CrowdStrike fine-tunes Nemotron 3 for security triage; Cyber Defense Benchmark shows zero passes

joshua_saxe · x · 2026-09-02

CrowdStrike fine-tuned the NVIDIA Nemotron 3 Nano 30B-A3B model into a reasoning-enabled detection-triage classifier using prompt optimization, self-training, and RLVR. It takes Windows endpoint context (process lineage, ATT&CK mappings, etc.) as input and outputs analyst-assigned labels for local deployment.

A related "Cyber Defense Benchmark" testing 25 LLMs revealed that zero models passed the agentic investigation test using real attack telemetry. The top scorer (Opus 5) achieved a coverage score of just 0.451.

Original post →

More from Apps

Apps channel →