An approach is provided that logs radio frequency (RF) activity detected by a vehicle-based intrusion detection system. The logged activity is ingested at a machine learning system. The approach receives, by a conversational agent with access to the machine learning system, natural language (NL) user queries pertaining to the detected RF activity and presents, by the conversational agent, natural language system responses answering the NL user queries.