RST CTI Assistant Bot

A Microsoft Teams bot that connects to your RST CTI Assistant API subscription—RST Cloud's AI-powered threat intelligence service—for SOC analysts, SecOps teams, CTI analysts, and security leaders.

Who it's for

• SOC and SecOps analysts investigating alerts and incidents
• CTI analysts researching threat actors, malware, and campaigns
• CISOs and security managers tracking industry and regional risk

Intelligence coverage

• Tactical: Enrich IPs, domains, hashes, and malware behaviour; understand what an indicator means and what to pivot on next during an investigation.
• Operational: Learn which tools, TTPs, and ransomware techniques threat actors use recently, including campaign context and adversary tradecraft.
• Strategic: Explore threats targeting your industry, geography, or sector and understand the broader threat landscape.

This Teams bot provides conversational CTI queries in personal, team, and group chat. The standalone RST CTI Assistant API—including structured JSON automation for SIEM, SOAR, and custom workflows—is available separately at rstcloud.com/rst-cti-assistant.

Powered by multi-agent retrieval-augmented generation (RAG) over RST Cloud threat feeds, report libraries, enrichment APIs, and global threat research—with source-referenced answers and links to original reports.

Works with Microsoft Teams

Chat in personal, team, or group conversations. An organization administrator configures your RST Cloud API key once via direct message (/setkey). Type help for guidance.

Requirements

• Active RST CTI Assistant subscription and API key (rstcloud.com/rst-cti-assistant)
• One-time organization setup via /setkey in a bot direct message
• Usage is subject to your RST Cloud plan quota

Support: rstcloud.com/rst-cti-assistant | support@rstcloud.com

Responses are AI-generated from RST Cloud intelligence sources. Verify critical findings before automated enforcement actions.