1200KM / detection
T1608.007 AI Result Poisoning — Detection Rules
Detection workspace for T1608.007 AI Result Poisoning: 0 Sigma sources, 0 Atlas concepts and 0 anomaly models. No live detection validation.
Source-backed rule directory
No reviewed association in this snapshot.
Atlas deterministic concepts
No exact concept selected.
Anomaly models
No exact Atlas model in this snapshot.
ATT&CK analytic guidance
DET0922 Detection of AI Result Poisoning
AN2068 Analytic 2068
No target-side behavioral analytic. A defender cannot reliably distinguish an adversary intentionally staging public content to manipulate future AI retrieval from ordinary publishing, SEO, inaccurate information, duplicated content, or legitimate coordinated publication using target-enterprise telemetry.
Connected ecosystem references
Linked tags
Simulation, tools and telemetry
T1608.007 simulation workspace
- External intelligence (context only) · proposed-external-intelligence-context-only
- Provider-side audit (if lawfully available) · proposed-provider-side-audit-if-lawfully-available
No reviewed association in this snapshot.
Existing anomaly research
Complete technique engineering workbook
Collection configuration and event examples · Anomaly models and design worksheet · Tools and documented software · Simulation procedures · Offline synthetic collection check
Exact source tags are not semantic relevance verdicts. Review actual rule conditions and observation points; imported rules are not backend-compiled or live-validated.
Pinned research references. No browser attack runner or production-validated detector is asserted. Imported procedures remain unvalidated; any bounded lab evidence has its own scope. ATT&CK / Atomic provenance · Detection provenance.