Slack Enterprise Grid

Version : Slack Enterprise Grid

Slack is a collaboration hub where you and your team can work together to get things done. In Slack, work happens in channels. We can monitor the audit events in Slack Enterprise Grid.

Netsurion Open XDR integrates with Slack Enterprise Grid to monitor the activities on the Slack Enterprise Grid such as Channel events, File uploads, User events etc.

Channel and workspace events such as created, deleted and modified are monitored. Events related to Apps such as apps created, deleted and installed are also monitored.

Security events such as user login and logout and privilege escalation also monitored.

Netsurion data source integration for slack enterprise grid allows you to monitor the following components.

  • Security – Login and Logout events and User privilege escalation.
  • Compliance – Channel and Workspace created, deleted and modified.
  • Operation – Apps created, installed and uninstalled, User activity etc

Once Slack Enterprise Grid is configured to deliver logs to Netsurion Open XDR; reports, categories and knowledge object can be configured into Netsurion Open XDR.

The following are the key Data Source Integration available in Netsurion Open XDR.

Reports

Type Name Description
Security Slack Enterprise Grid – Login and Logout Details This Report provides information related to logout and login activities.
Security Slack Enterprise Grid – User Events This Report provides information related to user events logs such as user creation and deletion, privilege escalation etc.
Operations Slack Enterprise Grid – App Events This Report provides information related to App events logs such as App installed, app removed etc.
Operations Slack Enterprise Grid – Channel Events This Report provides information related to Channel events.
Compliance Slack Enterprise Grid – Workplace and Organization Events This Report provides information related to Workspace and Organization events.
Compliance Slack Enterprise Grid – File Events This Report provides information related to File events logs such as file uploaded, file deleted etc.

Documentation

The configuration details are consistent with Netsurion Open XDR 8.x and later, Slack Enterprise Grid.

Download Integration Guide for configuration instructions and more information.