Fine-Tuning BERT to Classify Security Logs — And the 100% Accuracy Trap I Fell Into

The idea Security teams deal with a constant stream of raw log lines — logins, file access, network connections, the occasional actual attack. Most of that triage still runs on hand-written regex rule