> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tryflare.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Conversational Follow-up

> Ask Flare questions about your analysis findings

# Conversational Follow-up

Every analysis in Flare includes a chat panel where you can ask questions about the findings. Flare has full context from the analysis - the anomalies, source logs, scores, and summary - and can help you understand and act on what was detected.

## How to use it

The **Flare Intelligence** panel appears on the right side of any analysis results page. Type a question in the input field and press Enter or click Send.

Flare remembers the full conversation within an analysis, so you can ask follow-up questions that build on previous answers.

## Good questions to ask

### Understanding findings

* "Why is SetIamPolicy anomalous?"
* "What does a spike in PERMISSION\_DENIED errors mean?"
* "Is this service account supposed to be accessing this resource?"
* "What's the difference between the baseline and query frequency?"

### Prioritizing response

* "What should I investigate first?"
* "Which of these findings is the most urgent?"
* "Is this a known attack pattern?"
* "Could this be a false positive?"

### Taking action

* "What are the remediation steps?"
* "What GCP commands should I run to investigate this?"
* "How do I revoke this service account key?"
* "What should I tell my team about this?"

### Getting context

* "Can you summarize the attack timeline?"
* "What other indicators should I check?"
* "How does this compare to normal activity?"
* "What would this look like if it were legitimate?"

## Quick reply chips

After each Flare response, you'll see suggested follow-up questions as clickable chips. These are contextual - they change based on what anomalies were found and what you've already discussed.

Common chips include:

* "What are the remediation steps?"
* "How urgent is this?"
* "Can you elaborate?"
* "What other indicators should I check?"

Click any chip to send it as your next question.

## Tips

* **Be specific.** "Why is finding #3 anomalous?" gets a better answer than "explain the results."
* **Ask about actions.** Flare can suggest specific GCP commands, investigation steps, and remediation procedures.
* **Use it for reporting.** Ask Flare to summarize findings for a non-technical audience, or to draft an incident report.
* **Conversation persists.** Your chat history is saved with the analysis - come back later and pick up where you left off.