AI Recon Detection: The Rule Matches Words, So Change the Words
See AI recon from the SIEM: what chatbot logs capture, why keyword detection rules miss intent, how to probe quietly, and how to spot honeypot keys before you use them.
See AI recon from the SIEM: what chatbot logs capture, why keyword detection rules miss intent, how to probe quietly, and how to spot honeypot keys before you use them.
Find AI features a port scan misses: read the chat widget JS, the endpoint's Ollama metadata, Kong gateway headers and 401 vs 404 codes to map every LLM route.
LLM jailbreak techniques sorted by the defence each one attacks: the system prompt, trained refusal, or the bolted-on filter. Plus how to measure it with garak.
Identify the LLM behind an AI app with six probes: identity, contradiction, knowledge cutoff, style, capability and context window, even when it's told to hide.
Fingerprint an AI app in three requests: read the headers, hit /api/health and study the chat JSON to find the model, vector database, MCP and system prompt.
Map a RAG chatbot's knowledge base from its sources field: spot retrieval, read chunk IDs and scores, enumerate documents by topic and find the retrieval threshold.