AskFletch is the go-to-resource for defenders who need quick and accurate answers to your pressing cybersecurity questions. To help you make the most of our AskFletch, use this user guide for tips and guidelines for using AskFletch effectively.

What does AskFletch know

AskFletch is plugged into the pulse of the threat landscape. Everyday it is updated with the latest threat landscape updates from the last 24 hours by cybersecurity experts.

The bot is aware of the context around why a particular threat matters or not, allowing you to ask more pointed questions that you're concerned about. It is also able to do some synthesis, for example it can tell you if you should care about a threat based on what it’s targeting.

Currently the AskFletch database only covers the last 6 months of threats active or evolved. This information extends to include threat summary, threat history, mitigation strategies, relevant indicators, and educational comms to share with specific audiences.

If you want more information, AskFletch will direct you to the threat’s Threat Board in Fletch and the original source articles where threats were discovered.

What do I ask?

AskFletch is equipped to handle a wide range of questions related to cybersecurity threats.

Supported topics include (but are not limited to):

• Specific technologies: AskFletch can provide insights into threats targeting specific technologies, such as Zoom, Windows, Apple, or other software and hardware platforms.
• Specific industries: Questions related to cyber threats targeting people in various industries, such as healthcare, finance, or technology, are supported.
• Specific geographical regions: AskFletch can offer information on threats targeting the people in specific geographical regions or countries.
• Mitigation advice: AskFletch can offer short term and long term mitigation advice on how to generally protect against specific threats.
• Recent threat activity: Questions surrounding general updates, such as “what’s newly emerged in the threat landscape” or “what threats are active in the last 30 days” are supported.

Additional tips

AskFletch is designed to adapt and provide more accurate responses based on user input. If the bot doesn't know the answer to your query, it will respond truthfully, suggesting that you rephrase the question for better clarity.

To help AskFletch understand your query more effectively, try providing contextual clues about what you want to know. For instance, instead of simply mentioning a threat group name like APT 12, you can provide additional context by asking, "Tell me about threat group APT 12." Additionally, specifying a time range for the threat, such as "in the last couple of weeks" or "all time," can help narrow down the search and improve the accuracy of the response. By providing clear and specific information, you can troubleshoot and enhance the effectiveness of your interactions with AskFletch.

What questions are not yet supported?