CTI-REALM: A new benchmark for end-to-end detection rule generation with AI agents CTI-REALM is Microsoft’s open-source benchmark that evaluates AI agents on real-world detection engineering. It measures whether an agent can take cyber threat intelligence (CTI) and produce validated ... Published: 2026-03-20