Spectra Assistant
Introduction
Spectra Assistant is an AI-powered chat assistant available for both the Classic and New UI. It supports initiating a context-aware chat, dynamic analysis and interacting with specific sample details directly from within the assistant interface.
To access Spectra Assistant, click the Spectra Assistant icon at the bottom right corner or press Alt + C. Select + New Chat to start a new chat. To chat about a specific sample, go to the Search & Submissions page on Classic UI or IoC Submissions on New UI and select Spectra Assistant > Chat about this sample. On New UI, you can also select a sample and click the Ask Assistant icon at the top of the screen to open the assistant chat in a side pane.
Side pane view is only available in the New UI.
Enabling Spectra Assistant
To enable Spectra Assistant, go to Administration > Configuration > Experimental Features and select Enable AI Assistant. For more details, see Experimental Features.
Spectra Assistant requires Spectra Intelligence credentials to be configured on the appliance. If Spectra Assistant is enabled but not working, contact ReversingLabs Support.
Options and Features
Sample Analysis
To select a specific sample for analysis, go to the Search & Submissions page on Classic UI or IoC Submissions on New UI and select Spectra Assistant > Chat about this sample. To select a sample from your local machine, click the attach icon in the chat box and navigate to the sample. This option is not available in the side pane view.
File Analysis
To view the analyzed file, click the View file icon above the chat box. This opens a File viewer window with information pulled from the Content section of the sample report.
To access the Analysis Status menu, click the up arrow above the chat box. This menu shows which analysis was performed, Static, Dynamic or Auxiliary, whether the analysis is complete, indicated by a green checkmark and Done, whether it was not performed, indicated by Not yet analyzed, and the number of finished analyses (e.g. 1 of 3 done).
Conversation Options
If you navigate to another page and have an open conversation, you can continue it by clicking the Spectra Assistant icon and selecting the Continue "Conversation Title" option.
To copy or download the conversation, click the Copy conversation and Download conversation icon above the chat box.
Accessing Chat History
You can access your chat history either by clicking the Spectra Assistant icon and selecting See Chat History or selecting a chat from the chat history menu on the Spectra Assistant page.
To manage a chat, click the action icon next to it and select Rename, Close Chat, or Delete. These options are available both in the chat history menu and on the See full chat history page.
Overview of Tools and Connectors
For an overview of built-in tools and connectors, click the connectors icon at the top right corner of the Spectra Assistant page. For a detailed overview of tools, see Available tools.
Prompts and Skills
Spectra Assistant comes with a set of pre-determined prompts and skills to help address the most common starting points.
Available Prompts
When starting a new chat, a list of prompts is displayed on the screen. Alternatively, click the Prompt template icon in the chat box to open the prompt quick-start window and select Use prompt.
| Prompt | Description |
|---|---|
| Analyze Sample | Look up a file by hash for classification and indicators of compromise. |
| Threat Report | Create a comprehensive threat report using all available analysis data for this sample. |
| Threat Hunt | Search for samples on this appliance across a wide range of criteria. |
| Incident Response | Triage a live incident from a hash or indicator and get containment and remediation guidance. |
| Threat Landscape | Summarize the malware families seen in submissions to this appliance in the last 48 hours. |
| Behavior Timeline | Show a timeline of the sample's sandbox behavior: process activity, file system changes, registry changes, and network connections, in chronological order. |
Available Skills
To access available Spectra Assistant skills, click the / icon in the chat box and select the skill from the list of available skills or click Browse all skills to see a detailed description and use cases for all skills.
| Skill | Description |
|---|---|
/phishing-email-triage | Triage suspicious phishing emails by analyzing attachments, URLs, and metadata. |
/phishing-url-analysis | Analyze suspicious URLs for phishing, credential harvesting, malware delivery, and other threats. |
/smart-dynamic-reanalyzer | Diagnose why a dynamic sandbox analysis produced little to no behavioral intelligence, then recommend and execute a better reanalysis. |
/spectra-advanced-search | Use this skill to search for files, malware, IOCs or threat intel. |
To use a skill, start your message with / followed by the skill name.
Custom Skills
In addition to the built-in skills, you can create your own skills, import existing ones, and share them with other users.
To manage skills, click the / icon in the chat box and select Manage skills. The Manage skills window contains the following:
- Create with assistant, Import, and New skill buttons for adding skills.
- A search box and the following filters:
- All sources: shows skills from All sources, or only those Created by you, by ReversingLabs, or Shared by others. The number next to each source shows how many skills are available from it, for example ReversingLabs (5).
- All visibility: shows only Private or Public skills.
- Clear all: clears all filters.
- The list of available skills. Click Use to use a skill. To see the skill details, click the action menu (☰) next to the skill and select View details. You can also use the skill from the details window by clicking Use skill.
Creating a Skill with the Assistant
- In the Manage skills window, click Create with assistant. The following prompt is added to the chat box:
/skill-creator Let's create a skill together. First ask me what the skill should do. - Send the prompt. The assistant guides you through creating a skill based on what you need.
- When the skill is ready, click Save as skill. The Import skill window opens with the generated
SKILL.mdfile selected and the Name, Description, and Instructions fields filled in. - Click Create skill.
The new skill appears in Manage skills and Browse all skills.
Importing a Skill
To import a skill, click Import in the Manage skills window and upload one of the following:
- A
SKILL.mdfile. - A zip file of the skill's folder.
SKILL.mdmust be at the root of the folder or one folder down. The archive can include other files besideSKILL.md, such asreferences/orscripts/folders.
Only text files are imported, such as Markdown, plain text, JSON, YAML, and scripts. All other files are left out.
The SKILL.md frontmatter must include name and description. The license, compatibility, metadata, and allowed-tools fields are optional.
Imported skills, including those created with the assistant, are private. To share a skill with other users, change its visibility in the Manage skills window.
Creating a New Skill
To write a skill from scratch, click New skill in the Manage skills window. Skill instructions are written in Markdown.
Editing a Skill
To edit a skill, do one of the following:
- In the Manage skills window, click the action menu (☰) next to the skill and select one of the following options: View details, Edit, Replace from file, Make public, Disable, Download, or Delete.
- Go to Browse all skills and click Details. In the details window, click Edit to change the skill name, description, instructions, and visibility, click More to disable or download the skill, or click Delete to delete it.
Limitations
- Usage is capped at 20,000 credits per Spectra Intelligence account. Credit usage depends on the complexity of the prompt or skill. To check your usage, click the Quota Indicator (pie chart icon) in the top navigation bar.
- At 80% context capacity, the user is notified to either start a new chat or continue with summarized content.
- Sample analysis works only with ReversingLabs analyses, not with integrations.
- Password-protected files cannot be uploaded.
- Custom skill instructions are limited to 30,000 characters.