Enrich high severity SIEM alerts as they are sent from Elastic to Slack, using Tines records.
Elastic, Slack, Tines
Aaron Jewitt at Elastic
How it works
Import this story to your tenant, from where you can adapt it to meet your unique needs.