SSG coverage claim · MITRE ATLAS-mapped
Browse AI-system risk by MITRE ATLAS
Browse the MITRE ATLAS v2026.08 tactic & technique taxonomy for AI systems, alongside SSG's own derived coverage tier for each technique — see the methodology note below for exactly what that tier does and does not claim.
Adversaries may use an AI agent to autonomously construct and repeatedly revise an attack path toward an adversary-defined objective. Given a high-level objective, the system may derive intermediate objectives, identify prerequisites, and compare candidate paths, and incorporate…
Tactics
AI Attack Adaptation
ATT&CK cross-reference
No Enterprise ATT&CK cross-reference.
ATLAS mitigations & SSG coverage
AML.M0037
AI Agent Authority Expansion Controls
Partial
DENY on privilege-escalating calls; no capability ledger
AML.M0038
AI Agent Scope Drift Detection
Partial
Session analysis flags drift patterns; not a model-level detector
Methodology. Catalog: MITRE ATLAS v2026.08 (atlas.mitre.org).
Coverage tiers are derived from MITRE's own published mitigation↔technique mappings — never hand-assigned per technique.
SSG's claim is limited to which ATLAS mitigations it implements as controls; it does not claim to cover ATLAS techniques directly.
A tier records which SSG control exists for a MITRE-published mitigation — it is not a statement about outcome, and it is not a certification, an audit result, or an endorsement by MITRE.