94RISK
Rogue AI agent egress
An internal LLM agent host is beaconing to an unknown external endpoint.
Full brief βΎ
NDR flagged the agent-orchestrator host making periodic HTTPS calls to an unrecognized domain. The agent has tool access including a shell tool and an HTTP-fetch tool. The domain is newly registered.
index=ndr src_host=agent-orch-* | where dest_domain NOT IN (allowlist) | stats count sum(bytes_out) by dest_domain, dest_ip | where count > 5detection query
index=ndr src_host=agent-orch-* | where dest_domain NOT IN (allowlist) | stats count sum(bytes_out) by dest_domain, dest_ip | where count > 5
Signal feed4 events
2026-07-18T02:00:00Zndrsrc_host=agent-orch-3 Β· dest_domain=cdn-metrics-sync.io
ts2026-07-18T02:00:00Z
sourcendr
src_hostagent-orch-3
dest_domaincdn-metrics-sync.io
bytes_out41200
count12
2026-07-18T02:00:05Zagent-auditsrc_host= Β· dest_domain=
ts2026-07-18T02:00:05Z
sourceagent-audit
src_host
dest_domain
bytes_out
count
2026-07-18T01:58:00Zagent-auditsrc_host= Β· dest_domain=
ts2026-07-18T01:58:00Z
sourceagent-audit
src_host
dest_domain
bytes_out
count
2026-07-17T22:10:00Zticketsrc_host= Β· dest_domain=
ts2026-07-17T22:10:00Z
sourceticket
src_host
dest_domain
bytes_out
count
βΈ syncing caseβ¦