AML.T0064: Gather RAG-Indexed Targets
Adversaries may identify data sources used in retrieval augmented generation (RAG) systems for targeting purposes. By pinpointing these sources, attackers can focus on poisoning or otherwise manipulating the external data repositories the AI relies on.
RAG-indexed data may be identified in public documentation about the system, or by interacting with the system directly and observing any indications of or references to external data sources.
Standards mapping
Where this fits in a TurboPentest engagement
TurboPentest's agentic pentest is powerful and covers a broad range of issues automatically. This particular class is best confirmed in a manual IntegSec engagement, where human pentesters apply deeper methodology and a larger context window than any automated pass.
Frequently asked questions
What is AML.T0064 Gather RAG-Indexed Targets?
Adversaries may identify data sources used in retrieval augmented generation (RAG) systems for targeting purposes. By pinpointing these sources, attackers can focus on poisoning or otherwise manipulating the external data repositories the AI relies on. RAG-indexed data may be identified in public documentation about the system, or by interacting with the system directly and observing any indications of or references to external data sources.
Which tactics does AML.T0064 belong to?
AML.T0064 maps to the Reconnaissance tactic.
Does TurboPentest test for Gather RAG-Indexed Targets?
TurboPentest's agentic pentest is powerful and covers a broad range of issues automatically. This particular class is best confirmed in a manual IntegSec engagement, where human pentesters apply deeper methodology and a larger context window than any automated pass.
Related MITRE ATLAS techniques
- ReconnaissanceAML.T0000: Search Open Technical Databases
- ReconnaissanceAML.T0001: Search Open AI Vulnerability Analysis
- ReconnaissanceAML.T0003: Search Victim-Owned Websites
- ReconnaissanceAML.T0004: Search Application Repositories
- ReconnaissanceAML.T0006: Active Scanning
- ReconnaissanceAML.T0087: Gather Victim Identity Information
Find these issues before an attacker does
TurboPentest runs an agentic AI pentest against your target and reports findings with proof, from $99 per target.
Start a $99 pentest