What is a Prompt?

Understanding Prompts in Roar Assistant/Ask Leo

Prompts are the way you interact with Roar Assistant/Ask Leo to get the information you need from your environments and/or systems. Think of a prompt as your starting point for a clear instruction or question that tells Roar Assistant/Ask Leo what to look for and how to respond. The more specific and intentional your prompt is, the more useful and relevant the response will be.

Once you receive a response, you can continue the conversation by refining or expanding your prompt. Roar Assistant will use the context from your previous inputs to provide deeper insights, follow-up answers, or more targeted results.

In short:

• A prompt starts the interaction
• A follow-up prompt builds on the conversation
• Roar Assistant/Ask Leo responds with increasingly relevant and contextual insights

Building Effective Prompts

Use the following best practices to create clear, actionable prompts when working within your environment.

Recommended Best Practices

• List Systems in an Environment, dig into the system, dig into the metric in the system.
• Avoid using "How many" in your prompt, instead ask it to "List"
• Use "@tagging" in your prompts.
• Ask about a specific asset in an environment by key identifier (email, hostname, etc)
  • Start with clear intent: Use phrases like “List,” “Show,” “Assess,” “Tell me,” “Is,” or “What.”
  • Always specify context: Include the environment, system, or launchpoint when possible.
  • Provide details: Use specific identifiers such as:
    • [Customer Environment]
    • [Device Name]
    • [username/email]

1. Identity and Access Management

What to Ask

• Which identities have privileged access within [Customer Environment]?
• Assess the security of [username/email] within [Customer Environment].
• Show risky users in [Customer Environment].

Example Prompts

• Which identities have privileged access within @Company A?
• Show risky users in @Company A.
• Assess the security of [email protected] within @Company A.
• Tell me about [username/email] within [Customer Environment].

2. Asset and Device Inventory

What to Ask

• What devices are in [Customer Environment]?
• Tell me about [Device Name] within [Customer Environment].
• What operating system is [Device Name] running?
• Tell me about IP address [IP Address].

Example Prompts

• What devices are in @Company A?
• What operating system is RDSGateway-CA running?
• Tell me about IP address 10.2.0.5 in Company A.

3. Security Posture, Compliance, and Configuration

What to Ask

• What security risks exist in [Customer Environment]?
• What is the Microsoft 365 Secure Score for [Environment/Instance]?
• Is the SPF record for [domain] valid?
• Which domains have expired SSL certificates?

Example Prompts

• What security risks exist in Company A?
• Is the SPF record for dundermifflin.com valid?
• Which domains have expired SSL certificates in Company A?
• What is the Microsoft 365 Secure Score for Company A - M365x186127357?

4. Network and Integration Visibility

What to Ask

• Assess [Vendor/Integration] in [Launchpoint Name].
• Which environments have [Vendor/Product] inspectors configured?
• Review firewall rules and suggest improvements.

Example Prompts

• Assess the Cisco Meraki system in Cisco Meraki - Company A.
• Which environments have SonicWall inspectors configured?
• Assess firewall rules for SonicWall - Company A Remote Office.

Additional Prompt Examples

• List all servers with expired software licenses in Company A
• Identify endpoints without an antivirus installed
• Is multi-factor authentication enforced for administrators?