Effective and Efficient Threat Hunting with Small Language Models
This work adapts NL2KQL for SLMs with lightweight retrieval and introduces error-aware prompting that targets common parser failures with a handful of mined tips, at a fraction of the tokens KQL's full rule set would require.
Saleha Muzammil, R. Reddy, Vishal Kamalakrishnan et al.
· 3 citations