# Automating AI Enrichment

## Question Wizard

Question Wizard is designed for users frequently asking questions about portal management. Users can manage sysmon data, process traffic status, threat analysis results, and AI enrichments. To use the Question Wizard, please click on the robot button on the upper right of the page.

<figure><img src="/files/t9cdGCh2tsUj4hTfxWVy" alt=""><figcaption></figcaption></figure>

After clicking the robot button, the Question Wizard modal will appear on the screen. Users can select predefined questions.

<figure><img src="/files/oEFLLVfX1l2uNUkbr6zW" alt=""><figcaption></figcaption></figure>

After the selection,  users can add AI recommendations the artifacts or artifact collection rules. As an example, logs creating too much traffic ca be excluded in three steps:

1 - Click on the "Check All Recommended",

2 - Click on the "Add All Checked to Image & Network Access Exclusions",

3 - Click on the "Add All Checked to Exclusions (per Relevant Event ID)".

These actions will check all the recommended artifacts and add them to the specific exclusion fields for sysmon. With those actions, the unnecessary sysmon artifacts are excluded from the collection and analysis.

<figure><img src="/files/aRJtIDPF0YDHDmomaWUl" alt=""><figcaption></figcaption></figure>

The sysmon exclusion lists can be observed from "Rules & Policies" -> "Artifact Collection Parameters" -> "Windows Sysmon Rules".

<figure><img src="/files/mlGoOMdc9KOUclkviy9Q" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.cloudcyte.com/getting-started/using-ai-modules/automating-ai-enrichment.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.