DETECTION ENGINEERING IN THE ERA OF SEMANTIC MALWARE

Summary from the TLDR InfoSec newsletter

Malware campaigns that target agents via their memory or other configuration present detection engineering challenges as they don't produce classical indicators of compromise. Some classic detection techniques such as File Integrity Monitoring (FIM), privilege auditing, and behavioral baselining can be adapted to agentic threats. Additionally, the agentic landscape also offers some new detection opportunities such as: context window integrity, agent session telemetry, memory file provenance, and cross-session behavioral correlation.