{
  "name": "Rogue Agents Watch — ATLAS techniques (dataset v0.3.0)",
  "versions": {
    "layer": "4.3",
    "navigator": "4.6.4"
  },
  "domain": "atlas-atlas",
  "description": "MITRE ATLAS techniques mapped upstream in the Agentic Attack Index, dataset v0.3.0. Score = number of records carrying the technique; the comment lists the record ids. Mapped in 14 of 34 records. CC BY-SA 4.0.",
  "techniques": [
    {
      "techniqueID": "AML.T0016.002",
      "score": 6,
      "comment": "gtg-2002-vibe-hacking-extortion, gtg-5004-ai-ransomware-raas, microsoft-openai-state-actor-llm, promptflux-gemini-selfmod, promptlock-ai-ransomware-poc, promptsteal-apt28-lamehug",
      "enabled": true,
      "showSubtechniques": true
    },
    {
      "techniqueID": "AML.T0051",
      "score": 1,
      "comment": "amazon-q-developer-extension-compromise",
      "enabled": true,
      "showSubtechniques": true
    },
    {
      "techniqueID": "AML.T0051.001",
      "score": 5,
      "comment": "camoleak-github-copilot-chat, echoleak-m365-copilot, forcedleak-salesforce-agentforce, morris-ii-genai-worm, servicenow-now-assist-agent-injection",
      "enabled": true,
      "showSubtechniques": true
    },
    {
      "techniqueID": "AML.T0053",
      "score": 4,
      "comment": "gtg-1002-ai-espionage, gtg-2002-vibe-hacking-extortion, nx-s1ngularity-supply-chain, servicenow-now-assist-agent-injection",
      "enabled": true,
      "showSubtechniques": true
    },
    {
      "techniqueID": "AML.T0054",
      "score": 1,
      "comment": "gtg-1002-ai-espionage",
      "enabled": true,
      "showSubtechniques": true
    },
    {
      "techniqueID": "AML.T0057",
      "score": 5,
      "comment": "camoleak-github-copilot-chat, echoleak-m365-copilot, forcedleak-salesforce-agentforce, morris-ii-genai-worm, servicenow-now-assist-agent-injection",
      "enabled": true,
      "showSubtechniques": true
    },
    {
      "techniqueID": "AML.T0081",
      "score": 1,
      "comment": "amazon-q-developer-extension-compromise",
      "enabled": true,
      "showSubtechniques": true
    },
    {
      "techniqueID": "AML.T0102",
      "score": 5,
      "comment": "gtg-1002-ai-espionage, gtg-2002-vibe-hacking-extortion, promptflux-gemini-selfmod, promptlock-ai-ransomware-poc, promptsteal-apt28-lamehug",
      "enabled": true,
      "showSubtechniques": true
    }
  ],
  "gradient": {
    "colors": [
      "#fde8d7",
      "#e07a2f",
      "#7f2a06"
    ],
    "minValue": 0,
    "maxValue": 6
  },
  "legendItems": [
    {
      "label": "records carrying the technique",
      "color": "#e07a2f"
    }
  ],
  "metadata": [
    {
      "name": "dataset",
      "value": "agentic-attack-index v0.3.0"
    },
    {
      "name": "url",
      "value": "https://www.rogueagentswatch.com/"
    },
    {
      "name": "license",
      "value": "CC BY-SA 4.0"
    }
  ],
  "hideDisabled": false,
  "sorting": 3
}