This article provides a brief overview of what is captured in Slack Archiving.
Available Content for Capture
The content that Zix captures includes the following:
Profile snapshot of users in a monitored workspace
Public Channel messages sent by users in a monitored workspace
Private Channel messages sent to or by the Owner/Admin of a monitored workspace
Direct messages sent to or by the Owner/Admin of a monitored workspace
Shared File message includes attachments from Direct messages and Channel messages
Message Subject-lines and Captured Headers
View captured Headers by clicking “View Headers” checkbox in ZixCentral Message Viewer:
x-erado-env-mail-from: workspacenameworkspace@domain.com
x-erado-direction: Out (outbound from the user)
x-erado-source: slack.com
x-erado-sm-acct: user@domain.com (Business email address of account in workspace)
x-erado-post-date: Tue, 12 Jun 2018 15:09:28 (date/time of post)
x-erado-capture-date: Tue, 12 Jun 2018 16:04:07 (date/time of post captured)
The types of posts have the following details in the subject line of each item.
Profile -- Subject line: “Slack Profile of [User]”
x-erado-media-type: Post
x-erado-media-post-type: profile
Direct Message -- Subject line: “Slack Direct Message of [User]”
x-erado-media-type: Post
x-erado-media-post-type: message
Public Channel Message -- Subject line: “Slack Public Message of [User] in [Channel-Name] channel”
x-erado-media-type: Post
x-erado-media-post-type: message
Private Channel Message -- Subject line: “Slack Private Message of [User] in [Channel-Name] channel”
x-erado-media-type: Post
x-erado-media-post-type: message
File Attachment Message -- Subject line: “Slack Shared File of [User]”
x-erado-media-type: Post
x-erado-media-post-type: message