A team of academics has tested EDR software from 11 top cybersecurity firms and found that many fail to detect some of the most common attack techniques used by advanced persistent threat actors.