SIEM Rule Conversion on RSA NetWitness to Splunk
69.7CodeBLEUARuleCon
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| ARuleConLarge Language Model=GPT-52026.04 | 69.7 | 63 | 74.1 | |
| ARuleConLarge Language Model=DeepSeek-V32026.04 | 66.3 | 60.4 | 71.3 | |
| BaselineLarge Language Model=GPT-52026.04 | 64.2 | 57.9 | 68.8 | |
| ARuleConLarge Language Model=LLaMa-32026.04 | 63.1 | 57.8 | 68.6 | |
| BaselineLarge Language Model=DeepSeek-V32026.04 | 61.1 | 55.4 | 66.1 | |
| BaselineLarge Language Model=LLaMa-32026.04 | 57.7 | 52.6 | 63.4 |