In our previous article, we explored using the GPT-4 Large Language Model (LLM) to condense Linux user sessions. In the context of the same experiment, we dedicated some time to examine sessions that shared similarities. These similar sessions can subsequently aid the analysts in identifying related suspicious activities.

Using LLMs and ESRE to find similar user sessions

Leveraging GPT for Session Categorization

Lessons learned

Prompt engineering

Few-shot tuning

Evaluating GPT Categories

Semantic search with ELSER

What's next

In this publication, we will talk about lessons learned and key takeaways from our experiments using GPT-4 to summarize user sessions.

Using LLMs to summarize user sessions

What is a session?

Data processing

Hallucinations

Parameter tuning

Evaluating GPT Summaries

作者

Kirti Sodhi

文章

使用LLM和ESRE查找类似的用户会话

使用LLM总结用户会话