// industry vertical
LLM prompt injection forensics
injection attempt logs · jailbreak pattern clustering · RAG poisoning · system prompt exfiltration · adversarial turn sequences · tool-call injection · indirect document injection · guardrail bypass anomalies · multi-turn social engineering · red team evaluation logs.
start here · primary tools
ordered. work top-down. the first tool is the suggested entry point for this vertical.
- llm prompt injection attempt log forensic analyzerdrop llm api/chat injection log export · parse user turn + matched pattern + model response · runs locally
- chatbot jailbreak pattern cluster detectordrop chatbot moderation log corpus · cluster jailbreak templates + success rate · runs locally
- llm tool call injection forensic analyzerdrop agent tool call log export · parse injected args + unauthorized tool invocations · runs locally
- ai chat export adversarial turn sequence analyzerdrop multi-turn chat export · score adversarial escalation sequences · runs locally
- case report generatorfill in case number · examiner · dates · findings · drop evidence files for auto hash · generates structured forensic report PDF · runs locally
also useful · secondary tools
cross-cutting tools that surface depending on the specific investigation.
- rag retrieval poisoning artifact forensic analyzerdrop rag index + query log export · parse poisoned chunk ids + retrieval rank shifts · runs locally
- llm system prompt exfiltration attempt detectordrop chat session export · detect system prompt leak attempts + encoding tricks · runs locally
- indirect prompt injection document artifact detectordrop uploaded doc + chat export · detect hidden instruction payloads in attachments · runs locally
- llm guardrail bypass score anomaly detectordrop safety classifier log export · detect score manipulation + threshold edge cases · runs locally
- multi turn social engineering llm session analyzerdrop long chat export · map persuasion phases + credential solicitation · runs locally
- llm red team evaluation log forensic analyzerdrop red team eval run export · parse attack success + category + model version · runs locally
- evidence manifest generatordrop evidence files · compute md5 sha1 sha256 · chain of custody manifest · case number · analyst · export pdf and csv · runs locally
want deeper prompt injection coverage?
this vertical is intentionally sparse — deep-moat coverage grows over time. tracked in the forensics rollout.