Integrate Slack with AiStrike for automated and manual alert notifications and direct incident-response actions from Slack.
Prerequisites
-
AiStrike account credentials.
-
Admin permissions for your Slack workspace (to approve integrations and manage channels).
-
An existing Slack channel (or the ability to create one).
Setup
-
In AiStrike, go to Dashboard > Integrations and find the Slack connector.
-
Click Connect to Slack and approve the integration in the Slack authorization window. You're redirected back to AiStrike on success.
-
Select a public Slack channel from the dropdown (existing or newly created).
-
For a private channel, first add the bot: in Slack, open the channel, type
@AiStrike, and click Add Them. Then click the reload icon next to the private channel dropdown in AiStrike to see it. -
Click Save.
Using the integration
Alerts can reach Slack via an automated workflow (sent automatically for a given alert type) or manual selection (sent on demand). Slack notifications include alert type and severity, affected entities, and recommended actions. From Slack, users can take response actions such as creating tickets, running malware scans, or blocking suspicious IPs.
Test connectivity
Open any Composite Alert, go to the Remediations tab, click the Slack icon, and confirm the notification arrives in the configured channel.