AI | Assistant#

Our AI Assistant is designed to streamline your analyst workflow. Through conversational interactions, you can ask the AI Assistant about the intelligence in your platform, having it perform some of your analysis for you.

Imperfect responses

AI isn’t perfect and it will sometimes make mistakes in its answers.
Be critical about the responses it gives and try to find ways to verify its ouput.

The AI Assistant can:

  • Find threats, IOCs, or other intelligence in your platform.

  • Generate analysis bases on the found intelligence.

  • Carry-out a search of the web to generate addition context about the intelligence it found.

  • Answer general cyber security questions not based on specific intelligence in your platform with information from the web.

AI provider requirements

To retrieve intelligence from within your platform, you need to have configured an AI provider.

To have the AI Assistant provide information from across the web, you need to configure Perplexity.ai as a provider.

Platform intelligence#

When you start chatting with the AI Assistant, it will search for and analyze intelligence in your own platform as response to your question.

  1. From the left sidebar, from the section at the bottom, select AI Assistant.

  2. Select AI-powered search Platform intelligence.

  3. Ask the AI Assistant to find you the intelligence that you are looking for.

This prompts the AI to run a query that matches your question. I will then decide which of the ten most recent Entities from your platform that matched the query are actually relevant to your question. It wil then generate an analysis based on the relevant Entities and shares this analysis with you.

After the AI Assistant has found Entities in your platform, you can ask it to find additional information about this intelligence from across the web.

To do this, simply ask a follow up question. If, for example, your initial question returned the Threat actor entity ExampleThreat, you can ask the AI Assistant:   Which TTPs are associated with ExampleThreat and the AI Assistant will provide a list of TTPs associated with ExampleThreat.

If the AI Assistant didn’t return any Entities, you’re unable to ask it to search the web; it needs to base its search on an Entity present in your platform.

Web knowledge#

If you’re looking for the answer to a question related to threat intelligence, you can ask the AI Assistant.

  1. From the left sidebar, from the section at the bottom, select AI Assistant.

  2. Select Globe showing Central and South America Web knowledge.

  3. Ask the AI Assistant to provide you with the information that you are looking for.
    Example:
    what are the latest cyber threats in the aerospace sector?

This will return information and insights from across the web.