Agentic AI Security: Defending Against Goal Hijacking and Supply Chain Compromise

---
title: Potential Agentic AI Goal Hijacking via Shell Spawn
id: 8f4c2a91-3b5d-4e7f-9a10-112233445566
status: experimental
description: Detects potential AI agent tool misuse where an AI runtime (e.g., Python, Node) spawns a shell process (cmd, bash, powershell). This is a common indicator of "Goal Hijacking" where the agent is tricked into executing arbitrary system commands.
references:
  - https://www.microsoft.com/en-us/security/blog/2026/06/04/updating-taxonomy-failure-modes-agentic-ai-systems-year-red-teaming-taught-us/
author: Security Arsenal
date: 2026/06/05
tags:
  - attack.execution
  - attack.t1059
logsource:
  category: process_creation
  product: windows
detection:
  selection:
    ParentImage|endswith:
      - '\python.exe'
      - '\python3.exe'
      - '\node.exe'
      - '\java.exe'
    Image|endswith:
      - '\cmd.exe'
      - '\powershell.exe'
      - '\pwsh.exe'
  filter_legit_dev:
    CommandLine|contains:
      - 'pytest'
      - 'unittest'
      - 'virtualenv'
  condition: selection and not filter_legit_dev
falsepositives:
  - Legitimate developer testing of AI tools
  - Authorized administrative scripts
level: high
---
title: AI Agent Supply Chain - Suspicious Unsigned Module Load
id: 9d5d3b02-4c6e-5f8g-0b21-223344556677
status: experimental
description: Detects the loading of unsigned or untrusted DLLs/SOs by common AI runtime processes. This may indicate a supply chain compromise where a malicious library is loaded to hijack the agent environment.
references:
  - https://www.microsoft.com/en-us/security/blog/2026/06/04/updating-taxonomy-failure-modes-agentic-ai-systems-year-red-teaming-taught-us/
author: Security Arsenal
date: 2026/06/05
tags:
  - attack.defense_evasion
  - attack.t1574.002
logsource:
  category: image_load
  product: windows
detection:
  selection:
    Image|endswith:
      - '\python.exe'
      - '\python3.exe'
  filter_signed:
    Signed: 'true'
  condition: selection and not filter_signed
falsepositives:
  - Local development modules not yet signed
  - Internal corporate libraries
level: medium

// Hunt for AI agents initiating suspicious network connections (Exfiltration/Command & Control)
// Look for Python/Node processes connecting to non-standard ports or external IPs associated with tool usage
let AIProcessNames = dynamic(["python.exe", "python3.exe", "node.exe", "java.exe"]);
DeviceNetworkEvents
| where Timestamp > ago(7d)
| where InitiatingProcessFileName in~ AIProcessNames
| where RemotePort !in (80, 443, 22) // Standard web/ssh ports often allowlisted
| where InitiatingProcessParentFileName !contains "Visual Studio" // Filter out dev noise
| project Timestamp, DeviceName, InitiatingProcessFileName, InitiatingProcessCommandLine, RemoteUrl, RemoteIP, RemotePort
| order by Timestamp desc

-- Hunt for modifications to AI model files or agent configuration files
-- This helps detect supply chain tampering or unauthorized goal/prompt updates
SELECT FullPath, Size, Mtime, Mode, Data
FROM glob(globs="/*/agents/**/*.{,yaml,py,bin,pth}")
WHERE Mtime > now() - 24h
  AND Mode.IsRegular
  -- Exclude temporary cache files often written by AI frameworks
  AND FullPath !~ "__pycache__"
  AND FullPath !~ ".cache"

<#
.SYNOPSIS
    Audit AI Agent File Integrity and Signing Status
.DESCRIPTION
    Scans directories containing AI agents/dependencies to identify unsigned binaries
    or recently modified configuration files, mitigating supply chain risks.
#>

$PathToScan = "C:\Apps\AI-Agents" # Update to your deployment path
$DaysThreshold = 1

Write-Host "[+] Starting AI Agent Security Audit..." -ForegroundColor Cyan

# 1. Check for recently modified configuration/model files (Goal Hijacking/Poisoning)
Write-Host "[*] Checking for recently modified configuration and model files..." -ForegroundColor Yellow
Get-ChildItem -Path $PathToScan -Recurse -Include *.,*.yaml,*.yml,*.pth,*.bin,*.config |
    Where-Object { $_.LastWriteTime -gt (Get-Date).AddDays(-$DaysThreshold) } |
    Select-Object FullName, LastWriteTime, Length |
    Format-Table -AutoSize

# 2. Check for unsigned DLLs or executables in the Python environment (Supply Chain)
Write-Host "[*] Checking for unsigned binaries in AI path..." -ForegroundColor Yellow
Get-ChildItem -Path $PathToScan -Recurse -Include *.dll,*.exe |
    Get-AuthenticodeSignature |
    Where-Object { $_.Status -ne 'Valid' } |
    Select-Object Path, Status, SignerCertificate |
    Format-Table -AutoSize

Write-Host "[+] Audit Complete. Review any unsigned or recently modified files." -ForegroundColor Green