AML.T0089

MITRE ATLAS / Process Discovery

Adversaries gather information about the processes running on a system, identifying inference servers, training jobs, monitoring agents, and security tooling.

Think of it likeListening at each door to hear which rooms are occupied and by whom.

In plain English

The process list tells an attacker what the machine is for and what is watching it. Seeing a training job and no endpoint agent shapes everything they do next.