IDAssist · RAG

Knowledge augmentation and document-assisted workflows.

RAG Tab Reference

Screenshot

Purpose

The RAG (Retrieval-Augmented Generation) tab lets you upload reference documents and use them as additional context during LLM queries and explanations. When RAG is enabled on the Explain or Query tabs, relevant document snippets are automatically injected into the LLM prompt.

UI Elements

Document Management Section

ElementDescription
Add Documents buttonOpens a file picker to select documents for indexing.
Docs / Chunks counterShows the number of indexed documents and total text chunks.
Documents TableLists all indexed documents with name, size, and chunk count.
Refresh buttonReload the index from disk.
Delete buttonRemove selected documents from the index.
Clear Index buttonDelete the entire RAG index.

Documents Table

ColumnDescription
NameDocument filename.
SizeFile size.
ChunksNumber of text chunks the document was split into.

Search Section

ElementDescription
Query inputEnter a search query to find relevant document snippets.
Type dropdownSearch method: Hybrid (default), Text, or Vector.
Search buttonExecute the search and display results below.
Results areaDisplays matching document snippets with relevance scores.

Supported Document Types

ExtensionType
.txtPlain text
.mdMarkdown
.rstreStructuredText
.pdfPDF documents

Search Types

TypeMethodBest For
HybridCombined text + vector searchGeneral use (default)
TextKeyword matching via WhooshExact terms, API names, error codes
VectorEmbedding similarityConceptual queries, "functions that do X"

How RAG Integration Works

  1. Upload documents relevant to your analysis (API docs, protocol specs, vulnerability reports, etc.)
  2. Documents are chunked and indexed in the Whoosh search engine
  3. Enable RAG on the Explain or Query tab by checking the RAG checkbox
  4. When you submit a query or generate an explanation, IDAssist automatically:
    • Searches the RAG index for relevant snippets
    • Includes the top matching chunks in the LLM prompt
    • The LLM uses this additional context to produce more informed responses

Storage

The RAG index is stored at ~/.idapro/idassist/rag_index/ as a Whoosh search index directory. The index persists across IDA sessions. Clearing the index removes all indexed data but does not delete the original document files.