I let a local 27B LLM audit and fix my Splunk + Sysmon stack

I let a local 27B LLM audit and fix my Splunk + Sysmon stack The question was not "can an LLM do SOC work". The question I actually wanted answered was narrower and harder: can a 27B model running on my own GPU, with zero bytes leaving the machine, audit my Splunk install, find what is broken and fix it — without me telling it how? After an...