SIEM Rule Conversion on Google Chronicle to Microsoft Sentinel
64.6CodeBLEUARuleCon
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| ARuleConLarge Language Model=GPT-52026.04 | 64.6 | 64.7 | 62.5 | |
| ARuleConLarge Language Model=DeepSeek-V32026.04 | 61.7 | 62 | 60.1 | |
| BaselineLarge Language Model=GPT-52026.04 | 59.3 | 59.6 | 57.2 | |
| ARuleConLarge Language Model=LLaMa-32026.04 | 59.1 | 59.4 | 57.4 | |
| BaselineLarge Language Model=DeepSeek-V32026.04 | 56.6 | 57 | 54.9 | |
| BaselineLarge Language Model=LLaMa-32026.04 | 54.1 | 54.4 | 52.3 |