Axiom Prompt Injection: AI Agent Environment Variable Enumeration for Secret Exfiltration
Detects AI agent processes (e.g., claude, node) executing environment enumeration commands (env, printenv) following suspected prompt injection, combined with subsequent network traffic associated with credential exfiltration patterns.
Microsoft Sentinel (KQL)
