Monitoring for potentially malicious activity in an environment and handling the resulting alerts is vital to the success of a defensive security program. Powerful centralized logging is accessible to all of us, but it is only useful if we understand and take action on the data collected.

How do we also ensure that we have eyes on potential issues while keeping noise to a minimum? What tools and techniques can we use to enhance the effectiveness and responsiveness of a security team?

We will discuss some of the ways Slack approaches collecting, inspecting, and communicating security information to the security team and to the individuals in our organization. We will also demonstrate how integrating security into a communication platform helps us look at more data by delegating event management to the affected individuals.