Bidda Sovereign Intelligence · 10,108 Verified Nodes · 39 Sovereign Pillars

MITRE ATLAS Gather RAG-Indexed Targets (AML.T0064) - Adversarial Gather RAG-Indexed Targets threat to AI systems

This node addresses MITRE ATLAS technique AML.T0064 (Gather RAG-Indexed Targets). Adversaries may identify data sources used in retrieval augmented…

What MITRE ATLAS Gather RAG-Indexed Targets (AML.T0064) - Adversarial Gather RAG-Indexed Targets threat to AI systems requires

This node addresses MITRE ATLAS technique AML.T0064 (Gather RAG-Indexed Targets). Adversaries may identify data sources used in retrieval augmented generation (RAG) systems for targeting purposes. By pinpointing these sources, attackers can focus on poisoning or otherwise manipulating the external data repositories the AI relies on. RAG-indexed data may be identified in public documentation about the system, or by interacting with the system directly and observing any indications of or references to external data sources. Defending against this technique is required under EU AI Act, NIST AI RMF, and ISO/IEC 42001 obligations; this node operationalises the documented ATLAS mitigations and cross-instrument controls into a deterministic verification workflow.

Pillar: AI Governance & Law · Authority: MITRE Corporation · Version: 1.0.1 · Last updated:

Primary source: https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml

SHA-256 integrity: 9a4852c7e42e709129d64300107e49cfe20e9f2db4cfd60eb40dec2110a29045

Primary Citations — 7 traced to source

  • MITRE ATLAS - Gather RAG-Indexed Targets (AML.T0064), https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml#AML.T0064, AML.T0064 technique entry, 2026
  • EU AI Act - Regulation (EU) 2024/1689 on Artificial Intelligence, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689, Article 15 (Accuracy, Robustness, Cybersecurity), 2024

+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.

Access

⚠ Important: Human Verification Required

Bidda compliance nodes are reference intelligence, not legal advice. Every node must be reviewed by a qualified compliance professional or legal counsel before implementation in any enterprise workflow, regulated system, or compliance programme. See bidda.com/disclaimer for full terms.