Salem Threat Notifications in Chat

Why does Salem deploy in Chat?

Threats identified by Salem are automatically escalated to where users and partners operate in enterprise chat tools like Microsoft Teams and Slack via cards (see Overview section for Alert Card details). This is a portal-less solution to help users streamline their investigations in a singular location. Salem’s Browser Extension is another modal of this chat feature, allowing users to do their IR process entirely in-browser (see Training Salem with Browser Extension section).

How do users interface with Salem in chat?

Salem interfaces in enterprise chat to provide information and next actions; it is not a chat bot. Salem will not reply to or engage in conversation but will instead escalate threats to whichever channel a user prefers (see Adding Salem to a Group Chat section or User Preferences section) where users can then engage with Salem via card menu options.

For more information on how Salem operates in chat with MDRs, see Salem Threat Notifications to MDR.