Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

2 detections

Detects an AI agent sandbox exfiltrating harvested PII/session context by embedding it as an x-auth-token query parameter in an outbound HTTP request to an external host — the network-observable exfiltration stage of Cryptographic Context Injection.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
2 months ago
208
Detects an AI agent's code-execution sandbox decrypting attacker-supplied AES/PBKDF2 ciphertext immediately after fetching untrusted external content — the core trust-laundering mechanism behind Cryptographic Context Injection attacks.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
2 months ago
000