BSides talks featuring ZERO-RULES

Open-source alert contextualizer and correlator using LLMs to classify alerts with MITRE ATT&CK techniques and graph models to cluster related events into cohesive attack campaigns