Closing the Sim-to-Real Gap: An Evaluation Framework for Autonomous Cyber Defense Configuration of Commercial EDR
This research created a closed-loop framework to test autonomous defense agents against commercial EDRs like Microsoft Defender XDR using a Game of Active Directory lab and an autonomous pentester. The process measures policy changes by running automated penetration tests, allowing researchers to learn how to benchmark AI-driven defense tools in real enterprise environments.