H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Technique

AI Artifact Collection

Adversaries may collect AI artifacts for [Exfiltration](/tactics/AML.TA0010) or for use in [AI Attack Staging](/tactics/AML.TA0001). AI artifacts include models and datasets as well as other telemetry data produced when interacting with a model.

Technique
TypeTechnique
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

Adversaries may collect AI artifacts for [Exfiltration](/tactics/AML.TA0010) or for use in [AI Attack Staging](/tactics/AML.TA0001). AI artifacts include models and datasets as well as other telemetry data produced when interacting with a model.

8 recorded

Relationships

mitigates
from AI Model Distribution Methods
Mitigation
mitigates
from Control Access to AI Models and Data at Rest
Mitigation
mitigates
from Encrypt Sensitive Information
Mitigation
mitigates
from Limit Model Artifact Release
Mitigation
uses
from Arbitrary Code Execution with Google Colab
Campaign
uses
from Google Photos AI Model Extraction
Campaign
uses
from Microsoft Azure Service Disruption
Campaign
uses
from ShadowRay: Hijacking Exposed Ray Clusters
Campaign
1 external

References

mitre-atlas
AML.T0035
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance