Expel security monitoring tracks many moving parts at the same time. Many events, like a security device going offline or an investigation being opened, trigger an immediate notification. Your organization can use multiple notification systems to send and receive messages about your environment. These include email, a ticketing system, Slack, Microsoft Teams, and others. Learn more about the types of notifications below.
-
- Email Notifications are configured at the user level and are sent directly to an email address specified in Workbench.
- Organization Notifications are configured at the organization level in Workbench and sent via a communications tool your organization integrates with Workbench (Slack, Microsoft Teams, etc).
|
Communication channel |
Get notifications |
Respond to notifications |
Notes |
|---|---|---|---|
|
|
|
Email Notifications include a link to take an action in Workbench. Use your Expel Slack channel if you have one, or contact Expel Support if you need to talk to us about a Ruxie notification. |
|
|
|
|
||
|
Ticketing System |
|
ServiceNow may create an event in Workbench for SOC analysts if you respond to a ticketing notification we create. For other ticketing systems or if you're not sure your ServiceNow is set up to respond, use your Expel Slack channel if you have one, or contact Expel Support if you need to talk to us about a Ruxie notification. |
|
|
|
Use your Expel Slack channel if you have one, or contact Expel Support if you need to talk to us about a Ruxie notification. |
||
|
|
Use your Expel Slack channel if you have one, or contact Expel Support if you need to talk to us about a Ruxie notification. |
||
|
|
Use the Microsoft Teams channel that was set up when you started with Expel. Contact Expel Support if you need to talk to us about a Ruxie notification. |
See also: