SIEM Rule Conversion on Microsoft Sentinel to RSA NetWitness
67.9CodeBLEUARuleCon
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| ARuleConLarge Language Model=GPT-52026.04 | 67.9 | 79.7 | 64.4 | |
| ARuleConLarge Language Model=DeepSeek-V32026.04 | 64.6 | 76.5 | 61.7 | |
| BaselineLarge Language Model=GPT-52026.04 | 62.5 | 74.2 | 59 | |
| ARuleConLarge Language Model=LLaMa-32026.04 | 61.6 | 73.3 | 58.6 | |
| BaselineLarge Language Model=DeepSeek-V32026.04 | 59.4 | 71 | 56.3 | |
| BaselineLarge Language Model=LLaMa-32026.04 | 56.1 | 68 | 53.7 |