Slack

Overview

LightBeam Spectra users can connect various data sources to the LightBeam application and these data sources will be continuously monitored for PII, PHI data.

Example: Slack, Gmail, MS Outlook, etc.

Connecting Slack Data Source

1. Login to your LightBeam Instance.

2. Click on DATASOURCES on the Top Navigation Bar.

3. Click on “Add a data source”.

1. Search for “Slack”.

1. Click on Slack.

1. Fill in the requested information and click on Next.

Basic Information

1. Data Source Name: This is the unique name given to the data source.

2. Description: This is an optional field needed to describe the use of this data source.

3. Primary Owner: Email address of the person responsible for this data source which will get alerts by default.

4. Entity Creation: LightBeam Spectra detects and associates attributes based on the context and identifies whose data it is; these are called entities. Example: Jane Doe is an entity for whom LightBeam Spectra might have detected Name and SSN in a monitored data source.

5. Source of Truth: LightBeam Spectra would have monitored data sources that contain data acting as a single point of truth and that can be used for looking up entities/attributes which help to identify if the other attributes/entities found in any other data source are accurate or not. A Source of Truth data set would create entities based on the attributes found in the data.

6. Location: The location of the data source.

7. Purpose: The purpose of the data being collected/processed.

8. Stage: The stage of the data source. Example: Source, Processing, Archival, etc.

1. Provide the credentials as shown below and click on Test Connection.

1. Verify that you get the message Success on the screen. Click on Next.

To get notifications for all the scanned channels, keep the default selection. To send notifications to a channel of your choice, select ‘Send Notification to specified channel’.

Now select a channel from the drop-down list.

1. In this step, you can choose either of two scan setting options –

i) Scan all Channels

ii) Scan selected Channels

To choose option (i), select Scan all Channels, and click on Save.

To choose option (ii), select Scan selected Channels.

Click on Add Channel to inclusion list.

Now enter the names of the channels that you would like to include for scanning in the search box individually.

Select the channels by ticking the checkboxes next to them.

Click on Save.

Additionally, as shown in Figure 5.1, the configuration settings for 'Bot notification settings' are displayed.

You can choose either of two options –

i) Send notification to scanned channels (default): Notifications will be posted in the same channel as a reply when a PII message is detected.

ii) Scan selected channels: Notifications will be sent to a specified channel with a link to the original message when a PII message is detected.

Now we are ready to browse through onboarded Slack data source dashboard.

Appendix

Registering Slack datasource with tokens

Creating a Slack App from a Manifest

1. Go to https://api.slack.com/apps and click on create new app button.

2. Click on from an app manifest

1. Select a workspace you want to connect.

1. Copy the following app manifest.

{
    "display_information": {
        "name": "lightbeam-privacy"
    },
    "features": {
        "bot_user": {
            "display_name": "lightbeam-privacy",
            "always_online": false
        }
    },
    "oauth_config": {
        "scopes": {
            "bot": [
                "channels:read",
                "channels:history",
                "channels:join",
                "channels:manage",
                "chat:write",
                "files:read",
                "groups:history",
                "groups:read",
                "mpim:read",
                "groups:write",
                "im:history",
                "im:read",
                "mpim:history",
                "team:read",
                "chat:write.public",
                "users:read",
                "users:read.email"
            ]
        }
    },
    "settings": {
        "event_subscriptions": {
            "bot_events": [
                "file_created",
                "message.channels",
                "message.groups",
                "message.im"
            ]
        },
        "interactivity": {
            "is_enabled": true
        },
        "org_deploy_enabled": false,
        "socket_mode_enabled": true,
        "token_rotation_enabled": false
    }
}

1. Paste the copied manifest in the text box below and click on next

1. Access Socket Mode: Navigate to Socket Modeand look for the section titled Connect using Socket Mode.

2. Generate App-Level Token:

• Navigate to the Basic Information menu

• Scroll down to App-Level Tokens and click on Generate Token and Scope, fill the name of token and assign the connections:write permission.

Click on Generate

Copy this App Token using Copy button.

1. Installation of Application in Workspace:

• Navigate to the Basic Information menu.

• Click on Install your app to your workspace.

• Select Install App (or Reinstall App if it has been previously configured). This will direct you to the My Workspace authorization page.

• Click Authorize to grant permissions.

1. Retrieving the Slack Bot User Authorization Token:

• Go to the Install App menu.

• Copy the Bot User OAuth Token.

1. Add an app to your Slack private channels (Optional).

   1. Create a private channel with the name: pii-notifications and add your bot to it.

2. Register Slack Data Source: Now, in your LightBeam app, register the Slack data source using the app token created in step 7 and bot token created in step 9.

About LightBeam

LightBeam automates Privacy, Security, and AI Governance, so businesses can accelerate their growth in new markets. Leveraging generative AI, LightBeam has rapidly gained customers’ trust by pioneering a unique privacy-centric and automation-first approach to security. Unlike siloed solutions, LightBeam ties together sensitive data cataloging, control, and compliance across structured and unstructured data applications providing 360-visibility, redaction, self-service DSRs, and automated ROPA reporting ensuring ultimate protection against ransomware and accidental exposures while meeting data privacy obligations efficiently. LightBeam is on a mission to create a secure privacy-first world helping customers automate compliance against a patchwork of existing and emerging regulations.

For any questions or suggestions, please get in touch with us at: [email protected].