Learning Path

Local RAG Pipeline

Build a local RAG pipeline, connect it to live CVE data, test retrieval poisoning, apply it to SOC alerts, and improve exact-match retrieval with hybrid search.

  1. 1 intermediate

    Build a Local RAG Pipeline with Ollama and ChromaDB

    A hands-on guide to building a retrieval-augmented generation pipeline that runs entirely on your machine, using security advisories as the knowledge base.

  2. 2 intermediate

    Add a Chat Interface to Your Local RAG Pipeline

    Wrap your local RAG pipeline in a Streamlit chat UI with conversation history, streaming responses, and source citations that show where every answer came from.

  3. 3 intermediate

    Local RAG with PDF Documents

    Parse PDFs, handle tables and layout-aware chunking, extract metadata, and feed structured content into your local RAG pipeline.

  4. 4 intermediate

    Connect Your RAG Pipeline to Live CVE Feeds

    Pull from the NVD API and OSV.dev, implement incremental ingestion, and add metadata filtering to your local RAG pipeline.

  5. 5 intermediate

    RAG Poisoning: How Adversarial Documents Break Retrieval Pipelines

    Understand how hidden instructions, topic hijacking, and authority impersonation attacks break RAG pipelines, and build defenses against them.

  6. 6 intermediate

    Run a Private AI Assistant in Your SOC

    Build a RAG pipeline over Wazuh alerts that helps analysts triage incidents without sending data to external services.

  7. 7 intermediate

    Evaluating RAG Pipelines with RAGAS and TruLens

    Build an eval set and measure faithfulness, context precision, context recall, and answer relevancy with RAGAS and TruLens to know if changes actually help.

  8. 8 intermediate

    Hybrid Search and Reranking for Local RAG

    Pair BM25 keyword retrieval with dense embedding search via Reciprocal Rank Fusion, then rerank with a cross-encoder to improve recall on rare terms.