RAGnarok - Assisting Your Threat Hunting with Local LLM

Learn how to enhance threat hunting capabilities using a local Large Language Model (LLM) tool in this conference talk. Discover RAGnarok, an innovative solution that automatically generates Sigma rules based on threat intelligence while maintaining complete data privacy. Explore the implementation of Quantized LLM, Retrieval-Augmented Generation, and Multi-Agent System technologies that enable the tool to run efficiently on CPU-only machines without requiring internet connectivity or data uploads. Follow along with a practical demonstration showing the tool in action and gain insights into the development process behind this cybersecurity automation solution. Understand how this approach addresses the critical need for organizations to perform advanced threat hunting while keeping sensitive security data completely offline and under local control.