AML.T0064
Gather RAG-Indexed Targets
Description
Adversaries may identify data sources used in retrieval augmented generation (RAG) systems for targeting purposes. By pinpointing these sources, attackers can focus on poisoning or otherwise manipulating the external data repositories the AI relies on. RAG-indexed data may be identified in public documentation about the system, or by interacting with the system directly and observing any indications of or references to external data sources.
Honesty-tier rationale
This technique is OSINT/scanning against real targets. It cannot be honestly simulated in the browser without misrepresenting real difficulty; at most a walkthrough over mock target data.