TQL Generator (Powered by AI)

Overview & Challenge

TQL is a proprietary, powerful SQL-based query language used within the ThreatConnect threat intelligence platform (TIP), which allows users to write their own advanced queries. Users have the option to create simple queries using a normal filter interface that doesn't involve manually writing TQL.

The problem we were trying to solve was that TQL can be daunting and cumbersome to learn. We wanted to provide users a way to use the advanced capabilities of TQL without having to learn all of its nuances.. It was decided that this would be a safe and controlled way of introducing optional AI into our platform.

Created while working at ThreatConnect

Details

Design & Beta

We started with a trial available to a small group of customers prior to rolling it out to the larger customer-base. An interface was designed in which users could write their desired query using normal English-language text to generate an advanced TQL query. They could then provide feedback on the quality and accuracy of the query, allowing for future improvements. After the query was generated, users would have the option to copy the query, save said query for future use, or instantly run the query within search.