To specify Automated Workflows default settings:
- Log into Incident Response.
- From the menu, select Settings.
- On the Settings page, select the Automated Workflows tab.
- For automated workflows with email notifications: If you want to use the same Security Team Email you specified in Manual Remediation settings, select Yes. Otherwise, select No and enter a new Security Team Email for a single person or distribution list.
- For automated workflows with Slack notification: To receive Slack notifications, you must specify the webhook for Slack. For more information on how to set up incoming webhooks, see Setting up Incoming Webhooks for Slack .