Jul 2026
SecRespond: Benchmarking AI Agents for Real-World Post-Compromise Incident Response
Experimental results show that although current agents can reliably uncover the problems exposed by alerts, they struggle to proactively investigate the disk for silent intrusions and to produce comprehensive, verified remediation plans, with no model achieving complete detection and remediation on any single range.
Lehan Wang, Boli Chen, Ruixue Ding et al.
· arXiv.org · 0 citations