SlackV2

Details

ID	`SlackV2`
Provider	Slack
Category	Messaging and Conferencing
From Version	5.0.0
Docker Image	`demisto/slack:1.0.0.42956`
Supported Modules	Agentix Cortex Cloud Cloud Runtime Security Cloud Posture Security XSIAM EDR

README

Deprecated. Use the Slack v3 integration instead.

Send messages and notifications to your Slack Team. This integration was integrated and tested with version 4.0.1 of Slack, and is available from Cortex XSOAR version 5.0.

Use Cases

Mirror Cortex XSOAR investigations War Room to Slack channels and vice-versa.
Send notifications, message and files from Cortex XSOAR to Slack.
Get notifications in Slack about events in Cortex XSOAR.
Manage Cortex XSOAR incidents via direct messages to the Cortex XSOAR bot.
Manage Slack channels (create, edit, filter, invite, kick, close).

Detailed Description

To allow us access to Slack, the Cortex XSOAR app has to be added to the relevant workspace. Do so by clicking on the following link.
After adding the Cortex XSOAR app, you will get an Access Token and Bot Token, which should be inserted in the integration instance configuration's corresponding fields.

Configure SlackV2 on Cortex XSOAR

Navigate to Settings > Integrations > Servers & Services.
Search for SlackV2.
Click Add instance to create and configure a new integration instance.
- Name: a textual name for the integration instance.
- Slack API access token: A token received by adding the application (Starts with xoxp).
- Slack API bot token: A token received by adding the application (Starts with xoxb).
- Dedicated Slack channel to receive notifications
- Send notifications about incidents to the dedicated channel
- Minimum incident severity to send messages to slack by
- Type of incidents created in Slack
- Allow external users to create incidents via DM
- Use system proxy settings
- Trust any certificate (not secure)
- Bot display name in Slack (Cortex XSOAR by default)
- Bot icon in Slack - Image URL (Demisto icon by default)
- Maximum time to wait for a rate limited call in seconds - 60 by default
- Number of objects to return in each paginated call - 200 by default
- Proxy URL to use in Slack API calls

Click Test to validate the new instance.

Commands

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

mirror-investigation: mirror-investigation
send-notification: send-notification
close-channel: close-channel
slack-send-file: slack-send-file
slack-set-channel-topic: slack-set-channel-topic
slack-create-channel: slack-create-channel
slack-invite-to-channel: slack-invite-to-channel
slack-kick-from-channel: slack-kick-from-channel
slack-rename-channel: slack-rename-channel
slack-get-user-details: slack-get-user-details
slack-filter-channels: slack-filter-channels

1. mirror-investigation

Mirrors the investigation between Slack and the Cortex XSOAR War Room.

Base Command

mirror-investigation

Input

</tr> </tbody> </table>

Context Output

There are no context output for this command.

Command Example

!mirror-investigation type=all autoclose=true direction=Both channelName=my-mirror channelTopic=my-incident

Human Readable Output

Investigation mirrored successfully, channel: my-mirror

2. send-notification

Sends a message to a user, group, or channel.

Base Command

send-notification

Input

Argument Name	Description	Required
type	The mirroring type. Can be "all", which mirrors everything, "chat", which mirrors only chats (not commands), or "none", which stops all mirroring.	Optional
autoclose	Whether the channel is auto-closed when an investigation is closed. Can be "true" or "false". Default is "true".	Optional
direction	The mirroring direction. Can be "FromDemisto", "ToDemisto", or "Both". Default value is "Both".	Optional
mirrorTo	The channel type. Can be "channel" or "group". The default value is "group".	Optional
channelName	The name of the channel. The default is "incident-".</td>	Optional
channelTopic	The topic of the channel.	Optional
kickAdmin	Whether to remove the Slack administrator (channel creator) from the mirrored channel.	Optional

Argument Name	Description	Required
message	The message content. When mentioning another slack user, make sure to do so in the following format: <@user_name>.	Optional
to	The user to whom to send the message. Can be either the username or email address.	Optional
channel	The name of the Slack channel to which to send the message.	Optional
entry	An entry ID to send as a link.	Optional
ignoreAddURL	Whether to include a URL to the relevant component in Cortex XSOAR. Can be "true" or "false". Default value is "false".	Optional
threadID	The ID of the thread to which to reply - can be retrieved from a previous send-notification command.	Optional
blocks	A JSON string of Slack blocks to send in the message.	Optional

Context Output

Path	Type	Description
Slack.Thread.ID	String	b'The Slack thread ID.'

Command Example

!send-notification channel=general message="I love Cortex XSOAR"

Context Example

{
    "Slack.Thread": {
        "ID": "1567407432.000500"
    }
}

Human Readable Output

Message sent to Slack successfully. Thread ID is: 1567407432.000500

3. close-channel

Archives a Slack channel.

Base Command

close-channel

Input

Argument Name	Description	Required
channel	The name of the channel to archive. If not provided, the mirrored investigation channel is archived (if the channel exists).	Optional

Context Output

There are no context output for this command.

Command Example

!close-channel

Human Readable Output

Channel successfully archived.

4. slack-send-file

Sends a file to a user, channel, or group. If not specified, the file is sent to the mirrored investigation channel (if the channel exists).

Base Command

slack-send-file

Input

Argument Name	Description	Required
file	The ID of the file entry to send.	Required
to	The user to whom to send the file. Can be the username or the email address.	Optional
group	The name of the Slack group (private channel) to which to send the file.	Optional
channel	The name of the Slack channel to which to send the file.	Optional
threadID	The ID of the thread to which to reply - can be retrieved from a previous send-notification command.	Optional
comment	A comment to add to the file.	Optional

Context Output

There are no context output for this command.

Command Example

!slack-send-file file=1@2 channel=general

Human Readable Output

File sent to Slack successfully.

5. slack-set-channel-topic

Sets the topic for a channel.

Base Command

slack-set-channel-topic

Input

Argument Name	Description	Required
channel	The channel name. If not specified, the topic of the mirrored investigation channel is set (if the channel exists).	Optional
topic	The topic for the channel.	Required

Context Output

There are no context output for this command.

Command Example

!slack-set-channel-topic channel=general topic="Cortex XSOAR rocks"

Human Readable Output

Topic successfully set.

6. slack-create-channel

Creates a channel in Slack.

Base Command

slack-create-channel

Input

Argument Name	Description	Required
type	The channel type. Can be "private" or "public".	Optional
name	The name of the channel.	Required
users	A CSV list of user names or email addresses to invite to the channel. For example: "user1, user2...".	Optional

Context Output

There are no context output for this command.

Command Example

!slack-create-channel name=my-channel topic=cool-topic type=private users=demisto_integration

Human Readable Output

Successfully created the channel my-channel.

7. slack-invite-to-channel

Invites users to join a channel.

Base Command

slack-invite-to-channel

Input

Argument Name	Description	Required
users	A CSV list of usernames or email addresses to invite to join the channel. For example: "user1, user2...".	Required
channel	The name of the channel to which to invite the users. If the name of the channel is not specified, the name of the mirrored investigation channel is used (if the channel exists).	Optional

Context Output

There are no context output for this command.

Command Example

!slack-invite-to-channel channel=my-channel users=cool-user

Human Readable Output

Successfully invited users to the channel.

8. slack-kick-from-channel

Removes users from the specified channel.

Base Command

slack-kick-from-channel

Input

Argument Name	Description	Required
users	A CSV list of usernames or email addresses to remove from the a channel. For example: "user1, user2..."	Required
channel	The name of the channel from which to remove the users. If the name of the channel is not specified, the mirrored investigation channel is used (if the channel exists).	Optional

Context Output

There are no context output for this command.

Command Example

!slack-kick-from-channel channel=my-channel users=cool-user

Human Readable Output

Successfully kicked users from the channel.

9. slack-rename-channel

Renames a channel in Slack.

Base Command

slack-rename-channel

Input

Argument Name	Description	Required
name	The new name of the channel.	Required
channel	The current name of the channel. If the name of the channel is not specified, the mirrored investigation channel is used (if the channel exists).	Optional

Context Output

There are no context output for this command.

Command Example

!slack-rename-channel channel=my-channel name=your-channel

Human Readable Output

Channel renamed successfully.

10. slack-get-user-details

Get details about a specified user.

Base Command

slack-get-user-details

Input

Argument Name	Description	Required
user	The Slack user (username or email).	Required

Context Output

Path	Type	Description
Slack.User.ID	String	b'The ID of the user.'
Slack.User.Username	String	b'The username of the user.'
Slack.User.Name	String	b'The actual name of the user.'
Slack.User.DisplayName	String	b'The display name of the user.'
Slack.User.Email	String	b'The email address of the user.'

Command Example

!slack-get-user-details user="cool_user"

Context Example

{
    "Slack.User": {
        "ID": "UXXXXXXXX",
        "Name": "Cool User",
        "Username": "cool_user",
        "Email": "cool_user@coolorg.com"
    }
}

Human Readable Output

Details for Slack user: cool_user

ID	Username	Name	Email
UXXXXXXXX	cool_user	Cool User	cool_user@coolorg.com

11. slack-filter-channels

Get channels matching provided criteria.

Base Command

slack-filter-channels

Input

Argument Name	Description	Required
name	The name of a channel or a regex pattern	Optional
creator	The member ID who created the channel	Optional
is_archived	True or False	Optional
is_general	True or False	Optional
is_private	True or False	Optional
limit	The maximum number of channels to return. Default is "20"	Optional

Context Output

Path	Type	Description
Slack.Channel.ID	String	The channel ID
Slack.Channel.Name	String	The channel name
Slack.Channel.Created	Number	The channel creation timestamp
Slack.Channel.Creator	String	The channel creator's member ID
Slack.Channel.IsArchived	Boolean	Has the channel been archived?
Slack.Channel.IsGeneral	Boolean	Is the channel the general channel?
Slack.Channel.IsPrivate	Boolean	Is the channel a private channel?

Command Example

!slack-filter-channels name="^general$"

Context Example

{
    "Slack.Channel": {
        "ID": "CXXXXXXXX",
        "Name": "general",
        "Created": 1449252889,
        "Creator": "UXXXXXXXX",
        "IsArchived": false,
        "IsGeneral": true,
        "IsPrivate": false,
    }
}

Human Readable Output

Results

ID	Name	Created	Creator	IsArchived	IsGeneral	IsPrivate
CXXXXXXXX	general	1449252889	UXXXXXXXX	false	true	false

### slack-get-integration-context *** Returns the integration context as a file. Use this command for debug purposes only. #### Base Command `slack-get-integration-context` #### Input | **Argument Name** | **Description** | **Required** | | --- | --- | --- | #### Context Output There is no context output for this command.

Additional Information

Change the name of the Cortex XSOAR App

You can change the name and icon of the Cortex XSOAR app in direct messages using the integration configuration settings (parameters). In order to change the name of the application itself, do the following:

Go to the app in the **Apps** section in Slack
In the app, go to **About > Settings**:
Scroll down and click the pencil icon to change the name.

Direct messages

You can send direct messages to the Cortex XSOAR app on Slack using the following commands:

list incidents [page x] - lists the current incidents in Cortex XSOAR. Requires user permissions in Cortex XSOAR.

list my incidents [page x] - lists the current incidents assigned to you in Cortex XSOAR. Requires user permissions in Cortex XSOAR.

list my tasks [page x] - lists the current tasks assigned to you in Cortex XSOAR. Requires user permissions in Cortex XSOAR.

list closed incidents - lists the closed incidents in Cortex XSOAR. Requires user permissions in Cortex XSOAR.

new incident [details] - creates a new incident in Cortex XSOAR. Requires user permissions in Cortex XSOAR, or that the `Allow external users to create incidents via DM` parameter is enabled.

mirror [incident-id] - mirrors an incident in Cortex XSOAR to a Slack channel. Requires user permissions in Cortex XSOAR for the specified incident.

Notifications

The integration sends notifications as they are configured in the notification settings (User Preferences in Cortex XSOAR), and to the dedicated channel configured for incident notifications (according to the integration configuration). If a dedicated channel for incident notifications is configured, the following notifications will be sent there:

Incident opened
Incident updated
Investigation closed
Investigation deleted
Incident SLA changed
Task completed

Blocks and interactive components

The integration supports sending "blocks" to Slack. Blocks are a series of components that can be combined to create visually rich and compellingly interactive messages. In the integration, they can be sent as an array of JSON. More information about that here. You can experiment with and build your own blocks here. The integration also allows some level of interactivity. When a user interacts with an element in a Slack message, Slack sends a request with the relevant information. This request is processed and stored by a dedicated endpoint outside of Cortex XSOAR in the address: https://oproxy.demisto.ninja The integration allows polling this endpoint for user interactions that contain entitlement strings, which are used to perform actions in Cortex XSOAR by external users. See the SlackAsk script for an example. This means that in order to enable interactivity using the integration, connection to this endpoint has to be enabled. The following information is sent to the dedicated endpoint in the request:

Headers

Current Cortex XSOAR content version
Current Cortex XSOAR server version
The name of the integration
Team name in Slack - for identification
Team ID in Slack - for identification
Cortex XSOAR license ID - for identification

Body

Entitlement - the unique entitlement string to allow interaction with Cortex XSOAR.

Important! The interactions work only with the Cortex XSOAR Integration bot - the only application that's allowed to send requests to the dedicated endpoint(for security reasons). They will not work with another application.

Known Limitations

Due to limitations of the `aiohttp` library, only http proxies are supported.
Channels are created by the Slack user who authorized the application. Thus, this user will be in every channel that the integration creates. You cannot kick this user, but they can leave.
The integration can only manage channels that the application is a member of. Otherwise those channels will not be found.
Currently, the integration does not support working without verifying SSL certificates. The parameter applies only to the endpoint for interactive responses.

Troubleshooting

If messages are not mirrored in Cortex XSOAR, or direct messages are not handled properly, check the integration status on the integration page:

Configuration parameters

cred_access_token —
cred_bot_token —
access_token — Slack API access token
bot_token — Slack API bot token
incidentNotificationChannel — Dedicated Slack channel to receive notifications
notify_incidents — Send notifications about incidents to the dedicated channel
min_severity — Minimum incident severity to send messages to slack by
incidentType — Type of incidents created in Slack
allow_incidents — Allow external users to create incidents via DM
proxy — Use system proxy settings
unsecure — Trust any certificate (not secure)
longRunning — Long running instance. Required for investigation mirroring and direct messages.
bot_name — Bot display name in Slack (Cortex XSOAR by default)
bot_icon — Bot icon in Slack - Image URL (Cortex XSOAR icon by default)
max_limit_time — Maximum time to wait for a rate limiting call in seconds
paginated_count — Number of objects to return in each paginated call
proxy_url — Proxy URL to use in Slack API calls
filtered_tags — Comma separated list of tags To filter the messages sent from demisto.

Commands (15)

close-channel Deprecated
Archives a Slack channel.
mirror-investigation Deprecated
Mirrors the investigation between Slack and the Demisto War Room.
send-notification Deprecated
Sends a message to a user, group, or channel.
slack-close-channel Deprecated
Deprecated. Use the "close-channel" command instead.
slack-create-channel Deprecated
Creates a channel in Slack.
slack-filter-channels Deprecated
Returns a list of channels matching criteria
slack-get-integration-context
Returns the integration context as a file. Use this command for debug purposes only.
slack-get-user-details Deprecated
Get details about a specified user.
slack-invite-to-channel Deprecated
Invites users to join a channel.
slack-kick-from-channel Deprecated
Removes users from the specified channel.
slack-mirror-investigation Deprecated
Deprecated. Use the "mirror-investigation" command instead.
slack-rename-channel Deprecated
Renames a channel in Slack.
slack-send Deprecated
Deprecated. Use the "send-notification" command instead.
slack-send-file Deprecated
Sends a file to a user, channel, or group. If not specified, the file is sent to the mirrored investigation channel (if the channel exists).
slack-set-channel-topic Deprecated
Sets the topic for a channel.

