AI Series: Most Significant TTP – LLM Jailbreak / Role-Play Guardrail-Bypass Att
Detects HTTP requests to popular LLM API services (OpenAI, Anthropic, Google, Cohere) containing common jailbreak or role-play patterns. These patterns attempt to bypass safety guardrails by using techniques such as persona-switching (e.g., 'DAN'), hypothetical scenario framing, or unauthorized security testing pretexts.
YARA-L
