SIEM Rule Conversion from Microsoft Sentinel to IBM QRadar
67.4CodeBLEUARuleCon
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| ARuleConLarge Language Model=GPT-52026.04 | 67.4 | 54.6 | 61.3 | |
| ARuleConLarge Language Model=DeepSeek-V32026.04 | 64.2 | 52.9 | 59.2 | |
| BaselineLarge Language Model=GPT-52026.04 | 61.8 | 49.4 | 56 | |
| ARuleConLarge Language Model=LLaMa-32026.04 | 61.1 | 50.3 | 56.5 | |
| BaselineLarge Language Model=DeepSeek-V32026.04 | 58.9 | 47.6 | 53.7 | |
| BaselineLarge Language Model=LLaMa-32026.04 | 55.7 | 45.2 | 51.1 |