Interacting With Humans via Slack
This tutorial expands on the Getting Started Tutorial to introduce you to more advanced playbook development concepts. Specifically, you'll learn how to:
- Interact with humans using Socless' Human Interaction Workflow and Slack Integrations
- Add branching logic to our State Machine using Choice
- Make our playbooks more legible using Pass States
In our Getting Started Tutorial, we wrote a playbook called "Investigate Login" that handled a "Suspicious Login" alert by:
- Geolocating the Login IP to identify its country, latitude, and longitude
- Posting a message containing that information to a #bat-signals channel in Slack
In this tutorial, we'll expand that playbook to:
- Prompt a user to confirm or denounce the login activity via Slack message buttons
- Request more details on the activity via a Slack interactive dialog
- Notify the user of the actions that will be taken based on their response
The workflow for the playbook we'll create in this tutorial is shown below
[diagram coming soon]
Let's start by deploying Socless Slack, which contains the integrations we'll use in this tutorial