Slack Configuration
WhiteIntel supports Slack integration, allowing your team to get alerted autonomous and on-demand via Slack messages.
Prerequisites
An active WhiteIntel Enterprise or Threat Intel plan
Admin access to your organization in WhiteIntel
Admin access to your Slack
Step 1
Go to the Slack app manager and create a new app (From scratch)
In your app → Features → Incoming Webhooks → toggle On
Click Add New Webhook to Workspace, pick the target channel, then Allow. Slack will generate a unique Webhook URL for that channel
Copy the Webhook URL
Step 2
Log in to the WhiteIntel Dashboard as an organization admin.
Go to Organizations > Slack
Enable configuration
Step 3
Go to Watchlists page on Whiteintel Dashboard
Enable "Push to Slack" checkbox on the targets that you want to get alerted via slack.
Additionaly, for on demand Slack message, you can click the Slack icon on the top of the Details bar of incidents.

Last updated