The rise of AI-driven attacks —like the recent Anthropic-generated multi-stage attack—shows an AI-orchestrated attacks at every stage. Bad actors are now using AI to execute recon, gain lateral movement, and achieve privilege escalation at machine speed using massive parallelism. This reality forces a new approach to threat hunting, challenging CTI assumptions as AI agents adapt rapidly and bypass traditional controls.
This session from the SANS CTI Summit demonstrates how deception technology delivers high-fidelity, intent-based signals to disrupt AI-driven kill chains. We detail the Anthropic attack case study and demonstrate how deception-based detection provides CTI teams with repeatable, high-context intelligence on AI-enabled threats.
You will learn how to:
Detect AI-generated attack paths using deception signals that expose real attacker intent
Integrate decoys and breadcrumbs into threat hunting, IR, and red-team workflows
Enrich CTI with adversary behavior patterns derived from deception telemetry
Product Manager
Zscaler