Source

Slack.py Slack_test.py Slack.yml Slack_description.md

Download History Raw

category: Messaging and Conferencing
provider: Slack
deprecated: true
sectionorder:
- Connect
- Collect
commonfields:
  id: SlackV2
  version: -1
configuration:
- name: cred_access_token
  type: 9
  displaypassword: Slack API access token
  hiddenusername: true
  required: false
- name: cred_bot_token
  type: 9
  displaypassword: Slack API bot token
  hiddenusername: true
  required: false
- display: Slack API access token
  name: access_token
  type: 4
  section: Connect
  hidden: true
  required: false
- display: Slack API bot token
  name: bot_token
  type: 4
  section: Connect
  hidden: true
  required: false
- display: Dedicated Slack channel to receive notifications
  name: incidentNotificationChannel
  type: 0
  section: Connect
  advanced: true
  required: false
- defaultvalue: 'true'
  display: Send notifications about incidents to the dedicated channel
  name: notify_incidents
  type: 8
  section: Connect
  advanced: true
  required: false
- defaultvalue: Low
  display: Minimum incident severity to send messages to slack by
  name: min_severity
  type: 15
  options:
  - Unknown
  - Low
  - Medium
  - High
  - Critical
  section: Collect
  advanced: true
  required: false
- defaultvalue: Unclassified
  display: Type of incidents created in Slack
  name: incidentType
  type: 13
  section: Connect
  required: false
- display: Allow external users to create incidents via DM
  name: allow_incidents
  type: 8
  section: Collect
  advanced: true
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  section: Connect
  advanced: true
  required: false
- display: Trust any certificate (not secure)
  name: unsecure
  type: 8
  section: Connect
  advanced: true
  required: false
- defaultvalue: 'true'
  display: Long running instance. Required for investigation mirroring and direct messages.
  hidden: true
  name: longRunning
  type: 8
  section: Connect
  advanced: true
  required: false
- display: Bot display name in Slack (Cortex XSOAR by default)
  name: bot_name
  type: 0
  section: Connect
  advanced: true
  required: false
- display: Bot icon in Slack - Image URL (Cortex XSOAR icon by default)
  name: bot_icon
  type: 0
  section: Connect
  advanced: true
  required: false
- defaultvalue: '60'
  display: Maximum time to wait for a rate limiting call in seconds
  name: max_limit_time
  type: 0
  section: Connect
  advanced: true
  required: false
- defaultvalue: '200'
  display: Number of objects to return in each paginated call
  name: paginated_count
  type: 0
  section: Collect
  advanced: true
  required: false
- display: Proxy URL to use in Slack API calls
  name: proxy_url
  type: 0
  section: Connect
  advanced: true
  required: false
- display: Comma separated list of tags To filter the messages sent from demisto.
  name: filtered_tags
  type: 0
  additionalinfo: Only supported in Demisto V6.1 and above.
  section: Collect
  advanced: true
  required: false
description: Deprecated. Use SlackV3 instead.
display: Slack v2 (Deprecated)
name: SlackV2
script:
  commands:
  - arguments:
    - auto: PREDEFINED
      default: true
      defaultValue: all
      description: The mirroring type. Can be "all", which mirrors everything, "chat", which mirrors only chats (not commands), or "none", which stops all mirroring.
      name: type
      predefined:
      - all
      - chat
      - none
    - auto: PREDEFINED
      defaultValue: 'true'
      description: Whether the channel is auto-closed when an investigation is closed. Can be "true" or "false". Default is "true".
      name: autoclose
      predefined:
      - 'true'
      - 'false'
    - auto: PREDEFINED
      defaultValue: both
      description: The mirroring direction. Can be "FromDemisto", "ToDemisto", or "Both". Default is "Both".
      name: direction
      predefined:
      - Both
      - FromDemisto
      - ToDemisto
    - auto: PREDEFINED
      defaultValue: group
      description: The channel type. Can be "channel" (public) or "group" (private).
      name: mirrorTo
      predefined:
      - channel
      - group
    deprecated: true
    description: Deprecated. Use the "mirror-investigation" command instead.
    name: slack-mirror-investigation
  - arguments:
    - auto: PREDEFINED
      default: true
      defaultValue: all
      description: The mirroring type. Can be "all", which mirrors everything, "chat", which mirrors only chats (not commands), or "none", which stops all mirroring.
      name: type
      predefined:
      - all
      - chat
      - none
    - auto: PREDEFINED
      defaultValue: 'true'
      description: Whether the channel is auto-closed when an investigation is closed. Can be "true" or "false". Default is "true".
      name: autoclose
      predefined:
      - 'true'
      - 'false'
    - auto: PREDEFINED
      defaultValue: both
      description: The mirroring direction. Can be "FromDemisto", "ToDemisto", or "Both". Default value is "Both".
      name: direction
      predefined:
      - Both
      - FromDemisto
      - ToDemisto
    - auto: PREDEFINED
      defaultValue: group
      description: The channel type. Can be "channel" or "group". The default value is "group".
      name: mirrorTo
      predefined:
      - channel
      - group
    - description: The name of the channel. The default is "incident-<incidentID>".
      name: channelName
    - description: The topic of the channel.
      name: channelTopic
    - auto: PREDEFINED
      defaultValue: 'false'
      description: Whether to remove the Slack administrator (channel creator) from the mirrored channel.
      name: kickAdmin
      predefined:
      - 'true'
      - 'false'
    deprecated: true
    description: Mirrors the investigation between Slack and the Demisto War Room.
    name: mirror-investigation
  - arguments:
    - default: true
      description: "The message content. When mentioning another slack user, make sure to do so in the following format: <@user_name>."
      name: message
    - description: The user to whom to send the message. Can be either the username or email address.
      name: to
    - description: The name of the Slack channel to which to send the message.
      name: channel
    - description: An entry ID to send as a link.
      name: entry
    - auto: PREDEFINED
      defaultValue: 'false'
      description: Whether to include a URL to the relevant component in Demisto. Can be "true" or "false". Default value is "false".
      name: ignoreAddURL
      predefined:
      - 'true'
      - 'false'
    - description: The ID of the thread to which to reply - can be retrieved from a previous send-notification command.
      name: threadID
    - description: A JSON string of Slack blocks to send in the message.
      name: blocks
    deprecated: true
    description: Sends a message to a user, group, or channel.
    name: send-notification
    outputs:
    - contextPath: Slack.Thread.ID
      description: The Slack thread ID.
      type: String
  - arguments:
    - default: true
      description: The text content of the message.
      name: message
    - description: Either a user name or email of a Slack user to send to.
      name: to
    - description: A Slack channel name to send to.
      name: channel
    - description: A Slack group (private channel) name to send to.
      name: group
    - description: An entry ID to send as a link.
      name: entry
    - auto: PREDEFINED
      defaultValue: 'false'
      description: Whether to add a URL in Slack to the relevant component in Demisto. Default is "false".
      name: IgnoreAddURL
      predefined:
      - 'true'
      - 'false'
    - description: The ID of the thread to which to reply.
      name: threadID
    deprecated: true
    description: Deprecated. Use the "send-notification" command instead.
    name: slack-send
  - deprecated: true
    description: Deprecated. Use the "close-channel" command instead.
    name: slack-close-channel
  - arguments:
    - description: The name of the channel to archive. If not provided, the mirrored investigation channel is archived (if the channel exists).
      name: channel
    deprecated: true
    description: Archives a Slack channel.
    name: close-channel
  - arguments:
    - default: true
      description: The ID of the file entry to send.
      name: file
      required: true
    - description: The user to whom to send the file. Can be the username or the email address.
      name: to
    - description: The name of the Slack group (private channel) to which to send the file.
      name: group
    - description: The name of the Slack channel to which to send the file.
      name: channel
    - description: The ID of the thread to which to reply - can be retrieved from a previous send-notification command.
      name: threadID
    - description: A comment to add to the file.
      name: comment
    deprecated: true
    description: Sends a file to a user, channel, or group. If not specified, the file is sent to the mirrored investigation channel (if the channel exists).
    name: slack-send-file
  - arguments:
    - description: The channel name. If not specified, the topic of the mirrored investigation channel is set (if the channel exists).
      name: channel
    - default: true
      description: The topic for the channel.
      name: topic
      required: true
    deprecated: true
    description: Sets the topic for a channel.
    name: slack-set-channel-topic
  - arguments:
    - auto: PREDEFINED
      defaultValue: private
      description: The channel type. Can be "private" or "public".
      name: type
      predefined:
      - private
      - public
    - default: true
      description: The name of the channel.
      name: name
      required: true
    - description: 'A CSV list of user names or email addresses to invite to the channel. For example: "user1, user2...".'
      name: users
    deprecated: true
    description: Creates a channel in Slack.
    name: slack-create-channel
  - arguments:
    - default: true
      description: 'A CSV list of usernames or email addresses to invite to join the channel. For example: "user1, user2...".'
      name: users
      required: true
    - description: The name of the channel to which to invite the users. If the name of the channel is not specified, the name of the mirrored investigation channel is used (if the channel exists).
      name: channel
    deprecated: true
    description: Invites users to join a channel.
    name: slack-invite-to-channel
  - arguments:
    - default: true
