AgentDojo

EDR sees the file write, not the reason: the case for an agent-native detection layer

A framework running at Uber for over ten months argues endpoint tooling is structurally blind to agent reasoning. On the authors' own benchmark it still misses a third of attacks.