RuleGenie combines CodeT5 rule embeddings, top-5 cosine similarity, and chain-of-thought LLM analysis to flag redundant SIEM rules across Sigma, Splunk, and AQL formats.
Title resolution pending
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CR 1years
2025 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
RuleGenie: SIEM Detection Rule Set Optimization
RuleGenie combines CodeT5 rule embeddings, top-5 cosine similarity, and chain-of-thought LLM analysis to flag redundant SIEM rules across Sigma, Splunk, and AQL formats.