AI | Assistant#
Imperfect responses
AI isn’t perfect and it will sometimes make mistakes in its answers.
Be critical about the responses it gives and try to find ways to verify its ouput.
Through collaborating with our AI Assistant, you can simplify your analyst workflow. Through conversational interactions you can ask the AI Assistant to:
Staggered workflow
The AI Assistant is able to carry out task that follow on from one another, for example: first finding intelligence, then enriching the found intelligence, and finally editing existing Entities with the new information. It is however necessary to pass these succesive tasks to the Assistant in distinct prompts, asking it to only do one thing at a time.
Start a chat#
To start chatting with the AI Assistant, open a chat:
From the left sidebar, from the section at the bottom, select AI Assistant.
From the drop-down menu at the bottom of the chat window, select whether the Assistant should consult:
Any knowledge base.
Just the Platform intelligence.
Only Web knowledge.
Start chatting with the AI Assistant to have it carry out the tasks you need it to.
First step
Because many other tasks are forms of refining or processing intelligence, your first step will often be to have the AI Assistant find the intelligence you are going to be working with.
Find intelligence#
The AI Assistant can find intelligence that is already present in your platform or through searching the web. Which results you will see depends on both:
Your choice for knowledge source from the drop-down menu at the bottom of the chat window,
and
The wording of your prompt.
For example, prompting the AI Assistant:
Find me Threat actors from China
will tend to produce Threat actors already in your platform, except if you’ve selected Web knowledge as
the only source of knowledge. In that case it will search the web for relevant results.
Conversely, prompting:
Find me top 5 Threat actors mentioned by online articles as operating in China
will produce Threat actors from the web as long as you’ve selected Web knowledge or Any knowledge base as knowledge source.
Be aware that your combination of prompt and choice of knowledge source might therefore lead the AI Assistant to be unable to produce the intelligence you are looking for.
Enrich Entities or text#
The AI Assistant can enrich Entities you prompted it to find, text you provide in the prompt, or a summary that the AI Assistant provided. What information it will add depends on both:
Your choice for knowledge source from the drop-down menu at the bottom of the chat window,
and
The wording of your prompt.
For example, prompting the AI Assistant:
Enrich the Threat actor you found with my intelligence
will tend to enrich with information from intelligence already in your platform, whereas prompting:
Enrich the Threat actor you found with intelligence from the web.
will enrich with information source from the web.
Be aware that in both cases the enrichment will only be successful if you’ve selected the appropriate knowledge source from the drop-down menu at the bottom of the chat window.
Create Entities#
The AI Assistant can create Entities based on the information you prompted it to find (and may have prompted to enrich) or based on text that you provide in the prompt. The created Entities will have your default source as their source.
If your prompt or already found information contains both a title and type, the AI Assistant will proceed with Entity creation straight away. If either is missing, the AI Assistant will attempt to deduce it and ask you for confirmation.
The AI Assistant can create multiple Entities from a list you give in the prompt.
Edit Entities and Observables#
The AI Assistant can edit Entities’ and Observables’:
Title
Description
Relationships for you.
If you want to edit an Entitiy that was already mentioned in the current chat session (because the AI Assistant created it for you or enriched it), you can refer back to it.
However, if you want to edit existing intelligence, ask the AI Assistant to find it in a separate prompt.
For instance, if you’ve prompted the AI Assistant to summarize text for you and want to add it to the
description an Entity, first prompt the AI Assistant to find the Entity, then prompt it to add the
summary in its description. This task would thus require three prompts:
Summarize the text.
Find the Entity.
Add the summary to the found Entity’s description.
If only one of the pieces of intelligence in the relationship was mentioned before, first prompt the AI Assistant
to find the other end and then prompt the AI Assistant to edit the relationship.
If neither end of a relationship has been mentioned in the current session, editing it would require three steps:
Prompt the AI Assistant to find the first end of the relationship.
Prompt the AI Assistant to find the other end of the relationship.
Prompt the AI to create or delete the relationship.
Summarize text#
The AI Assistant can summarize text you pass it in the prompt or the descriptions of existing Entities. When prompting the AI Assistant to summarize it will do so using only intelligence that is in your platform, unless you specifically prompt it to use Web knowledge while summarizing (provided you’ve selected the Any knowledge base option from the drop-down menu at the bottom of the chat window, so that the AI Assistant can access both sources).
Translate text#
The AI Assistant can translate text you pass it in the prompt, the descriptions or titles of existing Entities, or summaries that you’ve prompted it to provide. If you don’t specify a language in your prompt, the AI Assistant will translate the text into your default language.
If you want to add the translated text to existing intelligence that hasn’t been mentioned in the current session,
first prompt the AI Assistant to find it and then prompt the AI Assistant to edit the found intelligence. If the
existing intelligence has already been mentioned in the current chat session, you can immediately prompt the AI Assistant
to add the translated text to it.
You can also have the AI Assistant replace the title or description of existing intelligence with the translation you’ve
prompted it to provide. If you want to replace the title/description of existing intelligence that hasn’t been mentioned
in the current session, first prompt the AI Assistant to find it and then prompt the AI Assistant to replace the found
intelligence’s title/description.
After the AI Assistant provides you with a summary, you can then ask it to expand on the summary.
Extract intelligence#
The AI Assistant can extract intelligence from:
text you pass it in the prompt.
the descriptions or titles of existing Entities you’ve already prompted it to find.
The response will show you the intelligence that the AI Assistant found. These objects are not immediately created it the platform; you have to separately prompt the AI Assistant to create the extracted objects.
Once the AI Assistant creates the objects, they will be marked with a text detailing that they were created with AI. You can then further process these objects with the AI Assistant by prompting it to:
Summarize them. You don’t have to prompt the AI Assistant to search for these objects to do any of these things; if you specify them it your prompt it will be able to use them in generating its responses.
Add Entities to graphs#
The AI Assistant can add Entities to graphs. To prompt it to do this:
Once you’ve opened the graph you want to add Entities to, start a chat.
Prompt the AI Assistant to find the Entities you want to add.
Prompt the AI Assistant to add the Entities to the graph.
Be sure to differentiate between adding all the found Entities to the graph:add objects from search result to the graph
and adding specific Entities to the graph:
add CozyBear and APT29 to the graph