MITRE ATLAS Mapped 2026 – Top AI LLM Jailbreak Attempt Detection (AML.T0054)
Detects LLM jailbreak attempts using a 'crescendo' multi-turn strategy. The rule monitors for sequences where an initial prompt contains known jailbreak-intent keywords leading to an AI refusal, followed shortly by a compliant AI response to a rephrased request within the same conversation session.
Microsoft Sentinel (KQL)
