SIEM Rule Conversion on RSA NetWitness to Microsoft Sentinel
68.3CodeBLEUARuleCon
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| ARuleConLarge Language Model=GPT-52026.04 | 68.3 | 62.3 | 72.3 | |
| ARuleConLarge Language Model=DeepSeek-V32026.04 | 65.1 | 59.8 | 69.6 | |
| BaselineLarge Language Model=GPT-52026.04 | 62.8 | 57.3 | 67 | |
| ARuleConLarge Language Model=LLaMa-32026.04 | 62 | 57 | 66.7 | |
| BaselineLarge Language Model=DeepSeek-V32026.04 | 59.7 | 54.7 | 64.3 | |
| BaselineLarge Language Model=LLaMa-32026.04 | 56.6 | 52 | 61.6 |