Detection Rule Probing and Evasion Testing - ATR-2026-00087 (ae7726ef-9a42-5261-b7cd-4ef1e5f63913)
Detects attempts to probe, test, or enumerate detection rules and security filters. Attackers systematically test inputs to discover which patterns trigger blocks, map filter boundaries, and craft payloads that sit just below detection thresholds.