Collaboration Extension

overview the collaboration extension is a collection of bundled components to create context aware messages from predefined templates to send to external messaging systems, such as email, slack, and/or microsoft teams for processing by swimlane, or non swimlane, users these messages can trigger an action based on an arbitrary amount of user defined choices, such as approve , confirm , deny , or request contact in this way, non swimlane users can participate in security workflows by responding to turbine generated messages capabilities the collaboration extension can craft message templates in the collaboration template manager application using mustache syntax example {{field display name}} drag and drop the collaboration extension applet into any application for your use case load, modify, and manage the resulting message in the collaboration extension applet before sending (or send) the message automatically after loading use the dedicated and re usable collaboration message sender application designed to send messages over a variety of communication channels (slack, ms teams, email) and handle action button responses from the recipient send messages to one or multiple recipients across one or multiple communication channels common use case examples some common use cases for collaboration extension include practitioner event notification notify a team of practitioners (for example, security analysts, vulnerability analysts) across a desired communication channel (slack, ms teams, email) that an activity has occurred examples of possible activities are specific alerts being generated, cases reaching desired checkpoints, or a new vulnerability being detected user centric triage practitioners can automatically, or on an ad hoc basis, send details of some observed activity to non swimlane users the message can include buttons that the recipient may choose between clicking these buttons informs the invoking record in turbine and facilitates further automation as desired action approvals when approval is required to perform an impactful automated action, the collaboration extension provides for a pathway to request and receive that approval from a decision maker, without additional swimlane practitioner intervention sending confirmation of receipt messages send a message to a non swimlane user that something has been received in turbine for example, this can be useful to auto reply when a phishing email is submitted to the security team