Agentic Chat Interface

Overview

It was deemed important to develop an agentic chat interface in the ThreatConnect threat intelligence platform (TIP). With AI being a fairly new concept, it was deemed necessary to keep the AI contained within the platform to reduce hallucinations and limit security concerns (larger internet will not be available to it). It was also important that it remained an optional part of the system due to general concerns and aversions to AI. With usability in mind, it was decided that a safe first step into having an agentic chat would be for the chat interface to connect with the ThreatConnect Knowledge base. This way users could ask questions they have while using the platform, and receive answers without having to scour the documentation themselves.

Simple actions for the agentic chat to perform on the users behalf were also explored. In the first pass of this feature it will be limited, but will allow for the collection of feedback on what kind of additional actions users would be interested in having available to them. For logging reasons, it was also necessary to keep a history of the chats, so that users could reference previous questions and actions they've taken with the agentic chat.

Created while working at ThreatConnect