AI Tradecraft - Automated Shell Generation & Execution (T1059.004)
Correlates a script connecting to an LLM API and immediately piping the response or executing rapid shell commands (cmd/bash) representing AI-generated reconnaissance or exploit execution.
Microsoft Sentinel (KQL)