      description: 'A CSV list of usernames or email addresses to remove from the a channel. For example: "user1, user2..."'
      name: users
      required: true
    - description: The name of the channel from which to remove the users. If the name of the channel is not specified, the mirrored investigation channel is used (if the channel exists).
      name: channel
    deprecated: true
    description: Removes users from the specified channel.
    name: slack-kick-from-channel
  - arguments:
    - default: true
      description: The new name of the channel.
      name: name
      required: true
    - description: The current name of the channel. If the name of the channel is not specified, the mirrored investigation channel is used (if the channel exists).
      name: channel
    deprecated: true
    description: Renames a channel in Slack.
    name: slack-rename-channel
  - arguments:
    - default: true
      description: The Slack user (username or email).
      name: user
      required: true
    deprecated: true
    description: Get details about a specified user.
    name: slack-get-user-details
    outputs:
    - contextPath: Slack.User.ID
      description: The ID of the user.
      type: String
    - contextPath: Slack.User.Username
      description: The username of the user.
      type: String
    - contextPath: Slack.User.Name
      description: The actual name of the user.
      type: String
    - contextPath: Slack.User.DisplayName
      description: The display name of the user.
      type: String
    - contextPath: Slack.User.Email
      description: The email address of the user.
      type: String
  - arguments: []
    name: slack-get-integration-context
    description: Returns the integration context as a file. Use this command for debug purposes only.
    hidden: true
  - arguments:
    - description: The name of a channel or a regex pattern
      name: name
    - description: The member ID who created the channel
      name: creator
    - auto: PREDEFINED
      description: Specify True to include only archived channels, False to include only unarchived channels, or leave blank for no effect
      name: is_archived
      predefined:
      - 'true'
      - 'false'
    - auto: PREDEFINED
      description: Specify True to find the general channel (if other filters also match), False to exclude the general channel, or leave blank for no effect
      name: is_general
      predefined:
      - 'true'
      - 'false'
    - auto: PREDEFINED
      description: Specify True to include only private channels, False to include only public channels, or leave blank for no effect
      name: is_private
      predefined:
      - 'true'
      - 'false'
    - defaultValue: '20'
      description: The maximum number of channels to return
      name: limit
    deprecated: true
    description: Returns a list of channels matching criteria
    name: slack-filter-channels
    outputs:
    - contextPath: Slack.Channel.ID
      description: The channel ID
      type: String
    - contextPath: Slack.Channel.Name
      description: The channel name
      type: String
    - contextPath: Slack.Channel.Created
      description: The channel creation timestamp
      type: Number
    - contextPath: Slack.Channel.Creator
      description: The channel creator's member ID
      type: String
    - contextPath: Slack.Channel.IsArchived
      description: Has the channel been archived?
      type: Boolean
    - contextPath: Slack.Channel.IsGeneral
      description: Is the channel the general channel?
      type: Boolean
    - contextPath: Slack.Channel.IsPrivate
      description: Is the channel a private channel?
      type: Boolean
  dockerimage: demisto/slack:1.0.0.42956
  longRunning: true
  runonce: false
  script: '-'
  subtype: python3
  type: python
fromversion: 5.0.0
tests:
- No tests (auto formatted)
supportedModules:
- xsiam
- agentix

SlackV2 Deprecated

Details

README

Use Cases

Detailed Description

Configure SlackV2 on Cortex XSOAR

Commands

1. mirror-investigation

Base Command

Input

Context Output

Command Example

Human Readable Output

2. send-notification

Base Command

Input

Context Output

Command Example

Context Example

Human Readable Output

3. close-channel

Base Command

Input

Context Output

Command Example

Human Readable Output

4. slack-send-file

Base Command

Input

Context Output

Command Example

Human Readable Output

5. slack-set-channel-topic

Base Command

Input

Context Output

Command Example

Human Readable Output

6. slack-create-channel

Base Command

Input

Context Output

Command Example

Human Readable Output

7. slack-invite-to-channel

Base Command

Input

Context Output

Command Example

Human Readable Output

8. slack-kick-from-channel

Base Command

Input

Context Output

Command Example

Human Readable Output

9. slack-rename-channel

Base Command

Input

Context Output

Command Example

Human Readable Output

10. slack-get-user-details

Base Command

Input

Context Output

Command Example

Context Example

Human Readable Output

Details for Slack user: cool_user

11. slack-filter-channels

Base Command

Input

Context Output

Command Example

Context Example

Human Readable Output

Results

Additional Information

Change the name of the Cortex XSOAR App