Attack Step Detection on Active Directory Attack Logs (Window 15:30–35)
11True Positives (TP)Security Analyzer
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| Security AnalyzerWindow=15:30–35, Window size=5-minute, LLM Backbone=Llama 3.1:70b, Number of queries=92026.03 | 11 | 0 | 100 | 100 |