Mitre Atlas: AML.T0051.000 | Detection.FYI

High Confidence Prompt Injection in a GenAI User Message

Nov 6, 2026 · Domain: Cloud Domain: GenAI Use Case: Security for AI Tactic: Execution Tactic: Defense Evasion Mitre Atlas: AML.T0051 Mitre Atlas: AML.T0051.000 Mitre Atlas: AML.T0054 Data Source: AWS Bedrock Data Source: OpenAI ChatGPT Enterprise Platform: AWS Platform: OpenAI Service: AWS Bedrock Service: OpenAI ChatGPT Enterprise Rule Type: ES|QL Resources: Investigation Guide Resources: LLM ·
Share on:
```
Detects a GenAI user message that a security_ai classifier scores as
high-confidence prompt injection. The rule requires a high prediction from
one of four models: instruction override, encoding, word obfuscation, or
hash string. ES|QL COMPLETION then reviews the message and drops likely
false positives before an alert is created.
```
Read More