wazuh-llama-3.1-8B

Installation

ollama pull OpenNix/wazuh-llama-3.1-8B-base

Usage

# Start interactive session

ollama run OpenNix/wazuh-llama-3.1-8B-base

# Analyze security log
ollama run OpenNix/wazuh-llama-3.1-8B-base "Analyze this Wazuh alert: SSH login from 192.168.1.100 to root account"

# With API
curl http://localhost:11434/api/generate -d '{
  "model": "OpenNix/wazuh-llama-3.1-8B-base",
  "prompt": "Analyze this security event: Multiple failed login attempts detected",
  "stream": false
}'

Use Wazuh Json logs

 ollama run OpenNix/wazuh-llama-3.1-8B-base "{"timestamp": "2025-01-15T14:00:00Z", "agent": {"id": "000", "name": "malware_detection-00", "ip": "10.0.0.100"}, "rule": {"id": "600", "level": 13, "description": "Rootkit detected in system", "groups": ["rootkit", "malware", "attack"], "category": "malware_detection", "mitre": {"id": ["T1014"], "tactic": ["Defense Evasion"]}}, "data": {"severity": "high", "file": "/tmp/malware_0.exe", "malware_name": "Trojan.Generic", "action": "quarantined", "scanner": "ClamAV"}, "location": "/var/log/malware_detection/security.log"}"

Model Details

• Base Model: LLaMA 3.1 8B Instruct
• GGUF File: wazuh-llama-3.1-8B-base-standalone-q4_0.gguf
• Quantization: Q4_0
• Size: 4.3 GB
• Context Window: 8192 tokens

Parameters

• Temperature: 0.7
• Top-p: 0.9
• Top-k: 40