AI Prompts Cheatsheet for Security Analysts

πŸ“± Mobile Security Tips

Mike Torres — Android Security Engineer

Why AI Changes the Game for Security Analysts

AI tools, such as ChatGPT and Claude, revolutionize the way security analysts engage with data, analyze threats, and simplify their workflows. By using these advanced tools for tasks like report generation, threat intelligence gathering, and incident analysis, analysts can save time and enhance their decision-making capabilities.

Before You Start: How to Set Context Properly

Setting context is crucial to obtaining relevant responses from AI models. Always start your prompts with specific details about the task at hand. Provide background information, the type of analysis required, and desired output formats to ensure clarity.

Core Prompts Cheatsheet

Generate a detailed incident report for a phishing attack that occurred on the company’s email system. Include indicators of compromise, mitigation strategies, and recommendations.

What it does: Creates a structured report detailing a phishing incident.

When to use it: After recognizing a phishing attempt to summarize findings.

How to customize it: Modify the type of attack and add specific company jargon.

Summarize the latest cybersecurity trends and their implications for small to medium businesses, focusing on practical steps they can take to improve their security posture.

What it does: Provides an overview of current trends relevant to SMBs.

When to use it: During workshops or presentations aimed at enhancing public knowledge.

How to customize it: Specify different types of businesses or industries.

Draft an internal memo to educate staff about the importance of password hygiene and present tips for creating better passwords.

What it does: Produces a memorandum for internal communication.

When to use it: To boost security awareness within an organization.

How to customize it: Tailor the tips based on staff roles or existing security policies.

Create a checklist for conducting a security audit of the company’s IT infrastructure, including critical systems and data protection measures.

What it does: Outlines the necessary steps for an effective security audit.

When to use it: Prior to performing an IT security audit.

How to customize it: Specify the scope of the audit based on business needs.

Provide an analysis of potential cybersecurity threats based on recent data from threat intelligence sources.

What it does: Evaluates and synthesizes threat data into actionable insights.

When to use it: When developing threat models or risk assessments.

How to customize it: Reference specific data sources pertinent to your industry.

Explain the process for investigating a potential data breach, including evidence collection and legal considerations.

What it does: Details the essential components of a breach investigation.

When to use it: After detecting suspicious activity that warrants deeper investigation.

How to customize it: Adjust the focus on various technical aspects or compliance requirements.

Weak vs Strong Prompt Examples

❌ Weak: Write a report.
βœ… Strong: Generate a comprehensive incident report detailing a ransomware attack, including recovery steps and communication protocols.
❌ Weak: What is cybersecurity?
βœ… Strong: Provide an overview of cybersecurity, emphasizing the latest threats and protection measures adopted by enterprises as of 2023.

Advanced Prompt Techniques

Leveraging advanced prompts can significantly enhance the quality of outputs. Here are some techniques:

  • Role Prompting: Frame the prompt as if the AI is a specific expert in the field.
  • Chain-of-Thought: Ask the AI to reason step-by-step through a process.
  • Few-Shot Examples: Provide examples of desired output to guide the AI.
  • Output Formatting: Specify how you want the information presented (e.g., bullet points, tables).

Claude vs ChatGPT: Which Works Better For This

Both Claude and ChatGPT are powerful, but they have their nuances:

  • Claude: Often better at nuanced conversation and maintaining context across a longer dialogue.
  • ChatGPT: Excels in generating structured outputs quickly and may offer richer datasets.

Tips for Getting Consistent Results

  • Context Setting: Consistently provide clear context in every prompt.
  • Specificity: Be explicit about the information you require.
  • Iterative Refinement: If the output isn’t satisfactory, adjust your prompt and try again.

Quick Reference: All Prompts in One Place

  • Generate an incident report for a phishing attack.
  • Summarize cybersecurity trends for SMBs.
  • Draft an internal memo on password hygiene.
  • Create a checklist for a security audit.
  • Analyze potential threats using threat intelligence.
  • Detail the process for investigating a data breach.