Tag
detection
11 entries, including 4 patterns.
The trace sampler erased the denial
A security decision cannot be audited from a trace that was never exported. Keep a narrow action ledger outside the sampled observability path.
- Pattern
Unsampled Action Receipt
Preserve gate decisions and target outcomes even when agent traces are sampled out or filtered.
The 8-stage ClickFix chain, decoded for defenders
Huntress caught a ChatGPT Custom GPT pushing a RAT through a Canon-signed DLL sideload. Here is each stage as an example a blue team can hunt for, from the ClickFix paste to the final payload.
Visible text is not the filter string
What a person reads on screen is not the string that keyword, signature, or model-ingestion controls evaluate. Invisible Unicode can split both.
- Pattern
Cross-Boundary Action Evidence
Correlate policy, dispatch and target events without confusing transport success with business outcome.
The trace ended at the tool call
Detection fails when the agent, gateway and target each describe only their own success.
Logging that lies
A green success log is not proof that a policy gate ran.
A block rate is not a security outcome
Measure whether a guardrail prevented the unwanted action, whether responders saw it, and whether the same control broke legitimate work.
- Pattern
Outcome-Based Guardrail Assurance
Test prevention, detection and response against observable actions in a controlled environment.
- Pattern
Sandbox Visibility Contract
Establish which workload behaviours are observable, attributable and actionable inside an isolated agent runtime.
The sandbox hid the workload
Stronger isolation can change what host sensors observe. Validate workload detection as part of the sandbox design.