Systems and methods for detection of spoofed sensor measurements in a microgrid are provided. A system can include a control agent that is configured to determine whether an isolated or continuing intrusion of measurement data received from the primary sensors has occurred, and transmit forecasted measurement data to the controller rather than suspected corrupt measurement data for a suspected isolated intrusion. The control agent and a clone agent can be configured to communicate and work in parallel to confirm a continuing intrusion is occurring, and the control agent can be further configured to transmit measurement data from the redundant sensors to the controller if a continuing intrusion is confirmed.