AI Series: Most Significant TTP – AI-Generated Zero-Day Exploit Delivery
Detects anomalous child process spawning from common web browsers or productivity applications (e.g., Office, Acrobat) on hosts that have recently communicated with known LLM or code-generation APIs. This behavioral correlation is intended to identify the potential execution of AI-generated exploit code.
YARA-L
