Detections
Analytics
Credentials In Files
Description
Adversaries may search local file systems and remote file shares for files containing insecurely stored credentials. AI Agent system instructions are a common location where developers paste API keys, bearer tokens, or other secrets to grant the agent runtime access to backing services. These instructions are often readable by anyone with management access to the agent.
Products, Sensors, and Dependencies
| Product | Dependencies | Data source | Access required | Protocol | Data Collected | Notes |
|---|---|---|---|---|---|---|
| Tenable AI Aware | AI | Read-only | HTTPS | AI Agent instructions / system prompts |
Attack Path Technique Details
Framework: MITRE ATT&CK
Family: Credential Access
Technique: Unsecured Credentials: Credentials In Files
Products Required: Tenable AI Aware