Install Salem Slack App

Add the Salem App to Slack

  1. Click the "Add Apps" button located on the left panel after you have logged in to your Slack workspace.

  2. Select and install the 'Salem Cyber Analyst' app that has been approved for installation in your organization. Note: This name of the app could be different if the SOC admin installed the app with a different name.

  3. Once installed, you should see the app in the 'Apps' section.

  1. Click the installed app and you can start sending messages.

Single User Authentication and Bot Preparation

Authentication is a necessary step that only takes a few clicks.

  1. Ensure that the Salem app is installed and available to use in your Slack workspace.

  2. Open the app, and it will open the chat box on the left.

  3. Send any message eg. 'hi' to the Slack app.

    1. Case 1: You are not logged in.

      1. The application will prompt you with the sign-in card.

      2. You can follow on-screen instructions to sign in and start using the app.

    2. Case 2: You are already logged in as a valid user.

      1. If the app was able to automatically authenticate you, it will present you with the Alert Menu card.

Group Authentication and Bot Preparation

  1. Users can add Salem to a group chat.

  1. When a user is added to a group chat and is not logged into the Salem app, they will receive a 1-on-1 chat with instructions to log in. The user can respond to the private chat to securely login, which will then grant access to the group chat. Note: If the user has never logged into the system before, they must initiate a 1-on-1 chat with Salem and follow the authentication process.

Sending Command to Salem in Group Chats

  1. Salem does not respond to messages in the group chat unless specifically mentioned. In order for Salem to reply to messages in the group chat, it must be specified with @ followed by the app name

  2. Assuming "SalemCyber" is the installed name of the app, use the command below to view the list of alerts. @SalemCyber view --list to view the alert list card.

Last updated