MITRE ATLAS 2026.09 / source relationships
ATLAS mitigation relationships
Source-linked mitigation IDs and their related ATLAS techniques.
← ATLAS matrix · Pinned MITRE source · Current MITRE ATLAS site
Relationship index
Names and technique relationships below come from the pinned MITRE release. This index does not reproduce full mitigation or case-study records, prove control effectiveness, or imply a live incident.
AML.M0000 — Limit Public Release of Information
Related ATLAS techniques:
- AML.T0000 Search Open Technical Databases
- AML.T0001 Search Open AI Vulnerability Analysis
- AML.T0002 Acquire Public AI Artifacts
- AML.T0003 Search Victim-Owned Websites
- AML.T0004 Search Application Repositories
- AML.T0005 Create Proxy AI Model
- AML.T0005.000 Train Proxy via Gathered AI Artifacts
- AML.T0005.002 Use Pre-Trained Model
- AML.T0064 Gather RAG-Indexed Targets
- AML.T0069 Discover LLM System Information
- AML.T0084 Discover AI Agent Configuration
- AML.T0084.001 Tool Definitions
- AML.T0084.002 Activation Triggers
- AML.T0084.003 Call Chains
- AML.T0095 Search Open Websites/Domains
AML.M0001 — Limit Model Artifact Release
Related ATLAS techniques:
AML.M0002 — Predictive AI Output Obfuscation
Related ATLAS techniques:
- AML.T0005 Create Proxy AI Model
- AML.T0005.001 Train Proxy via Replication
- AML.T0013 Discover AI Model Ontology
- AML.T0014 Discover AI Model Family
- AML.T0024.000 Infer Training Data Membership
- AML.T0024.001 Invert AI Model
- AML.T0024.002 Extract AI Model
- AML.T0042 Verify Attack
- AML.T0043 Craft Adversarial Data
- AML.T0043.001 Black-Box Optimization
- AML.T0063 Discover AI Model Outputs
AML.M0003 — Predictive AI Model Hardening
Related ATLAS techniques:
AML.M0004 — Limit AI Service Query Volume and Rate
Related ATLAS techniques:
- AML.T0005 Create Proxy AI Model
- AML.T0005.001 Train Proxy via Replication
- AML.T0013 Discover AI Model Ontology
- AML.T0014 Discover AI Model Family
- AML.T0024 Exfiltration via AI Inference API
- AML.T0024.000 Infer Training Data Membership
- AML.T0024.001 Invert AI Model
- AML.T0024.002 Extract AI Model
- AML.T0029 Denial of AI Service
- AML.T0034 Cost Harvesting
- AML.T0042 Verify Attack
- AML.T0043 Craft Adversarial Data
- AML.T0043.001 Black-Box Optimization
- AML.T0043.003 Manual Modification
- AML.T0046 Spamming AI System with Chaff Data
- AML.T0062 Discover LLM Hallucinations
AML.M0005 — Control Access to AI Models and Data at Rest
Related ATLAS techniques:
- AML.T0007 Discover AI Artifacts
- AML.T0010.002 Data
- AML.T0010.003 Model
- AML.T0012 Valid Accounts
- AML.T0018 Manipulate AI Model
- AML.T0018.000 Poison AI Model
- AML.T0018.001 Modify AI Model Architecture
- AML.T0020 Training Data Poisoning
- AML.T0021 Establish Accounts
- AML.T0025 Exfiltration via Cyber Means
- AML.T0035 AI Artifact Collection
- AML.T0042 Verify Attack
- AML.T0043.000 White-Box Optimization
- AML.T0044 Full AI Model Access
- AML.T0048.004 AI Intellectual Property Theft
- AML.T0069 Discover LLM System Information
- AML.T0069.000 Special Character Sets
- AML.T0069.001 System Instruction Keywords
- AML.T0069.002 System Prompt
- AML.T0112.001 AI Artifacts
AML.M0006 — Predictive AI Ensembles
Related ATLAS techniques:
- AML.T0010.001 AI Software
- AML.T0010.003 Model
- AML.T0014 Discover AI Model Family
- AML.T0015 Evade AI Model
- AML.T0031 Erode AI Model Integrity
- AML.T0043 Craft Adversarial Data
- AML.T0043.000 White-Box Optimization
- AML.T0043.001 Black-Box Optimization
