing prompt-injected or AI-generated payloads.