In this article I will explain how you can integrate SecurityHive with your Slack workspace. By enabling this integration you will get notified by Slack when your bee's have detected new activity within your network. This is useful to stay on top of your network and to review potential threats as quick as possible.
Step 1
Create a new slack channel for your SecurityHive notifications. You can skip this step if you want to integrate the notifications in a channel that already exists.
Step 2
Login on https://api.slack.com/apps with your slack account.
Step 3
Press the big green 'Create an App' button to start building our integration and give the app a name. We recommend using 'SecurityHive' as app name since that is the service that you are integrating. You also need to select the workspace where the app is going to push notifications to.
Step 4
Select the 'Incoming Webhooks' option.
Step 5
Activate the Incoming Webhooks feature using the toggle in the top right corner.
Step 6
Press the 'Add New Webhook to Workspace' button at the bottom of the page and select the channel to you've created (or chosen) at step 1.
Step 7
Authorize the newly created Webhook using the green 'Authorize' button. You will be redirected to the Incoming Webhooks page. At the bottom you'll find your new Webhook. Use the copy button to copy the Webhook URL to your clipboard.
Step 8
Login on the SecurityHive portal at https://portal.securityhive.io/login go to the 'settings' page and select the 'organisation' tab. You'll see a form like the one below. Paste the copied URL in the 'Slack Web API' field and press the 'Update' button.
Step 9
You are done, from now on you'll receive Slack Notifications like the ones below when there are new detections in your network. To disable the Slack integration, simply remove the URL from the settings page and press 'Update'.