- AML.T0043.002 Black-Box Transfer
- AML.T0043.003 Manual Modification
- AML.T0043.004 Insert Backdoor Trigger
AML.M0007 — Sanitize Training Data
Related ATLAS techniques:
AML.M0008 — Validate AI Model
Related ATLAS techniques:
- AML.T0010.003 Model
- AML.T0018 Manipulate AI Model
- AML.T0018.000 Poison AI Model
- AML.T0018.001 Modify AI Model Architecture
- AML.T0020 Training Data Poisoning
- AML.T0043 Craft Adversarial Data
- AML.T0043.004 Insert Backdoor Trigger
- AML.T0057 LLM Data Leakage
- AML.T0115 Publish Poisoned AI Artifacts
- AML.T0115.001 Models
AML.M0009 — Predictive AI Multi-Sensor Fusion
Related ATLAS techniques:
AML.M0010 — Predictive AI Input Restoration
Related ATLAS techniques:
AML.M0011 — Restrict Library Loading
Related ATLAS techniques:
AML.M0012 — Encrypt Sensitive Information
Related ATLAS techniques:
AML.M0013 — Code Signing
Related ATLAS techniques:
AML.M0014 — Verify AI Artifacts
Related ATLAS techniques:
AML.M0015 — Predictive AI Adversarial Input Detection
Related ATLAS techniques:
AML.M0016 — Vulnerability Scanning
Related ATLAS techniques:
- AML.T0011 User Execution
- AML.T0011.000 Unsafe AI Artifacts
- AML.T0011.001 Malicious Package
- AML.T0106 Exploitation for Credential Access
- AML.T0107 Exploitation for Defense Evasion
- AML.T0115 Publish Poisoned AI Artifacts
- AML.T0115.001 Models
- AML.T0115.002 AI Agent Tools
- AML.T0119 Exploit Automated Artifact Processing Pipeline
- AML.T0122 Exploitation of Remote Services
AML.M0017 — AI Model Distribution Methods
Related ATLAS techniques:
AML.M0018 — User Training
Related ATLAS techniques:
AML.M0019 — Control Access to AI Models and Data in Production
Related ATLAS techniques:
- AML.T0005 Create Proxy AI Model
- AML.T0006 Active Scanning
- AML.T0012 Valid Accounts
- AML.T0021 Establish Accounts
- AML.T0024 Exfiltration via AI Inference API
- AML.T0029 Denial of AI Service
- AML.T0034 Cost Harvesting
- AML.T0040 AI Model Inference API Access
- AML.T0042 Verify Attack
- AML.T0043 Craft Adversarial Data
- AML.T0043.001 Black-Box Optimization
- AML.T0046 Spamming AI System with Chaff Data
- AML.T0051 LLM Prompt Injection
- AML.T0063 Discover AI Model Outputs
- AML.T0069 Discover LLM System Information
- AML.T0069.000 Special Character Sets
- AML.T0069.002 System Prompt
- AML.T0091 Use Alternate Authentication Material
- AML.T0091.000 Application Access Token
- AML.T0096 AI Service API
AML.M0020 — Generative AI Guardrails
Related ATLAS techniques:
- AML.T0010 AI Supply Chain Compromise
- AML.T0016.002 Generative AI
- AML.T0051 LLM Prompt Injection
- AML.T0053 AI Agent Tool Invocation
- AML.T0054 LLM Jailbreak
- AML.T0056 Extract LLM System Prompt
- AML.T0057 LLM Data Leakage
- AML.T0061 LLM Prompt Self-Replication
- AML.T0062 Discover LLM Hallucinations
- AML.T0066 Retrieval Content Crafting
- AML.T0068 LLM Prompt Obfuscation
- AML.T0069 Discover LLM System Information
- AML.T0069.000 Special Character Sets
- AML.T0069.001 System Instruction Keywords
- AML.T0069.002 System Prompt
- AML.T0070 RAG Poisoning
- AML.T0071 False RAG Entry Injection
- AML.T0078 Drive-by Compromise
- AML.T0099 AI Agent Tool Data Poisoning
- AML.T0100 AI Agent Clickbait
- AML.T0102 Generate Malicious Commands
- AML.T0108 AI Agent
- AML.T0112.000 Local AI Agent
AML.M0021 — Generative AI Guidelines
Related ATLAS techniques:
AML.M0022 — Generative AI Model Alignment
Related ATLAS techniques:
AML.M0023 — AI Bill of Materials
Related ATLAS techniques:
AML.M0024 — AI Telemetry Logging
Related ATLAS techniques:
