AI Lab Assistant

AI Guidance That Teaches, Not Tells

Socratic-method tutoring built into every lab session. Three progressive hint levels guide analysts through investigations without giving away the answer -- building real skills, not memorization.

Progressive Hints

How It Works

Three hint levels with increasing specificity. Analysts choose when to escalate, building independence and critical thinking at every step.

1
Level 1

Nudge

A gentle push in the right direction

The first hint level asks a guiding question that redirects attention without revealing the answer. It encourages analysts to reconsider their approach or look at the data differently.

Example

Have you considered looking at the process tree for that user? What parent process launched that PowerShell session?

2
Level 2

Guide

Narrowing the search space

The second level provides more specific direction, pointing toward the right data source or technique without revealing the exact finding. It teaches methodology.

Example

Try filtering process creation events for the timeframe around 10:35 AM. Look at what cmd.exe spawned on that workstation.

3
Level 3

Walkthrough

Step-by-step guidance when stuck

The final level provides a structured walkthrough of the next investigative step. It explains the reasoning and teaches the skill while helping the analyst progress.

Example

Run this SPL query to see all process creation events for rjohnson. Look for cmd.exe and powershell.exe -- these are unusual for a Sales Director role.

Intelligence

Context-Aware Intelligence

The AI Lab Assistant knows your lab topology, the active attack, your investigation progress, and your skill level. Every response is tailored to your exact situation.

Knows Your Lab Topology

The assistant understands the full environment -- domain controllers, workstations, network segments, and services. It references specific hosts and IPs in your lab.

Understands the Attack

Full awareness of the active attack simulation, including TTPs, affected hosts, and the expected investigation path. Hints are always contextually relevant.

Adapts to Skill Level

Tracks your investigation progress and adjusts hint complexity accordingly. Experienced analysts get subtler nudges; beginners get more structured guidance.

Teaches Methodology

Every hint reinforces proper investigation methodology -- hypothesis formation, data source selection, query construction, and evidence documentation.

Availability

Always Available

Integrated into every lab session, available 24/7, and priced to scale. No scheduling, no waiting, no budget constraints.

Always On, Always Available

The AI Lab Assistant is integrated into every lab session. Available 24/7 with no scheduling needed -- get help the moment you need it, at any hour.

Natural Conversation

Ask questions in plain language. Describe what you are seeing, what you have tried, and where you are stuck. The assistant meets you where you are.

Cost-Effective Tutoring

AI-powered guidance from $0.01 per session. Enterprise-quality tutoring at a fraction of the cost of human mentorship, with unlimited availability.

See what evidence-based training looks like.

The evidence-based, enterprise ready, cloud native AI cyber range & SOC training labs — built for teams that need to prove readiness.