NetrAI-L3: Domain-Adapted for Security Operations

NetrAI-L3 is a specialized language model, fine-tuned from Meta's Llama-3.2-3B-Instruct, with a focus on security operations (SecOps) use cases. The model's name, derived from the Sanskrit word Netra (Eye), signifies its purpose to observe and interpret security telemetry.

Key Capabilities

• Suricata Alert Explanation: Provides detailed interpretations of Suricata network intrusion detection alerts.
• Security Event Contextualization: Helps in understanding the broader context of security events within a SIEM (Security Information and Event Management) environment.
• SOC Workflow Support: Designed to augment Security Operations Center (SOC) workflows by assisting with event analysis.

Intended Use and Limitations

NetrAI-L3 is developed for research and security augmentation, aiming to support security professionals. It is important to note that this model is not a replacement for existing security platforms like SIEM or XDR, and its outputs require review by qualified security personnel. Recommendations may vary based on the provided prompt context.

Base Model and Licensing

The model is built upon meta-llama/Llama-3.2-3B-Instruct and was fine-tuned using LoRA. The final merged model is provided in SafeTensor format. Users must adhere to the original Llama 3 Community License Agreement.