- AML.T0005.001 Train Proxy via Replication
- AML.T0024 Exfiltration via AI Inference API
- AML.T0024.000 Infer Training Data Membership
- AML.T0024.001 Invert AI Model
- AML.T0024.002 Extract AI Model
- AML.T0040 AI Model Inference API Access
- AML.T0047 AI-Enabled Product or Service
- AML.T0051 LLM Prompt Injection
- AML.T0051.000 Direct
- AML.T0051.001 Indirect
- AML.T0051.002 Triggered
- AML.T0053 AI Agent Tool Invocation
- AML.T0085 Data from AI Services
- AML.T0085.000 RAG Databases
- AML.T0085.001 AI Agent Tools
- AML.T0086 Exfiltration via AI Agent Tool Invocation
- AML.T0101 Data Destruction via AI Agent Tool Invocation
- AML.T0114 AI Service Web Interface
AML.M0025 — Maintain AI Dataset Provenance
Related ATLAS techniques:
AML.M0026 — Privileged AI Agent Permissions Configuration
Related ATLAS techniques:
AML.M0027 — Single-User AI Agent Permissions Configuration
Related ATLAS techniques:
AML.M0028 — AI Agent Tools Permissions Configuration
Related ATLAS techniques:
AML.M0029 — Human In-the-Loop for AI Agent Actions
Related ATLAS techniques:
AML.M0030 — Restrict AI Agent Tool Invocation on Untrusted Data
Related ATLAS techniques:
AML.M0031 — Memory Hardening
Related ATLAS techniques:
AML.M0032 — Segmentation of AI Agent Components
Related ATLAS techniques:
AML.M0033 — Input and Output Validation for AI Agent Components
Related ATLAS techniques:
AML.M0034 — Deepfake Detection
Related ATLAS techniques:
AML.M0035 — AI Red Team
Related ATLAS techniques:
- AML.T0010 AI Supply Chain Compromise
- AML.T0010.001 AI Software
- AML.T0010.002 Data
- AML.T0010.003 Model
- AML.T0010.005 AI Agent Tool
- AML.T0015 Evade AI Model
- AML.T0018 Manipulate AI Model
- AML.T0018.000 Poison AI Model
- AML.T0018.001 Modify AI Model Architecture
- AML.T0020 Training Data Poisoning
- AML.T0024 Exfiltration via AI Inference API
- AML.T0024.000 Infer Training Data Membership
- AML.T0024.001 Invert AI Model
- AML.T0024.002 Extract AI Model
- AML.T0029 Denial of AI Service
- AML.T0034 Cost Harvesting
- AML.T0034.000 Excessive Queries
- AML.T0034.001 Resource-Intensive Queries
- AML.T0034.002 Agentic Resource Consumption
- AML.T0051 LLM Prompt Injection
- AML.T0051.000 Direct
- AML.T0051.001 Indirect
- AML.T0051.002 Triggered
- AML.T0053 AI Agent Tool Invocation
- AML.T0054 LLM Jailbreak
- AML.T0056 Extract LLM System Prompt
- AML.T0057 LLM Data Leakage
- AML.T0068 LLM Prompt Obfuscation
- AML.T0070 RAG Poisoning
- AML.T0080 AI Agent Context Poisoning
- AML.T0080.000 Memory
- AML.T0080.001 Thread
- AML.T0081 Modify AI Agent Configuration
AML.M0036 — Limit AI Workload Resource Consumption
Related ATLAS techniques:
AML.M0037 — AI Agent Authority Expansion Controls
Related ATLAS techniques:
AML.M0038 — AI Agent Scope Drift Detection
Related ATLAS techniques:
AML.M0039 — AI Honeypots
Related ATLAS techniques:
- AML.T0000 Search Open Technical Databases
- AML.T0000.003 Scan Databases
- AML.T0006 Active Scanning
- AML.T0006.000 Enumerate Hosted AI Resources
- AML.T0006.001 Query Platform Metadata APIs
- AML.T0006.002 Scan for Exposed AI Infrastructure
- AML.T0006.003 Probe AI Agent Trigger Channels
- AML.T0040 AI Model Inference API Access
- AML.T0049 Exploit Public-Facing Application
- AML.T0084 Discover AI Agent Configuration
- AML.T0093 Prompt Infiltration via Public-Facing Application
- AML.T0095 Search Open Websites/Domains
- AML.T0095.000 Code Repositories
- AML.T0132 Misconfigured or Publicly Exposed AI Services
- AML.T0133 Discover AI Agent Runtime Capabilities