Techniquecredential-accessATLAS
AML.T0082RAG Credential Harvesting
What it is
Adversaries may attempt to use their access to a large language model (LLM) on the victim's system to collect credentials. Credentials may be stored in internal documents which can inadvertently be ingested into a RAG database, where they can ultimately be retrieved by an AI agent.
References
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.