Description

Send new alert information to a shared chat channel or on-call analyst when they occur. Helpful for notification when alerts happen so that responding teams can be notified immediately and collaborate on triage in a shared environment.

Techniques

• Send security alerts to a dedicated Slack security operations alerts channel where many analysts are present
• Send security alerts to a shared Teams channel
• Send specific analyst responsible for triage new alerts that occur

Examples

Triage new alerts in Google Alert Center with human oversight | Story Library | Tines

References

Chatbots for security and IT teams (Part 1): Microsoft Teams | Tines