Pentest Operations Interacting with the SOC Assistant
Image
Image

The SOC Assistant is your AI-powered companion for pentest operations, designed to help you run tools, analyze findings, and generate reports. This guide explains how to access the assistant, complete required identity verification, and navigate the chat interface.

Server selection is required. You must have an active server selected to interact with the SOC Assistant. If no server is selected, the chat interface will be disabled.

Getting Started

Before the assistant can process your requests, you need to ensure your session is fully authenticated and connected to a server.

  1. 1

    Select a server

    Choose your target server from the main navigation. Note that switching to a different server will automatically clear your current active session and start a fresh chat.

  2. 2

    Type your first message

    Locate the SOC Assistant chat panel. Type your request into the input box and press Enter (or click the send icon).

  3. 3

    Verify your identity

    For security purposes, if your account is not yet verified for the current session, an Identity Verification prompt will appear. Complete the verification steps on screen. Once verified, your pending message will automatically send.

If you close or cancel the identity verification prompt, your action will be paused. You will see a warning message, and you must complete verification before the assistant will process your request.

The Verification Flow

Here is a quick look at how the assistant handles your messages securely:

sequenceDiagram
    participant U as User
    participant C as Chat Interface
    participant V as Verification System
    participant A as SOC Assistant
    
    U->>C: Types message & clicks Send
    C->>V: Checks verification status
    alt Not Verified
        V-->>U: Prompts for Identity Verification
        U->>V: Completes verification
        V->>C: Verification successful
    end
    C->>A: Forwards message to Assistant
    A-->>C: Returns AI response
    C-->>U: Displays formatted response

Using the Chat Interface

The chat interface is built to feel familiar and keep you focused on your workflow.

Managing Sessions

Your conversations are organized into sessions, which you can access from the Assistant Sidebar.

  • Auto-naming: When you start a new chat, the assistant automatically generates a title based on the first 60 characters of your initial message.

  • Starting fresh: Click the New Chat button in the sidebar, or use the CLR (Clear) button in the header to start a blank conversation.

Context Awareness

The assistant is context-aware. If you are looking at a specific finding, tool, or report in the studio, you will see a Context: label at the top of the chat. The assistant uses this context to provide highly relevant answers without requiring you to copy and paste information.

Chat Features

  • Keyboard Shortcuts: Press Enter to send your message. To add a new line without sending, press Shift + Enter.

  • Auto-scrolling: As the assistant generates long responses, the chat window will automatically scroll to keep the newest information in view.

  • Rich Formatting: The assistant responds using Markdown, meaning code snippets, tables, and lists will be cleanly formatted and easy to read.

  • Thinking Indicator: While the assistant is processing complex queries (like running a tool or searching logs), a "Thinking" animation will appear at the bottom of the chat so you know it's working on your request.

What can the assistant do?

The SOC Assistant is equipped to handle a variety of pentest operations directly from the chat box.

Run Security Tools

Ask the assistant to execute specific security tools on your selected server and interpret the output.

Search Findings

Quickly query your database for specific vulnerabilities, IP addresses, or historical pentest data.

Generate Reports

Summarize complex findings into executive summaries or generate structured reports for your team.

Be as specific as possible in your prompts. If you want the assistant to analyze a specific IP address or use a particular tool flag, include that in your message for the best results.