Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

2 detections

Detects an AI agent disclosing system-prompt or safety-policy content, or returning sandbox re-encrypted ciphertext-only output, immediately following a cryptographic-injection-style probe request in the same session — the safety-policy-bypass stage of Cryptographic Context Injection.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
2 months ago
007
Detects an AI agent's code-execution sandbox decrypting attacker-supplied AES/PBKDF2 ciphertext immediately after fetching untrusted external content — the core trust-laundering mechanism behind Cryptographic Context Injection attacks.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
2 months ago
000