Local Sensitive-File Read Chained to Outbound Exfiltration - ATR-2026-01988 (0b735fd6-d086-587d-b345-1171c6df9fcf)
Detects a single agent tool argument that reads a sensitive local file (SSH private keys, cloud credential files, .env, shadow, keychain) and pipes or redirects it to an outbound network sink (curl/wget POST, netcat, DNS exfil) in the same command. This is the agent-context realization of ATT&CK T1005 (Data from Local System) fused with exfiltration: the read of the secret is only malicious when it leaves the host. Detects: read-and-send in one tool_args / shell payload. Does NOT detect: a bare local read with no network sink (too benign), or a read split across turns (needs behavioral correlation, out of scope for a pattern rule).