Cybrary ForgeCYBRARY / FORGE
Back to Lab
AI catalog
AI range
Maturity level 3
60 minutes · Advanced

Memory Never Forgets

Containment looked complete, but the agent's long-term memory keeps re-arming the attack. Find the stored text that survives every reset, clear it without destroying legitimate history, and prove the attack no longer returns.

Advanced · Several moving parts — expect trade-offs and a wrong turn or two.

Outcome · Investigate and remove persistent memory poisoning across sessions.

Launch the linux desktopOpen the workbench onlyHow this is graded
George · 5 lines
Roles
• SOC analyst
• AI security engineer
Standards mapping
NICE T0175
ATLAS AML.T0070
OWASP LLM01, LLM04
Publish gate
Manifest valid · release 1.0.0

AI connection

This activity runs entirely on the deterministic runtime. Optional live-model runtimes only affect dialog, coaching and wording — never checks or scoring.

Deterministic simulationmode 0

Nothing leaves the browser session.

Chrome built-in AImode 1

Prompts never leave the learner's machine.

Bring your own keymode 2

Lab prompts reach the learner's chosen provider only.

Organization-owned AImode 3

Customer tenancy; Cybrary sees metadata only.

Cybrary-managed AImode 4

Cybrary AI gateway; retention off by default.

Hybrid routingmode 5

Per-job — the router never sends restricted jobs off-tenant.

Lab manifest

The machine-readable release contract. Authors edit this; the console refuses to publish without checks, both regression suites and a reference solve.

schemaVersion: cybrary.ai-lab/v1
id: memory-never-forgets
release: 1.0.0
mode: ai-range
maturity: 3
roles:
  - soc-analyst
  - ai-security-engineer
outcomes:
  niceTasks:
    - T0175
  atlasTechniques:
    - AML.T0070
  owaspRisks:
    - LLM01
    - LLM04
aiAssets:
  models:
    - support-agent-model@2026.06
  prompts:
    - memory-never-forgets-system-prompt@1
  agents:
    - support-agent-orchestrator@3
  tools:
    - crm.lookup
    - ticket.update
    - email.send
    - refund.issue
  corpora:
    - support-kb@v4
enterpriseTopology: support-enterprise-v3
scenario:
  seed: memory-never-forgets-seed-1
  injects:
    - memory-never-forgets-inject-1
telemetry:
  requiredSignals:
    - ai.trace
    - rag.retrieval
    - tool.call
    - identity.auth
    - dlp.egress
    - siem.alert
evaluation:
  deterministicChecks:
    - memory-never-forgets-checks
  repeatedTrials: 20
  maliciousSuite: memory-never-forgets-attack-v1
  benignSuite: support-utility-v4
safety:
  networkEgress: deny
  maxTokens: 250000
  maxCostUsd: 20